Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
File:                     t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json)
Hash identifier:          dNInEOy3V3CabnAOeDa+3TQotaootqzf/7g3hEEhEH0=
Subject key identifier:   CC:FD:B0:D5:F3:8C:A3:40:2C:86:41:20:77:6D:00:3A:11:EF:6B:6E
Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36
Certificate issuer:       /CN=b7d296d69059457be39c3c82466aceed02766836
Certificate serial:       019A4D73EFE4B4F3DF94360338853C8F5ADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
Manifest number:          07FE
Signing time:             Tue 04 Nov 2025 06:00:34 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:34 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:34 +0000
Files and hashes:         1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: tL7UkwCtmHq52B3LZEm+3JDcTbP8DP6PQ7B7tvh9Z3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:ef:e4:b4:f3:df:94:36:03:38:85:3c:8f:5a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7d296d69059457be39c3c82466aceed02766836
        Validity
            Not Before: Nov  4 06:00:34 2025 GMT
            Not After : Nov  5 06:00:34 2025 GMT
        Subject: CN=ccfdb0d5f38ca3402c864120776d003a11ef6b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b7:f3:ad:a1:c6:3d:8f:b7:92:15:ce:b4:e4:
                    3f:3c:b2:0c:d1:6b:ff:33:96:05:2b:3f:5f:7b:89:
                    f2:bb:c9:8b:22:2e:86:1f:68:0b:56:ab:97:7a:7d:
                    ed:6b:7b:b8:b7:94:cd:62:4b:e5:e2:83:4a:38:96:
                    ae:be:2b:b7:3b:c0:b4:cf:14:e6:72:da:61:30:75:
                    96:05:9e:99:9b:8d:82:12:6c:2f:07:90:ff:e3:b0:
                    73:1b:43:ef:45:d9:79:73:01:68:f4:fe:78:3c:d3:
                    6c:f2:ca:13:6c:21:2c:56:1e:19:d8:e3:70:1d:00:
                    7e:3f:f1:97:bf:f9:a5:2d:8a:6c:72:98:f9:d3:bf:
                    3b:84:e8:8c:29:f5:a9:4d:bd:49:5b:f1:e3:62:82:
                    b5:93:5d:d4:ef:45:64:de:27:97:ee:1d:ae:1a:4a:
                    fc:4e:0a:1f:72:cc:ae:c8:92:4f:be:bf:74:b7:7f:
                    e5:88:73:a3:9a:f9:76:d2:35:97:b0:74:11:3a:c3:
                    34:1f:4e:7d:a3:7e:a1:ae:2b:7e:cd:75:40:57:2e:
                    7c:89:84:29:f9:4f:c7:0e:aa:19:d7:7b:f9:79:94:
                    be:0c:d2:7c:d9:72:6e:8c:ef:10:90:eb:c2:eb:48:
                    c8:8c:b2:f4:b9:e1:19:01:87:b7:98:f2:d6:c1:b1:
                    9c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FD:B0:D5:F3:8C:A3:40:2C:86:41:20:77:6D:00:3A:11:EF:6B:6E
            X509v3 Authority Key Identifier:
                keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:39:d0:2a:c7:75:ff:52:f4:7b:51:ab:9f:9b:08:75:a3:
         d7:d9:66:b1:94:45:2b:03:4c:ec:d7:94:74:b0:78:fe:4f:27:
         13:a6:0c:16:af:35:93:b7:9c:08:aa:46:31:bd:0a:68:7e:67:
         c9:1f:95:e7:64:52:74:95:b2:2a:fa:9e:f3:41:53:8b:80:70:
         a7:52:e4:11:41:32:21:35:f5:18:4c:00:61:01:be:45:97:0b:
         3e:fe:81:4b:bb:17:c6:af:95:6e:ba:a4:03:79:f8:6a:c3:c3:
         0c:01:1f:fa:d1:f8:da:af:bc:96:de:f2:6e:93:aa:2f:8d:de:
         a1:56:e5:a2:7e:3c:19:ed:84:b7:ec:37:40:c0:86:ad:8c:37:
         ca:24:3c:98:ff:09:b3:ab:bf:6c:d1:bc:f1:d3:ac:d6:ff:da:
         17:d6:13:81:27:d2:43:8c:27:d0:0d:0e:b1:a5:a6:fb:fc:aa:
         d4:be:fc:15:d6:bc:94:ed:da:03:91:41:5e:d3:23:e6:5b:60:
         72:cf:47:aa:5f:1c:f2:43:1d:d3:aa:41:52:38:4a:05:39:0b:
         7a:6e:40:43:af:8d:83:a7:60:86:41:a0:a1:8f:eb:ee:76:33:
         f6:36:59:84:f2:49:4f:83:bf:31:39:33:86:fe:56:dc:6d:62:
         ad:f6:b3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:17:40 2025 by rpki-client