Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
File:                     386WGuDhYY50mciKIlWbsgJQIq0.mft (raw, json)
Hash identifier:          E5rabzUD237ElDZTIv1B87QNOyb1TyG4QvFLmaUGDEs=
Subject key identifier:   7B:ED:A2:8E:63:0A:B6:9F:54:9D:63:CA:2F:2A:17:6E:D0:BA:D6:FE
Authority key identifier: DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD
Certificate issuer:       /CN=dfce961ae0e1618e7499c88a22559bb2025022ad
Certificate serial:       019A50E2CEB410CF1123C7A48430B8244A0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
Manifest number:          0647
Signing time:             Tue 04 Nov 2025 22:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:32 +0000
Files and hashes:         1: 386WGuDhYY50mciKIlWbsgJQIq0.crl (hash: E55mZm1lM/WaHN120r/SZX0JdYUTRfRWKLG/6zJvxZY=)
                          2: cW1dQczT5TIbX2h9QMnQvvvgst0.roa (hash: LoF7bKHNx/b/rqvPxychY/FV7Mf6p5uxTp1lxzEa+Sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:ce:b4:10:cf:11:23:c7:a4:84:30:b8:24:4a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfce961ae0e1618e7499c88a22559bb2025022ad
        Validity
            Not Before: Nov  4 22:00:32 2025 GMT
            Not After : Nov  5 22:00:32 2025 GMT
        Subject: CN=7beda28e630ab69f549d63ca2f2a176ed0bad6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a6:62:f6:66:aa:d5:75:8b:bc:ff:99:7d:44:
                    b5:34:42:9e:a1:50:32:23:b5:1d:04:f0:74:05:cd:
                    31:5e:9e:33:c5:6b:f6:df:74:e6:33:c6:5d:f9:f9:
                    2d:07:f5:61:9a:84:de:85:d0:ca:5a:ee:61:0f:dc:
                    09:3c:ef:52:b6:99:be:76:38:ea:23:c6:b0:02:f2:
                    40:08:2a:cc:42:15:ed:b4:e7:ac:80:ec:a3:e8:0a:
                    c9:57:55:a6:d5:6a:24:bf:50:a5:5d:cd:fd:af:1a:
                    a4:95:41:fe:a4:71:71:10:94:29:9d:2a:d2:2d:92:
                    d3:e0:f7:34:93:99:c7:31:55:12:ab:48:14:0a:51:
                    d5:42:5f:32:51:4c:9f:93:a7:2c:2b:a0:a7:8f:bc:
                    bd:b2:7f:94:91:0b:ab:97:d9:4a:e9:48:01:02:35:
                    0a:93:29:20:6a:98:3d:0c:d4:fc:f5:c1:4b:a8:72:
                    a8:a9:99:e0:4e:c4:39:6a:23:85:91:aa:ff:02:fb:
                    f0:d9:41:1e:f4:eb:20:59:2f:2c:d4:4f:18:29:58:
                    a3:d8:97:6c:fc:80:c6:0f:7b:eb:39:b5:43:01:3e:
                    75:8e:90:8d:52:69:79:11:3f:d3:93:b1:3f:31:63:
                    fd:44:7e:c4:42:71:c3:4d:67:93:1a:ec:bd:53:68:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:ED:A2:8E:63:0A:B6:9F:54:9D:63:CA:2F:2A:17:6E:D0:BA:D6:FE
            X509v3 Authority Key Identifier:
                keyid:DF:CE:96:1A:E0:E1:61:8E:74:99:C8:8A:22:55:9B:B2:02:50:22:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/386WGuDhYY50mciKIlWbsgJQIq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f16a4a-eaba-4e0e-97aa-e33d616f19e8/1/386WGuDhYY50mciKIlWbsgJQIq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ca:15:6e:40:72:a4:90:a2:42:12:75:d4:11:34:87:74:2a:
         ef:14:eb:ae:ab:1f:9e:b2:f3:2d:f1:29:cf:73:9d:68:ec:0c:
         22:23:3c:4a:8a:5d:5d:99:81:39:ff:ed:92:df:21:67:e5:2a:
         83:64:8d:ac:4e:54:a7:76:25:02:dd:c3:cb:39:50:5a:a8:5a:
         53:41:80:25:44:af:59:18:54:0c:80:c3:9a:6f:cf:ef:e8:06:
         0d:6c:2b:f0:a5:6c:0d:3f:cf:62:7d:08:07:e7:1f:1e:83:3e:
         8b:15:a6:1d:9d:36:6d:c5:87:3d:ad:45:4c:7a:fe:4f:0b:6c:
         2f:c6:7d:71:20:9a:1e:66:a4:fb:b3:c3:f6:6d:f7:ee:dc:8d:
         ed:22:d2:6b:6a:12:9f:6b:cc:fb:27:bc:bc:40:41:a8:2c:e8:
         b7:6e:c5:f2:1b:72:d0:19:98:08:83:81:58:b7:26:38:7f:4a:
         55:d0:6f:93:f2:3a:1f:f7:ad:ee:cc:22:d6:01:ad:99:d2:ed:
         e4:bb:48:fb:45:7b:da:77:5d:ec:b5:fa:f6:71:cd:56:9d:55:
         8b:fd:2d:fd:97:86:d3:50:ba:43:72:45:47:8a:35:df:2e:18:
         05:37:86:d3:12:7b:86:74:20:bf:12:b7:12:e6:b6:ae:de:06:
         c8:97:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:26 2025 by rpki-client