Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
File:                     7AWYaJfQJOSMfNJeGJHEII_zu7I.mft (raw, json)
Hash identifier:          faCx94fZkXrHztqlsjA1Sh7aEVC5KUoOB6Ncvkbr/L0=
Subject key identifier:   7B:EB:06:F6:D3:F0:CA:84:7F:F0:91:D2:3C:94:F0:21:89:36:82:D1
Authority key identifier: EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2
Certificate issuer:       /CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
Certificate serial:       019A4FD01493F0BDDCAF6C5E7C2C6C965931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
Manifest number:          10CB
Signing time:             Tue 04 Nov 2025 17:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:28 +0000
Files and hashes:         1: 1J3XFfkD_kgt0cIOeJk8XXDDsy8.roa (hash: AP/u0xAGOiTwGCk0a0xRx1BeOTsEHzjmgZ5lrGRtErA=)
                          2: 7AWYaJfQJOSMfNJeGJHEII_zu7I.crl (hash: VV+o1jXv+sYv11VVWflC2CQXXaEtN2QbGdhcFxBo0lg=)
                          3: V4u5rSLjbOaDQXVdqSxPdXhvwuk.roa (hash: WAasJD4vjDPzicaQnRHt7jsAhdCvqScDULpr9cuHpJ8=)
                          4: kl2WbCF8iY1s6JmhzyE-DfoqlVU.roa (hash: RNHIQDgmoNeDynP36HRc36UBOKT5j+Ec+ZMFlX21lk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:14:93:f0:bd:dc:af:6c:5e:7c:2c:6c:96:59:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec05986897d024e48c7cd25e1891c4208ff3bbb2
        Validity
            Not Before: Nov  4 17:00:28 2025 GMT
            Not After : Nov  5 17:00:28 2025 GMT
        Subject: CN=7beb06f6d3f0ca847ff091d23c94f021893682d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5d:98:63:98:28:0d:98:f6:cc:32:2b:2d:5c:
                    78:41:1a:1d:67:62:4a:f8:1d:b7:87:87:39:d3:3c:
                    3d:0c:31:e9:af:dc:f0:2f:d8:c2:20:54:19:2b:c8:
                    e0:cd:bb:fe:89:a9:06:20:c4:a9:de:4c:df:05:45:
                    1d:49:48:29:53:05:ec:5f:aa:78:8a:c2:4f:46:ea:
                    21:16:75:d5:4d:7f:fd:a4:a6:76:2a:58:f8:64:6d:
                    cf:3c:7c:c6:33:94:3f:40:75:21:1a:2b:2d:08:42:
                    1c:f6:d7:64:5b:81:05:4d:59:11:47:01:ab:a7:36:
                    bc:53:b6:89:ca:21:05:88:97:99:06:44:e7:fe:ea:
                    c9:ac:8d:c4:d6:ca:63:b5:3b:f5:a6:66:b0:44:d6:
                    15:7b:ec:10:1a:88:20:ab:da:b2:46:63:82:1f:71:
                    11:9a:43:d2:d8:dd:d2:47:c2:50:7f:d3:49:8e:2e:
                    b0:1e:02:95:18:19:6b:7a:9b:b7:15:94:0a:09:18:
                    7d:a0:8c:4c:c1:2c:37:11:67:dc:87:19:7e:26:41:
                    57:78:1e:74:02:08:99:79:9c:8b:ca:ae:8f:6c:aa:
                    7a:dc:87:f5:df:73:51:01:83:c9:ea:d3:d3:8a:5e:
                    74:42:79:d1:a2:47:df:ec:e9:7c:0f:d2:ba:6f:dd:
                    a7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EB:06:F6:D3:F0:CA:84:7F:F0:91:D2:3C:94:F0:21:89:36:82:D1
            X509v3 Authority Key Identifier:
                keyid:EC:05:98:68:97:D0:24:E4:8C:7C:D2:5E:18:91:C4:20:8F:F3:BB:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7AWYaJfQJOSMfNJeGJHEII_zu7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ad6af0-005f-43a3-aa9d-766d1f32433c/1/7AWYaJfQJOSMfNJeGJHEII_zu7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:48:9d:e9:15:f1:cf:65:9b:b9:03:d0:4d:3f:c0:73:a8:a2:
         27:ab:65:c1:a5:bd:a1:a1:f0:11:e8:70:ef:cf:80:92:cd:d7:
         d5:5f:c2:89:2f:bc:de:86:e6:d2:79:e3:8f:e1:75:04:2f:f7:
         e8:9b:25:45:ff:b9:5d:71:31:78:1a:78:8c:99:70:0b:cf:f8:
         f6:20:43:63:9d:50:3a:5f:20:01:07:0e:a5:1b:94:ac:f0:79:
         a5:71:b8:39:d8:ab:d0:9e:94:33:4f:5c:a4:c7:29:8b:22:11:
         be:6a:1b:0e:82:49:b4:ac:d5:8f:f2:ef:d8:df:28:a0:95:56:
         28:f9:59:91:75:64:a2:09:1a:fa:5d:5f:ec:00:a9:ed:fd:f2:
         ad:2b:ab:c3:81:90:ce:27:74:ea:35:9e:67:48:ef:fd:dd:ef:
         44:88:0b:5a:39:78:0c:c0:cd:1b:de:7a:54:af:59:65:65:3f:
         b4:cf:32:b9:7f:a1:c6:71:24:f9:96:da:3c:4e:fb:f6:7f:1a:
         bd:7b:ea:0d:ab:25:db:73:8a:e1:d9:fb:d8:83:c4:8e:db:0c:
         48:fb:30:c1:b5:52:e4:70:c1:d3:fd:59:16:06:dc:6c:3b:44:
         a2:17:10:21:a6:5f:e3:00:2a:2e:a4:40:28:0c:ff:bd:9d:7a:
         fb:17:df:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:52 2025 by rpki-client