Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File:                     ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier:          JzRhenpJrfbl+CIGJ8/AOXCMpbi30qUPJ1WpYoE3mqc=
Subject key identifier:   F8:7B:57:F8:50:B4:14:5F:9F:23:B5:F9:C9:AD:6B:86:98:68:AA:AC
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       019A4E18FF05BFCF27E14AFBA60110AF60CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number:          0924
Signing time:             Tue 04 Nov 2025 09:00:52 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:52 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:52 +0000
Files and hashes:         1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: rjDjr6PW7tswy//HWRMuG2wxj/o5bTTRycUnPHs7fDY=)
                          2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:ff:05:bf:cf:27:e1:4a:fb:a6:01:10:af:60:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Nov  4 09:00:52 2025 GMT
            Not After : Nov  5 09:00:52 2025 GMT
        Subject: CN=f87b57f850b4145f9f23b5f9c9ad6b869868aaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:30:fb:ad:f4:3b:9d:c4:45:4a:0f:54:ab:
                    10:47:d9:25:63:ee:98:3c:00:ff:ce:b0:90:3b:03:
                    f0:12:ce:db:36:d9:9c:6f:1c:c2:b6:41:e1:e4:46:
                    c8:da:80:15:3e:f5:ab:f0:57:fc:32:4e:43:62:ac:
                    5d:88:f2:b6:df:c2:56:85:33:44:b3:82:82:65:d5:
                    f5:cb:b6:21:41:67:a4:10:d1:d8:df:f3:00:cf:0f:
                    7c:de:e6:79:3a:d2:ad:3b:b9:d6:60:eb:8f:a6:75:
                    c5:18:7c:1d:44:85:7d:41:14:f2:be:72:f1:13:96:
                    ea:fe:e1:27:60:da:66:ff:57:23:7e:df:2f:57:0a:
                    eb:ad:d6:8c:cc:1e:eb:03:7d:97:a2:8d:4f:33:a3:
                    b7:a8:cd:e1:ee:b7:7a:59:92:b1:55:7f:ce:8a:f9:
                    42:60:de:7a:c3:d3:f2:dd:27:3f:a9:22:c0:f8:6d:
                    a7:bc:ab:5d:e1:13:d4:2e:e2:cd:70:e5:ec:c6:78:
                    5c:a4:05:70:e0:8c:f7:51:02:67:1c:e1:72:aa:27:
                    10:0d:91:e6:54:87:6d:05:08:3c:1f:bc:d4:d5:96:
                    d7:a7:ac:06:a1:8c:3d:91:15:c2:7d:8d:7c:94:fd:
                    8a:8b:72:ef:46:ae:60:77:42:31:8b:9c:c2:88:f1:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7B:57:F8:50:B4:14:5F:9F:23:B5:F9:C9:AD:6B:86:98:68:AA:AC
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:57:f2:92:f7:99:a2:45:5b:c3:ac:c6:2e:85:db:db:35:
         1b:56:5a:e4:d5:34:a5:fc:af:a2:51:b7:80:23:e1:33:90:85:
         4c:00:cb:fa:9d:c0:d0:cd:f9:71:30:29:da:35:1d:b7:c2:4e:
         7e:d1:ea:63:7a:f8:da:51:0a:e2:9a:59:34:af:9a:e8:d4:0c:
         0b:f7:b2:e1:43:ff:b7:5f:0e:d3:2c:53:9f:b8:f7:fd:30:34:
         06:c8:b8:b6:b8:0c:cd:31:e7:11:f1:ba:08:24:ce:e8:82:fa:
         70:61:dc:5e:ad:4e:9e:e0:9c:60:9b:e2:73:04:4d:3d:2e:fc:
         83:25:78:cd:34:f0:a5:09:18:ce:bb:4b:c5:3c:da:7c:e5:0b:
         26:14:33:bb:30:01:b6:b0:c4:60:c7:e3:d7:70:38:85:fa:b8:
         e1:a1:e3:e4:14:97:cf:85:1b:c5:fd:c4:80:b7:65:28:22:67:
         a8:98:20:4f:aa:69:46:1b:2b:4d:d2:56:25:ee:df:f3:8b:19:
         98:c5:76:97:54:af:18:49:3a:53:ca:83:7b:eb:70:d8:d7:48:
         5c:9b:39:76:f8:aa:0b:70:ac:9e:54:6e:53:a8:98:9b:ad:12:
         24:0b:22:9a:1e:55:3d:87:32:7e:6d:08:67:fb:a5:78:67:95:
         57:51:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:06 2025 by rpki-client