Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
File:                     _z73u2pGuvTbG6633ySkDB1MFU8.mft (raw, json)
Hash identifier:          /OX3zpozqBQ3pKIv3Jyxtm7L6oBxP74pkeYB/lYbCSM=
Subject key identifier:   AE:7B:5B:CF:E4:A3:FD:45:91:F8:26:3C:DA:C4:5B:66:57:02:8F:25
Authority key identifier: FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F
Certificate issuer:       /CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
Certificate serial:       019A50E2CA1BBA2F78C22B4C5D8707FD4256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
Manifest number:          03BB
Signing time:             Tue 04 Nov 2025 22:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:31 +0000
Files and hashes:         1: CyralhGuX94DIISxgcLaFGkuwEE.roa (hash: jbaQiBUIOwYyUUxeUd5k0D2sxSHilcS8Ozj2S6lNjj0=)
                          2: _z73u2pGuvTbG6633ySkDB1MFU8.crl (hash: C0GhEHtevd9CUvHVtqnQbG0bx5q1mM4s+TrP2q1YVMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:ca:1b:ba:2f:78:c2:2b:4c:5d:87:07:fd:42:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3ef7bb6a46baf4db1baeb7df24a40c1d4c154f
        Validity
            Not Before: Nov  4 22:00:31 2025 GMT
            Not After : Nov  5 22:00:31 2025 GMT
        Subject: CN=ae7b5bcfe4a3fd4591f8263cdac45b6657028f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:01:fc:f1:f2:81:0d:9b:a2:95:fc:88:5f:
                    7f:20:83:57:04:c0:a7:f7:67:d8:62:2a:30:30:17:
                    6a:13:2f:6b:40:5b:e7:df:50:27:49:f2:7b:da:3d:
                    6a:38:b2:42:65:9e:f0:d5:ea:e6:b1:ca:b2:95:7f:
                    02:33:6b:e6:d3:d9:50:d1:2d:74:b4:f0:e2:2a:03:
                    ef:8c:3d:5c:32:0c:df:db:8a:db:db:77:49:23:76:
                    9d:9e:61:12:45:10:5f:db:6a:b3:ea:a3:8a:64:68:
                    0e:05:2b:fb:b8:64:ba:b5:11:c4:19:dd:04:7e:94:
                    25:6e:f6:8f:1e:cb:3b:10:a3:5f:fa:7f:d4:4b:3c:
                    57:bb:5e:fb:27:91:9f:36:ea:5f:07:d3:3f:49:7c:
                    33:2b:81:66:2d:c9:8f:46:ce:d3:2b:81:1b:07:b5:
                    1f:fd:a5:42:3c:d2:de:c2:bd:9f:a6:30:c6:a4:fa:
                    2c:0c:88:d1:e5:57:81:69:4b:69:01:d4:df:7b:ef:
                    91:b2:24:d1:a0:44:a6:7f:d5:e3:46:75:61:83:c2:
                    5c:51:b0:a2:76:48:5f:b5:c0:80:6f:11:d1:ac:7a:
                    0c:1d:28:1d:b8:fa:41:5a:c0:9f:a1:65:37:43:ed:
                    7e:58:ed:92:1b:61:fe:40:6e:c5:a8:a5:e5:69:ee:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:5B:CF:E4:A3:FD:45:91:F8:26:3C:DA:C4:5B:66:57:02:8F:25
            X509v3 Authority Key Identifier:
                keyid:FF:3E:F7:BB:6A:46:BA:F4:DB:1B:AE:B7:DF:24:A4:0C:1D:4C:15:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z73u2pGuvTbG6633ySkDB1MFU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/_z73u2pGuvTbG6633ySkDB1MFU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:98:cd:f7:d4:0d:8e:5c:4e:3e:17:45:98:70:e9:95:29:f1:
         ca:3b:f2:91:f4:a9:73:20:14:a7:94:c1:df:1a:3d:36:b7:21:
         4c:72:6a:a6:07:ba:8f:8f:99:cc:a7:d0:23:b0:73:4c:f1:c4:
         8d:9e:3e:e6:e3:f1:52:4f:38:32:a6:92:f2:ac:99:9f:96:25:
         34:48:bf:cd:6b:b4:23:f2:86:3b:d7:7e:50:41:00:3a:8a:01:
         e2:c3:71:1c:fa:fa:62:45:ed:07:c6:33:e8:06:60:af:a4:87:
         a8:73:14:89:11:bf:65:00:96:ac:81:79:89:89:45:95:a2:f2:
         84:7a:8a:43:6b:cd:ca:1d:73:ae:3f:ec:9e:6c:28:88:98:46:
         21:7b:c3:67:7e:fe:9a:51:3a:13:3c:a7:7d:53:50:12:3c:92:
         9b:8a:9d:e0:2b:24:74:a8:fc:4c:4e:08:48:a3:33:1a:32:50:
         64:2e:df:11:95:f7:5f:d7:aa:d6:91:1a:d5:0c:1a:e8:67:6b:
         9a:ab:76:40:fd:05:b9:76:24:6b:c4:cd:22:c2:6e:32:0d:85:
         a5:a5:ce:7e:51:9d:1c:69:c5:40:d8:49:99:3c:b9:83:a5:9a:
         a1:3d:c9:82:e6:b3:5e:83:02:d0:ef:47:4d:8c:5c:fa:1c:e2:
         ad:2a:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:05 2025 by rpki-client