Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
File:                     _0t7padsE3FS0NDzUk_WIBuBW-8.mft (raw, json)
Hash identifier:          Jv2xy1Szl2HsLNdIEjX+dKL50OHPbJ6VmEfvXy2G3sU=
Subject key identifier:   A5:FC:DA:9D:F0:4C:25:FC:72:A6:6F:10:EC:16:6B:73:67:D7:1B:77
Authority key identifier: FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF
Certificate issuer:       /CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
Certificate serial:       019A51BE549907EC7AF7E35483141C5BC28C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
Manifest number:          023F
Signing time:             Wed 05 Nov 2025 02:00:19 +0000
Manifest this update:     Wed 05 Nov 2025 02:00:19 +0000
Manifest next update:     Thu 06 Nov 2025 02:00:19 +0000
Files and hashes:         1: _0t7padsE3FS0NDzUk_WIBuBW-8.crl (hash: uKL/yTtWps9m1YwVC1Bdoif58zXNxtMJKLr++NHIA9M=)
                          2: dzWaTBaulL5kl6N51Aq9Q2INFwQ.roa (hash: qCU96anqXB1vi9FIqkKYJeT2OcA8oxOe7J0O6GEIhmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:be:54:99:07:ec:7a:f7:e3:54:83:14:1c:5b:c2:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4b7ba5a76c137152d0d0f3524fd6201b815bef
        Validity
            Not Before: Nov  5 02:00:19 2025 GMT
            Not After : Nov  6 02:00:19 2025 GMT
        Subject: CN=a5fcda9df04c25fc72a66f10ec166b7367d71b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:83:20:78:ed:2e:07:dd:9f:da:d1:58:10:
                    73:eb:85:15:fb:10:ae:ef:d4:f3:d2:b5:8b:c0:c4:
                    62:d2:54:62:a1:eb:ec:b0:c7:2e:2f:16:54:47:da:
                    2e:79:84:b0:7f:bd:c5:28:39:d0:3f:05:90:dd:72:
                    a1:ff:4a:7c:2d:f7:24:89:aa:ae:4d:72:ce:49:51:
                    9b:f5:9a:5b:09:a4:d2:ad:46:97:bc:f7:f2:09:a1:
                    ef:7b:f9:1b:c9:02:5b:be:02:36:f6:53:4c:b6:3e:
                    19:17:15:34:e9:5e:24:27:19:81:7e:16:5d:61:58:
                    a5:0a:14:90:6a:e1:0e:ca:a4:f1:0a:91:9b:68:60:
                    ac:72:ad:44:3d:0b:8b:96:5e:a4:ba:6e:81:d6:1c:
                    1f:a9:9e:ca:ab:03:16:4d:2e:d7:d3:8a:68:c2:fe:
                    18:da:ed:72:eb:e8:17:77:1c:54:ae:9e:80:11:3d:
                    ad:e4:bb:0a:b5:7d:0f:79:bc:18:d0:36:16:68:9b:
                    38:dc:0a:53:2e:ca:a8:a5:a0:84:d2:8d:2a:e8:0f:
                    38:9c:60:52:b4:fe:d1:72:84:e0:61:84:d1:e0:b7:
                    e4:5c:02:d5:8a:c1:45:f5:18:bb:17:d4:b9:be:e9:
                    e7:79:5c:af:62:a5:29:e9:a3:ca:56:4a:16:bf:6f:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FC:DA:9D:F0:4C:25:FC:72:A6:6F:10:EC:16:6B:73:67:D7:1B:77
            X509v3 Authority Key Identifier:
                keyid:FF:4B:7B:A5:A7:6C:13:71:52:D0:D0:F3:52:4F:D6:20:1B:81:5B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0t7padsE3FS0NDzUk_WIBuBW-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/95b186-f2ba-4c83-b630-8f95b8524c35/1/_0t7padsE3FS0NDzUk_WIBuBW-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:67:d2:43:2c:63:c9:31:67:1a:f3:8e:82:ea:d7:13:d4:1c:
         9f:39:92:63:5f:12:f6:ea:59:7d:68:78:1e:bf:b6:18:5a:e3:
         af:83:e5:1a:65:88:45:c5:c5:0c:6a:12:d0:ba:a5:b8:5d:32:
         8b:2e:26:e5:62:16:9a:b8:2d:a9:eb:15:14:75:60:da:5b:23:
         0e:a7:dd:4e:d1:66:70:1b:65:f3:7a:5d:3c:7d:dd:05:e0:84:
         89:b9:24:a8:1f:c3:e1:7a:9c:3a:f6:a7:f9:2c:1c:75:b9:a4:
         c4:f1:28:4a:ae:18:c7:3b:5c:01:5b:52:f4:25:c1:dd:27:3d:
         4b:1e:a0:d2:da:17:c2:57:c6:d7:03:c9:1f:57:91:7c:b8:79:
         9c:59:75:45:e2:8b:86:8d:06:2c:37:a7:cc:c1:63:53:3c:60:
         d0:35:42:df:d1:8f:7b:ef:a3:4c:d5:26:f4:7e:4a:f3:d4:f3:
         d2:f7:22:f3:ae:bc:86:bd:cd:2d:14:5a:dc:8d:3f:1b:83:ae:
         ef:66:6f:4f:e6:d1:53:99:85:9f:29:7c:65:68:98:50:3b:e4:
         d1:b7:da:92:92:94:61:9b:c8:62:3a:04:e4:4f:be:89:6e:9a:
         79:4e:b0:07:14:d9:82:0e:72:3a:b8:57:ae:b2:9c:00:f9:22:
         f5:c6:32:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:21:28 2025 by rpki-client