Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
File:                     7VSy51k1UxJ457rRV8SMiuxD7ug.mft (raw, json)
Hash identifier:          lH+YVJLb8BgQ9Cl+bqbQMEoV8rl4xjOc2dpZZK+Mg68=
Subject key identifier:   02:BE:FA:8D:B8:CB:6F:38:E8:38:41:89:65:CF:35:34:8A:B0:85:CA
Authority key identifier: ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8
Certificate issuer:       /CN=ed54b2e75935531278e7bad157c48c8aec43eee8
Certificate serial:       019A50E443FE8AD8EEDBA631E062BA030873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
Manifest number:          06EE
Signing time:             Tue 04 Nov 2025 22:02:08 +0000
Manifest this update:     Tue 04 Nov 2025 22:02:08 +0000
Manifest next update:     Wed 05 Nov 2025 22:02:08 +0000
Files and hashes:         1: 7VSy51k1UxJ457rRV8SMiuxD7ug.crl (hash: nr9vef6XnEf75e0Mz4ee9n25LwXi+pQEJYC/8M5GGLA=)
                          2: lvckIph_fXtXurl5ym_WZRsaXmo.roa (hash: 5C1YRHd0ILljxfVn9Q8Mwd3r0vdxXZvngPftxEnCVwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:43:fe:8a:d8:ee:db:a6:31:e0:62:ba:03:08:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed54b2e75935531278e7bad157c48c8aec43eee8
        Validity
            Not Before: Nov  4 22:02:08 2025 GMT
            Not After : Nov  5 22:02:08 2025 GMT
        Subject: CN=02befa8db8cb6f38e838418965cf35348ab085ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1f:80:19:ca:36:81:52:db:03:26:aa:c6:60:
                    7c:1d:6f:a1:f9:07:a9:d4:62:95:70:b5:7c:71:9e:
                    8d:73:f6:18:fd:56:7c:43:93:f5:61:27:91:4e:a3:
                    7c:04:df:31:11:86:9f:e7:04:53:c9:e0:fc:c3:27:
                    24:cc:09:ca:e7:ed:6c:77:40:67:ca:60:ce:a5:ee:
                    d3:ad:55:bf:3e:65:8d:67:fb:93:81:78:bb:f3:cf:
                    5c:e8:2b:f7:eb:57:51:09:23:da:c6:80:db:13:df:
                    81:f3:f5:92:5b:29:24:d5:e6:fb:d1:30:d2:1f:ab:
                    2f:e9:f0:a4:0f:47:d9:be:7e:43:02:d3:1d:1e:7f:
                    30:c8:72:07:86:0a:b6:f6:37:d6:1f:6a:47:91:dc:
                    fc:ba:eb:26:22:36:65:6d:53:17:03:4f:d3:50:a5:
                    30:cd:68:e5:c2:a5:3a:bf:37:4f:66:ba:f1:a1:50:
                    14:b9:cd:fb:41:d2:6c:1a:49:97:15:ad:04:73:43:
                    5a:70:4d:f5:c2:a0:b0:14:c6:57:0b:2b:43:c3:2e:
                    c5:75:76:e5:5c:04:42:67:cf:cb:e0:a9:39:73:ee:
                    4a:b8:c6:f3:15:fd:56:df:5f:b3:80:60:4e:ab:9b:
                    cb:c3:ff:2d:d4:f8:0b:8f:1f:6f:18:60:50:40:f0:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BE:FA:8D:B8:CB:6F:38:E8:38:41:89:65:CF:35:34:8A:B0:85:CA
            X509v3 Authority Key Identifier:
                keyid:ED:54:B2:E7:59:35:53:12:78:E7:BA:D1:57:C4:8C:8A:EC:43:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VSy51k1UxJ457rRV8SMiuxD7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fee096-32b7-4f48-8550-104557257fb8/1/7VSy51k1UxJ457rRV8SMiuxD7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:74:26:52:a7:ae:5d:b6:31:57:ee:95:72:f4:6b:27:e2:43:
         fb:d1:30:39:e7:a7:8d:51:a5:9c:52:0a:6a:19:43:e2:8c:23:
         e1:9a:e1:af:86:a3:79:8d:70:87:d4:3a:8f:24:c1:42:08:8f:
         54:58:da:07:b0:71:86:70:e7:a7:b2:c4:ff:86:ea:95:63:a3:
         0e:3a:c3:ac:87:e9:58:90:f2:e0:52:ef:72:73:5e:62:48:71:
         d2:f6:28:34:5f:eb:fd:fc:c3:12:87:ca:89:6d:21:dc:e6:71:
         51:9a:63:aa:65:22:68:f9:c9:35:8d:c3:d7:f5:a8:a8:0a:16:
         3c:7b:bf:23:3b:9a:0c:59:67:b8:28:41:21:4b:d3:0b:9b:a6:
         42:25:1b:ee:83:b6:1a:0b:9f:7d:95:e9:60:d6:65:ca:34:71:
         dc:a4:48:4c:08:2e:e2:4b:cb:33:d4:ee:0d:5a:17:ed:29:f4:
         c2:5d:c4:ff:76:01:4f:16:a9:a2:7c:2d:8e:e5:b5:d8:13:9f:
         4b:ce:b7:21:74:22:e3:ca:9a:e4:f8:46:a6:44:15:80:d3:d9:
         ed:28:14:01:99:6b:af:20:ed:9d:da:e0:c2:38:51:02:d0:5a:
         68:9a:3b:bb:c4:66:af:c7:01:d1:ad:1d:34:77:05:b3:76:5b:
         8f:1a:80:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:56:38 2025 by rpki-client