Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          e5i9xcVi510w4jLEnkC3it1dDW669OdL2Tm+63KFV7c=
Subject key identifier:   AE:DB:17:9E:E5:75:2E:38:97:32:BD:F7:A9:F9:1D:4F:26:33:CE:1A
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       019A5752C20D2649285750EB279B71CAC943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0660
Signing time:             Thu 06 Nov 2025 04:00:32 +0000
Manifest this update:     Thu 06 Nov 2025 04:00:32 +0000
Manifest next update:     Fri 07 Nov 2025 04:00:32 +0000
Files and hashes:         1: 1iEj79HjJmqaWkGf361U7nZQikY.roa (hash: 94aaNrCAEDrHjoHsfGX3cHWK+s0OW99qZZJRJsNm9lg=)
                          2: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: IbgL/60nnJ+pRK380z/G8ECh88iP2J+I6cJxtRFnfAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:57:52:c2:0d:26:49:28:57:50:eb:27:9b:71:ca:c9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: Nov  6 04:00:32 2025 GMT
            Not After : Nov  7 04:00:32 2025 GMT
        Subject: CN=aedb179ee5752e389732bdf7a9f91d4f2633ce1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:af:77:4f:11:af:ce:3d:95:c8:2d:af:13:
                    76:c8:e6:ad:06:0f:a4:76:b3:22:49:8e:26:9b:e6:
                    f5:6f:9d:21:50:63:56:ba:2b:27:8a:3f:56:4d:05:
                    b4:a2:7a:97:cc:2b:bc:58:3b:89:99:51:df:6c:de:
                    40:fc:bf:9c:04:c4:23:5c:c5:0a:96:f5:f0:eb:04:
                    bf:69:91:82:6c:34:ed:e3:dd:aa:87:54:98:df:56:
                    20:1c:aa:1a:f4:a5:f5:dd:7a:ae:78:95:98:8e:b5:
                    1a:31:d3:2c:8c:a6:d8:cd:cd:b0:fe:bf:5b:44:ba:
                    14:4f:b1:8e:69:74:b1:46:bd:8c:00:93:80:9d:94:
                    d8:23:cc:00:7a:38:21:c2:07:44:f4:f1:66:57:ed:
                    19:cd:dc:b7:d0:a8:c6:5c:ae:b6:fb:4f:02:9d:42:
                    9a:d1:65:55:c5:59:d5:a5:e0:4d:2a:07:3d:bc:06:
                    9b:48:1d:49:a8:c5:6f:e5:58:5c:ca:46:b7:d5:e5:
                    b0:85:9d:96:8e:41:86:7b:52:df:c9:01:b3:9e:17:
                    ae:56:7d:a0:27:05:4a:d6:d6:62:05:d1:db:f5:cd:
                    e2:ab:b3:68:01:c8:39:01:13:a2:4f:09:bc:a9:e4:
                    c3:0c:ab:d4:61:57:e9:f1:e6:5b:55:38:b4:c1:14:
                    6d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DB:17:9E:E5:75:2E:38:97:32:BD:F7:A9:F9:1D:4F:26:33:CE:1A
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e1:35:a2:5e:dd:2e:8b:08:a0:c2:72:ca:ad:d2:27:20:a5:
         81:d8:68:d1:ea:3f:e1:41:35:5b:52:a7:88:9b:d1:b7:95:4b:
         d0:2a:57:fc:73:69:58:b8:71:2e:16:3a:88:15:ca:2b:74:29:
         8c:c7:00:6d:56:9f:23:85:f1:79:de:1a:46:0d:35:e6:2b:0c:
         bb:bc:57:13:7c:a4:6d:39:62:8d:6d:d7:02:e8:99:b6:75:d7:
         1c:c5:dd:2f:4b:cb:98:75:15:60:6f:57:a6:90:39:88:71:27:
         48:d5:b3:a9:21:98:a2:0a:8f:e2:ee:2d:24:90:2b:36:c7:b2:
         be:e3:a4:d0:56:e7:d7:93:0f:a6:e8:78:44:b7:0d:b1:86:cb:
         ab:71:0e:c2:eb:07:78:fc:54:f4:cc:dc:e4:92:f7:02:ca:2c:
         9d:5e:9d:7f:27:56:8c:3f:dd:69:72:87:2a:38:a3:c3:bf:41:
         65:e8:d8:de:20:82:72:99:01:12:61:0c:63:4b:45:df:6e:69:
         74:27:66:30:79:cb:79:95:6b:61:75:bb:b5:bb:43:a6:bc:04:
         42:e1:fe:8f:e7:de:66:64:8e:b8:89:17:20:53:f4:76:ca:7a:
         eb:2d:93:7e:2f:c4:fc:b4:3a:38:63:6a:42:71:a7:fa:17:59:
         c0:71:d2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:39 2025 by rpki-client