Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          x/avwL8WIcNrvRhM6jRfls4aeShbTOsPejP5EjwTai0=
Subject key identifier:   B7:59:77:EB:AB:A7:60:88:36:66:64:6C:EF:E4:A9:71:7D:7A:46:C6
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       019A53AD2115C425BD06F4819A57608FAAFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          1781
Signing time:             Wed 05 Nov 2025 11:00:46 +0000
Manifest this update:     Wed 05 Nov 2025 11:00:46 +0000
Manifest next update:     Thu 06 Nov 2025 11:00:46 +0000
Files and hashes:         1: EkAtT1wisUb57TFJYIYcJsxKwsk.roa (hash: bTDaJJ3OE5tSiwj9edVtEIcHo7Qfr7K+HpTgz6mXWHU=)
                          2: H401Lqlj2gbFoYf6OtBoSN06cFw.roa (hash: vYELwnReHKGr6B9/fDrX/dIYrSBT2mFYuU7np1Kq32A=)
                          3: M3stNuz4pD7ZjpMskqzv9XlCj9A.roa (hash: NMOxvF7KRmh06hpPpSGd+qY4LB/onM0QHYCbQ+IenlY=)
                          4: UaajUBdy4UIZQWAc-WUnNkjyYv4.roa (hash: JCNjXurc6Io2gtx+nJaT/k0gUejH60kmigdqrXZ8+XM=)
                          5: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: rDJtKz90a9YGx59Yzxmah0YCBJLX25fjv0lHUjUX2A8=)
                          6: wuzH2my_mYDAlouZ5aRNnbo5Kzg.roa (hash: 8mZfF16h11ohkGa7jPqqzWnLZjCYH45hphmVsvoXp/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:ad:21:15:c4:25:bd:06:f4:81:9a:57:60:8f:aa:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Nov  5 11:00:46 2025 GMT
            Not After : Nov  6 11:00:46 2025 GMT
        Subject: CN=b75977ebaba760883666646cefe4a9717d7a46c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:45:50:cb:f9:ee:89:4e:42:f2:3b:be:15:
                    19:df:5b:49:56:78:fc:96:6a:0c:ed:a8:e0:53:d5:
                    1b:39:24:77:59:d2:45:f2:48:cc:58:95:bf:ea:36:
                    65:ca:a3:64:ca:c2:fc:c9:1d:d3:44:2a:c8:12:61:
                    b8:7b:11:5a:89:8c:c8:f0:1a:5a:34:17:00:48:3d:
                    86:ac:b4:58:4d:03:0a:88:15:5b:e9:60:91:31:3a:
                    f9:c6:bf:1b:b7:d5:47:2c:97:43:de:7a:2c:8a:c1:
                    af:e0:54:b9:6f:a0:8f:b6:61:5e:93:72:e7:78:76:
                    ac:a2:08:a7:9a:30:f1:88:80:fa:07:3b:dd:47:ce:
                    e9:2b:09:b9:3c:f6:6a:31:c3:59:e9:e1:5c:de:4e:
                    9c:de:a5:2f:06:1f:a0:15:7b:1c:e1:4d:ff:d5:0d:
                    32:d4:12:0c:67:81:1c:ab:43:31:3c:4e:48:42:03:
                    dc:91:17:fe:a2:70:c7:5c:91:5b:32:89:37:23:2e:
                    83:49:41:5d:33:8f:28:bd:03:68:3c:c7:b6:40:ea:
                    24:c2:bf:1e:7a:87:1f:47:8a:d0:d7:e1:33:b4:4e:
                    58:ef:b7:0e:38:ad:91:11:8f:81:a3:3a:8d:72:65:
                    0f:3a:de:7e:bb:6c:f5:d0:db:35:c0:d1:26:46:55:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:59:77:EB:AB:A7:60:88:36:66:64:6C:EF:E4:A9:71:7D:7A:46:C6
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:05:40:95:ae:e1:36:b6:e2:4b:5a:6d:6c:57:f7:d8:a9:75:
         f8:08:c1:21:22:1a:72:e3:26:99:e1:a1:04:b6:c7:27:2f:22:
         b6:81:0d:86:4a:34:69:6a:23:dc:6a:e1:56:10:0a:0a:6f:7a:
         d6:55:31:70:49:de:02:8a:74:75:82:e3:00:40:9f:2e:4e:49:
         8e:ee:04:40:9a:92:40:da:a6:7e:35:78:c4:a6:c1:f0:66:a5:
         65:d7:c8:03:be:ed:45:bf:68:57:bf:79:1f:0c:c2:43:f7:9a:
         80:15:57:3c:44:f9:da:e1:3a:20:f1:f3:53:76:76:10:8d:5c:
         a4:be:dd:e6:cb:80:4d:32:be:50:56:30:5b:00:da:7c:fb:8a:
         7b:52:67:58:a8:f9:c8:6c:0e:57:67:5b:2a:f4:e1:02:ca:1c:
         3a:e6:8a:5c:88:d1:5e:e6:f4:22:9b:09:6a:75:a9:54:5f:23:
         3d:4d:c0:fc:8e:4f:e5:fe:e6:34:c6:97:36:47:17:64:8e:ae:
         47:5e:28:2f:72:0a:44:9e:df:1e:82:b7:12:c9:7b:11:79:71:
         77:ba:8c:9a:0a:23:5c:de:50:ec:d0:37:50:d9:87:5f:a2:ea:
         d9:57:c2:e8:05:54:d0:5f:ad:b0:ec:93:60:02:60:e3:bd:db:
         ef:ba:c8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:50:50 2025 by rpki-client