Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
File:                     7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft (raw, json)
Hash identifier:          JynWr0nJ+myNPUz/kWDWoh3kZRqRj1+DnkTI+DPQh1A=
Subject key identifier:   90:76:FD:C9:9B:89:F2:23:70:4B:B9:7A:13:39:7F:09:5E:12:8C:68
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Certificate issuer:       /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial:       019A4DE2148465579BE07D81D169FF1B09F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
Manifest number:          0727
Signing time:             Tue 04 Nov 2025 08:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:53 +0000
Files and hashes:         1: 5klL4oJYCAWVCtSt4Aa3ZqfkGO4.roa (hash: qBVepds6Syb8DaPWB6RynfxxSA3Sp6OU8dF9D31HEW4=)
                          2: 7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl (hash: knZGLW961q/lm3L8EmAkNQHw7qo0+BaQwF4wBb59Aao=)
                          3: 8WMbOpSCq-43yrjp-Gue986sGls.roa (hash: lSFJ6DNUnrryZBRZ4iwSdCLZNyBNPcmv/tCrUVWgz2s=)
                          4: E6SsxrL0YU9sVh9I8GUbKrOvT1M.roa (hash: YCaqr7sid2K9NSVR3DjQ0cVKpB+Nv1AlUmt5Gzw4TLs=)
                          5: G40JELkFkjinZ7Bg4-gGMDe46ac.roa (hash: DxEJ7/YxUtp6mDjGz6vAkm+fJcRrhUMEE1ib29ZnNNg=)
                          6: dqHEZ0oARNoaVvG3IlOzVbCxw8E.roa (hash: Lu4R8BGvmtKvcPKaLg2jGVkmpU76/ij/EjZ+FuotBOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:14:84:65:57:9b:e0:7d:81:d1:69:ff:1b:09:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
        Validity
            Not Before: Nov  4 08:00:53 2025 GMT
            Not After : Nov  5 08:00:53 2025 GMT
        Subject: CN=9076fdc99b89f223704bb97a13397f095e128c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bf:8f:5e:3f:2d:87:30:ee:ab:b4:76:ed:f9:
                    76:56:48:0a:6e:69:69:75:b9:52:cc:53:01:0e:6c:
                    59:0e:60:b4:e5:3f:7f:58:59:be:20:83:91:ad:a8:
                    39:51:f7:ab:14:10:77:07:85:47:9b:9e:19:43:c1:
                    cc:a1:9d:b4:d5:f1:e4:b0:3d:24:d8:72:ea:38:b0:
                    94:05:9a:9f:c9:65:7f:2e:1d:49:9d:12:dd:20:85:
                    20:41:c6:f0:bf:17:01:26:54:c1:03:ad:5a:63:84:
                    d1:c7:a2:3a:b5:ed:cf:63:30:dc:ae:ba:b0:b7:e4:
                    47:43:58:9a:cd:03:28:0c:fb:1f:94:ff:99:05:4d:
                    f7:19:97:49:98:45:f5:e6:e8:ae:4f:83:64:6c:60:
                    9b:68:8e:37:a3:df:56:88:dc:3a:64:fe:e5:47:9a:
                    b9:3b:42:e5:50:ff:ec:1c:f7:c8:36:b8:27:f2:f4:
                    b8:02:0a:9e:07:5b:9b:4b:9b:fd:48:ab:a9:6e:b3:
                    76:3f:4b:6a:ce:6b:88:19:35:ff:b0:67:7d:15:f7:
                    3d:21:a3:95:36:96:98:3a:6a:32:f5:6c:7e:78:c5:
                    96:ba:2b:bf:7b:ad:37:2c:1c:21:8e:a2:2a:a5:65:
                    c5:cb:9d:7a:a8:df:42:e4:3e:19:09:94:76:c3:b4:
                    17:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:76:FD:C9:9B:89:F2:23:70:4B:B9:7A:13:39:7F:09:5E:12:8C:68
            X509v3 Authority Key Identifier:
                keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:5b:b2:f8:8a:27:4a:9f:f4:8b:19:a8:bf:fd:b9:d8:d7:a7:
         b6:15:84:32:65:04:15:18:a1:a0:5e:ce:44:7e:ce:ad:72:12:
         a6:e8:fb:e3:fa:1a:0e:0d:3e:9e:14:80:a7:a5:f9:34:3d:a3:
         2b:8a:27:8a:ea:f7:4b:a0:3a:2a:25:66:60:02:44:62:d1:a3:
         74:68:b0:5a:e3:ca:ac:f4:3d:9b:b6:f2:37:24:cd:97:2e:e2:
         c6:ea:9e:21:1a:5a:b8:d0:82:3e:fa:9e:1d:2a:93:d0:aa:f1:
         e7:4c:15:ce:61:6e:33:45:2f:33:70:41:f0:e4:d0:1f:67:ff:
         b6:96:6e:a5:e4:79:a1:1e:fe:65:d6:3b:9e:0f:8b:28:84:70:
         e3:0c:87:89:c0:71:68:64:ea:3e:d7:03:c0:70:b3:03:b0:e6:
         ef:ba:9a:eb:91:59:fa:f0:d0:a6:ab:94:a2:5b:6b:f9:65:a6:
         bc:50:0a:60:4e:50:e6:cf:31:fe:04:25:7b:0a:05:5a:df:96:
         da:1b:1e:e8:71:b0:e9:6b:78:1a:69:f3:50:2e:7a:43:0c:ec:
         e3:31:b2:37:a3:52:89:53:47:7f:19:9b:c3:97:d5:30:0c:51:
         08:0a:fe:c8:ac:54:a1:6e:56:31:7f:22:ae:e0:4f:76:25:dc:
         e7:dd:b2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:54 2025 by rpki-client