Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          zP0HbC3fIiQgO3C4gqCIcNTgvYphjRAjLIIbA8Eri3M=
Subject key identifier:   0E:EC:30:B4:70:46:B4:49:D6:5C:83:23:9D:E7:8A:33:FA:0E:6A:55
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       0199FEEB7F2B5FB5DB8BFF8FD80FD72333BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 00:01:09 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:09 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:09 +0000
Files and hashes:         1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: poPMQIaFRy5F578IB3/PGWuSQpX1fiKXVUeZk9YTOnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:7f:2b:5f:b5:db:8b:ff:8f:d8:0f:d7:23:33:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: Oct 20 00:01:09 2025 GMT
            Not After : Oct 21 00:01:09 2025 GMT
        Subject: CN=0eec30b47046b449d65c83239de78a33fa0e6a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ca:ac:7e:31:45:1e:5f:5b:78:a5:a0:70:a2:
                    0f:7e:86:41:0e:38:5b:e4:c4:57:bd:49:34:bb:9f:
                    ba:73:5c:ef:20:50:88:66:ff:2d:4e:51:c9:c7:13:
                    bf:b8:ea:58:07:48:91:ce:c7:ae:c8:9d:bb:82:2b:
                    e7:b6:a6:5d:36:e1:c8:6f:b8:ec:b1:1c:2b:2b:c6:
                    f9:b0:5e:12:df:2e:87:ed:0f:a0:d9:97:89:36:e3:
                    81:01:e5:7a:97:e8:16:aa:9a:f8:fa:d6:d6:ed:3e:
                    4b:ff:f1:e9:07:56:10:e1:86:2c:df:b5:db:40:92:
                    7c:8a:3b:a2:ec:8d:d7:c7:ef:d9:8e:0b:8a:f5:7e:
                    df:45:a2:fd:54:32:75:f6:e6:26:fb:c1:b3:f3:16:
                    9b:9f:b3:d1:f5:0f:5b:1c:e0:95:57:c1:33:42:2f:
                    c2:67:c3:2e:61:4f:9c:59:08:3e:ac:0d:07:2f:30:
                    38:73:b2:62:ab:54:b8:34:68:87:6f:1b:6d:1e:92:
                    6a:55:6b:3c:a3:da:8f:8e:a8:5c:d5:43:94:45:a1:
                    75:f1:b8:25:98:5c:06:8c:36:2c:d4:a5:84:42:26:
                    34:25:91:c8:4b:63:6e:03:4e:81:b0:57:56:1a:b2:
                    14:22:ce:55:1f:11:36:f5:82:71:27:74:71:da:65:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EC:30:B4:70:46:B4:49:D6:5C:83:23:9D:E7:8A:33:FA:0E:6A:55
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:ed:00:7f:ce:68:ab:76:b3:a5:96:9e:81:6b:78:14:5e:
         b5:22:07:26:4d:e0:e2:62:d3:01:19:9d:b3:82:24:47:0c:79:
         2e:4c:bf:a1:ff:08:27:64:06:b5:b7:04:4d:aa:ff:8d:9e:19:
         12:af:fc:b3:34:39:53:d5:60:d7:b4:75:ad:db:27:06:53:b3:
         8e:f4:7b:27:5a:34:46:7a:ff:14:e4:86:33:78:15:85:58:f0:
         35:33:9a:dc:4a:f7:40:c8:0b:a6:44:34:ec:3c:d0:be:b7:b3:
         d3:da:7a:d8:29:95:2f:38:9a:c6:13:ea:e3:20:77:0c:1f:2f:
         c3:4c:e3:26:0c:7c:ad:7d:8f:8a:9b:c1:b5:2f:ac:23:b8:ad:
         dc:f2:35:dc:67:6d:99:46:93:33:6a:1c:58:1c:32:98:ab:88:
         5b:da:b4:ae:c3:51:c5:65:bc:66:15:0d:65:67:06:ee:e2:2e:
         40:31:8c:20:ea:89:6c:f0:a7:9f:09:b9:f7:f4:5d:b1:54:d0:
         98:1d:88:de:84:7d:12:96:7f:32:03:00:b9:8c:4e:5c:7a:28:
         07:a8:22:f1:d0:f7:d3:73:c1:c8:a1:ec:6c:3e:78:cb:92:84:
         ff:d4:2c:c8:35:b1:82:b0:99:ff:0a:13:b5:6b:25:b4:3f:1a:
         d1:da:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:31 2025 by rpki-client