Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
File:                     7sxM83JBztFGfJGKonbTiLCoLtU.mft (raw, json)
Hash identifier:          2E23YdYpHyNTZjLCtE5grF4i6KFybA23bC4jamHcMy0=
Subject key identifier:   BD:72:EC:BC:D4:08:ED:3A:C0:F7:56:F7:D5:88:9F:E4:28:FD:42:62
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Certificate issuer:       /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial:       0199FEEB9AE7D48B0D90315F1AE44EC2C541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
Manifest number:          16E7
Signing time:             Mon 20 Oct 2025 00:01:17 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:17 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:17 +0000
Files and hashes:         1: 7sxM83JBztFGfJGKonbTiLCoLtU.crl (hash: b99deS3V3P3WJI9LZZyRMlvz0g5cSLTU+IBJdVuQ3FE=)
                          2: CcwLvjGeQXyXQnaJpj6YyosTcMg.roa (hash: 1bzw8ev+Aeq3rTfFEXQzj88XSRZ9dYDMAOUCxZdm2PE=)
                          3: G3AgkSKzlQVVbdRD6eEypeJ5E5M.roa (hash: 31Wbft135lAj6RvQzASMjBguHP4eX2M1a4vm+r9VPa8=)
                          4: dhD00UV1S2BU603uHMfKxDb_KNs.roa (hash: SHt2tijz4Xw2rzyKaUjp8oStHmr3L0LwZ5qN+4ol07o=)
                          5: hztSFe2fWRlmTU4tssnBu-y0WeI.roa (hash: k2WLaKga1DftX/wOd3XsZqhZBsK4rGShhnxmdanGvCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:9a:e7:d4:8b:0d:90:31:5f:1a:e4:4e:c2:c5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
        Validity
            Not Before: Oct 20 00:01:17 2025 GMT
            Not After : Oct 21 00:01:17 2025 GMT
        Subject: CN=bd72ecbcd408ed3ac0f756f7d5889fe428fd4262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0c:a6:98:31:79:ca:a4:3c:7f:65:cc:60:de:
                    c5:8f:d8:ca:0e:1f:91:ae:6e:47:d0:ac:f9:d8:9f:
                    28:e9:55:76:d8:20:77:c4:91:4c:d8:be:b7:35:c6:
                    ab:8e:60:64:e5:15:cb:0a:ca:d6:30:19:a1:47:d5:
                    73:47:86:ff:4a:43:b8:ee:85:14:4e:db:24:94:ea:
                    70:a7:79:de:64:17:9d:3a:46:93:76:57:93:6c:d5:
                    5b:32:7b:95:09:9c:29:81:0d:1f:32:4b:2e:95:ae:
                    5b:24:59:d3:56:31:87:5a:d8:cb:bc:63:31:4c:c7:
                    5a:48:50:b5:ac:02:ff:77:83:40:37:12:5f:d2:52:
                    45:d7:f4:bf:fb:2d:91:89:1e:e9:62:ce:ff:be:cd:
                    c9:dd:63:fd:27:44:15:18:5b:49:dd:05:82:66:c0:
                    67:80:db:31:da:ca:b3:65:0f:72:cf:fb:4e:4b:c7:
                    18:c7:1f:cc:d6:d1:7b:86:bf:94:83:50:94:0a:f1:
                    85:a4:3f:4a:92:5e:e5:86:82:df:9f:8c:99:d0:c5:
                    79:e0:b1:f7:15:82:26:57:bb:2e:45:c0:22:63:6f:
                    82:a9:ec:3f:60:a3:dc:f6:6c:fc:fb:f2:8b:ee:76:
                    4e:a7:9a:4c:17:1a:f2:5d:f3:ec:24:7f:6d:dd:ff:
                    ab:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:EC:BC:D4:08:ED:3A:C0:F7:56:F7:D5:88:9F:E4:28:FD:42:62
            X509v3 Authority Key Identifier:
                keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2e:e5:87:ab:64:07:ac:f4:63:e2:db:54:93:80:06:9f:31:
         2f:cb:55:2e:dc:64:9a:b6:b8:32:3f:42:ca:87:9b:65:76:4e:
         18:85:01:02:78:96:71:7a:cc:9f:d8:f7:83:1f:b4:0c:c9:f2:
         6f:8c:5f:78:78:28:81:cb:d2:94:5c:f6:46:9b:f7:f0:69:10:
         20:cf:77:c2:04:10:2f:7d:82:86:7f:38:3c:97:ec:5d:ca:00:
         7d:f0:f4:1b:db:47:00:16:0e:fb:d0:e8:37:0f:64:1b:c6:83:
         bf:42:55:7d:25:37:f2:a1:b5:33:04:8e:6b:cb:dd:26:3b:15:
         bc:39:4d:c6:a5:e7:aa:d7:49:1d:88:0e:1c:a0:70:3b:3c:06:
         72:d7:66:c3:f1:b1:18:0b:1b:b6:31:6e:c8:b3:7d:fa:a7:3a:
         92:9d:6f:76:4d:96:b4:b1:71:de:d8:5e:8e:d6:9e:c1:61:96:
         a7:cc:a1:75:56:98:7d:93:37:cc:40:4d:64:91:38:95:4a:e2:
         08:12:f7:51:c3:d9:98:a0:69:b4:05:5a:25:b0:09:b0:b4:a8:
         17:aa:33:7b:04:23:29:c2:eb:ed:48:30:98:38:eb:be:07:95:
         4b:31:29:93:d0:fa:56:f0:da:d4:64:ac:db:be:01:1c:2e:a3:
         99:fc:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:40 2025 by rpki-client