Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
File:                     ccFpDvV6_P-uc725k0MJ-LcOu2E.mft (raw, json)
Hash identifier:          Y+cVu4IRvuM89VcedrSZuIZ0KGqBsQWXlm/yMCqYOs4=
Subject key identifier:   71:96:BF:DC:EF:91:FF:2B:5E:A3:90:F5:7F:42:33:91:BE:BE:3C:5E
Authority key identifier: 71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61
Certificate issuer:       /CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
Certificate serial:       019A515091C75A25B586E97FF384A2A57E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
Manifest number:          1662
Signing time:             Wed 05 Nov 2025 00:00:25 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:25 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:25 +0000
Files and hashes:         1: T2Ms0IsK2hwIWCpu2VyNXMVfGqg.roa (hash: I5IAteZyEq5YzDFXdNGjAqCsBN2dhyO1KERPjxCLefk=)
                          2: ccFpDvV6_P-uc725k0MJ-LcOu2E.crl (hash: HQXCroFZ64AOcFlT2an0Qo0aQMO6tDTU/wEUEwVrdxY=)
                          3: gIUgoRTyJmRfCQYS7uklAVhDlWU.roa (hash: K7KWFvQ91COOPs2G9/YPr+v2xa3Bl9m3cSR+0EKlTlQ=)
                          4: ghc4MPH3vTiYP5rga0h6BtqPh6A.roa (hash: +n/mGZaNW3qMvM/6+1HZZ0mUd3q3k/RCYwms9UGlFSw=)
                          5: h8NM3QNMAy3JQUb-72WEZdGpGjA.roa (hash: Lxvl2etM6iQ3TxJnQc+Uy0mpsnRIUxQq3ad2YMjelB0=)
                          6: rWTlkbZNrrsZjKWZTJP_rkzWTv0.roa (hash: OOrIatFR59tEQa9JkYCnHVEOWGvvetBIFgDhOWDZNAQ=)
                          7: v0zBDXFOccttRX2cT7fDoONDswQ.roa (hash: 4vPi5VK0C1d8kjVecT9rugkIfwxa9eC7Ww52TXS0hqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:91:c7:5a:25:b5:86:e9:7f:f3:84:a2:a5:7e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71c1690ef57afcffae73bdb9934309f8b70ebb61
        Validity
            Not Before: Nov  5 00:00:25 2025 GMT
            Not After : Nov  6 00:00:25 2025 GMT
        Subject: CN=7196bfdcef91ff2b5ea390f57f423391bebe3c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:27:02:40:02:59:ab:56:a1:ed:71:5e:a9:
                    21:1c:7b:3a:f1:a1:06:d1:6c:6b:be:ba:87:73:e9:
                    09:70:99:d3:fb:ea:e3:13:65:b7:81:cb:59:2a:a1:
                    7e:3c:90:9f:cf:52:9c:79:34:28:e5:c8:8a:64:18:
                    69:28:74:12:51:0c:f4:51:88:ca:35:de:88:3a:16:
                    01:d8:b5:3e:f4:77:30:0f:b7:e4:5f:0f:57:8a:0d:
                    47:b5:4c:7e:7c:f0:94:fe:54:9d:b9:cb:2f:cb:c4:
                    a5:b3:01:26:56:cf:8d:99:08:be:66:6e:11:db:2b:
                    df:79:7d:ec:2a:03:86:e2:eb:43:32:ee:7b:74:c0:
                    55:e6:77:09:00:a0:d7:7e:00:b3:80:56:a1:33:df:
                    6f:59:eb:ec:3c:56:fb:83:d6:24:cd:15:fd:09:f5:
                    12:ba:10:27:7a:72:92:12:17:42:5d:f0:03:f6:f7:
                    77:58:cf:0d:af:50:29:94:10:10:f8:8e:f8:f6:6c:
                    d1:57:6a:de:b8:c2:1f:96:24:2b:af:3b:dc:6d:4d:
                    1c:c6:76:3a:12:fb:ef:e3:42:bd:61:ad:05:ba:4c:
                    1d:37:ba:5f:b1:a8:ce:bf:7e:cd:c5:02:9a:28:84:
                    92:d8:05:cc:6b:18:1f:3e:e2:38:98:ab:7d:9b:62:
                    51:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:96:BF:DC:EF:91:FF:2B:5E:A3:90:F5:7F:42:33:91:BE:BE:3C:5E
            X509v3 Authority Key Identifier:
                keyid:71:C1:69:0E:F5:7A:FC:FF:AE:73:BD:B9:93:43:09:F8:B7:0E:BB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccFpDvV6_P-uc725k0MJ-LcOu2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9c70e9-3df3-4bc7-82e6-006e9bb8ed59/1/ccFpDvV6_P-uc725k0MJ-LcOu2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:2d:b5:0c:c5:6b:7c:c4:4d:aa:a6:dc:a8:c5:af:46:da:7f:
         a8:6e:d9:e2:bb:78:fd:d0:81:1e:04:91:75:08:e6:64:54:3c:
         3f:57:c8:a6:08:ff:ad:70:48:20:7c:3d:22:81:19:93:39:7f:
         78:24:5e:f3:13:45:bb:91:03:41:e5:1e:56:6f:32:8d:0a:55:
         24:99:2a:d4:3f:e8:70:1b:77:96:22:06:db:3b:92:bb:b7:ad:
         fc:9c:89:b6:e4:6c:f1:1d:e4:7f:23:97:51:ec:a0:c6:32:de:
         d1:f3:1c:4e:47:d7:ca:48:51:22:a2:77:ac:45:58:c3:79:38:
         a6:7a:07:a1:31:4d:05:cf:e6:35:cf:5e:2e:93:ad:65:5a:70:
         03:69:25:17:7e:1b:0c:23:ad:19:e6:a9:a1:c3:d2:0f:0c:58:
         37:17:49:a3:d4:86:5b:61:fb:91:be:8f:0e:08:1d:3c:dd:e5:
         65:23:fc:04:08:37:a4:6b:b3:3d:eb:f2:cd:44:30:a5:1c:d1:
         50:cd:cb:4a:c0:2e:c0:5a:f1:27:46:58:ca:1e:04:53:71:17:
         e3:85:15:76:6b:74:0b:71:a4:22:65:db:93:9b:65:70:1d:4b:
         bf:8b:70:13:c6:1e:20:8b:bd:9c:87:e1:16:7e:59:85:9f:8a:
         69:1f:f2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:29:03 2025 by rpki-client