Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          v44Mzy8pfJa6NVp0AIUWN4/BYska0L92C10VpFaqoM4=
Subject key identifier:   71:BF:AB:FB:F9:21:F5:2F:12:BF:75:9A:02:3A:C1:D6:BA:AA:E3:FF
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       019A541A98788A94B26CCDC41B063BEDA830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          1713
Signing time:             Wed 05 Nov 2025 13:00:20 +0000
Manifest this update:     Wed 05 Nov 2025 13:00:20 +0000
Manifest next update:     Thu 06 Nov 2025 13:00:20 +0000
Files and hashes:         1: ZYQH8Odgs6j1zgDGSFJsI2Ck79M.roa (hash: kZC3BUi9IJGxujxTtEudY5sD/lL78MLQwa1Gtt8Q7zA=)
                          2: ejmalSfr1tk53rbyCCEzLQB9ZzM.roa (hash: g7L2imx6UGUuOAuG6UHNk4qxo7a783+bs7b/1OA2UdA=)
                          3: l0wAbULeVazPwYlU9T-Fs3m4VN0.roa (hash: DZ6o3hO1cP2UGjoUI60lf4xxGDkyAXhO8s2og9CadCc=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: dCIXxzZQaQfKVcIDGq/6+onOAJ+jCcv4R8WjjzzTn70=)
                          5: wk5e4hIcd56Z58a_bsc7eOFpvEo.roa (hash: rW3zDMHLagp1fBqXsKbxwNvVG019sDcCbQQDsBMyiNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:1a:98:78:8a:94:b2:6c:cd:c4:1b:06:3b:ed:a8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Nov  5 13:00:20 2025 GMT
            Not After : Nov  6 13:00:20 2025 GMT
        Subject: CN=71bfabfbf921f52f12bf759a023ac1d6baaae3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:7a:60:dd:2d:59:41:73:7c:a4:33:c1:f1:
                    1f:87:ef:46:c8:34:cd:62:ff:1e:c9:1f:f8:2d:d2:
                    b8:19:31:d9:b8:fb:c8:a0:cb:f2:81:fc:bb:a9:1a:
                    98:e3:41:a1:ae:d4:3e:fe:73:4f:d6:00:36:c1:3e:
                    d3:9a:9a:90:5c:34:b5:3b:88:74:ed:d4:db:63:b1:
                    2c:51:d1:5c:f7:f3:ca:5c:f0:84:d0:f2:20:1e:f3:
                    64:02:0a:04:46:cc:3f:32:f9:80:66:7d:a8:9d:5b:
                    80:d1:63:a4:58:d2:7d:8f:60:6b:84:c3:d6:f8:8a:
                    d5:92:af:1a:9d:c5:f4:8a:b6:86:f4:90:a1:c9:3b:
                    1f:a9:74:f9:78:13:d1:65:5d:78:35:39:77:6e:e6:
                    2a:9f:56:49:90:cb:db:1a:37:ca:0a:af:11:0a:d7:
                    79:e4:3f:0c:e5:50:49:e0:2c:b2:27:1f:45:34:d0:
                    f7:c5:af:30:98:8b:51:ea:1a:3e:46:d0:39:94:47:
                    d3:9b:26:7a:0f:6a:9d:fc:db:00:04:d3:93:47:df:
                    59:56:f2:5c:49:56:48:e7:d2:36:90:64:56:a6:19:
                    40:7f:31:9a:3f:5a:7b:f5:b4:a1:a5:fa:e9:24:da:
                    4c:f2:09:d5:62:4b:39:d1:05:aa:22:5f:95:5a:26:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BF:AB:FB:F9:21:F5:2F:12:BF:75:9A:02:3A:C1:D6:BA:AA:E3:FF
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b6:98:9e:21:79:0e:88:2c:48:83:b2:1f:99:8c:01:ad:11:
         59:ec:2e:b1:d1:6d:37:9e:7e:fe:0b:91:26:54:13:1a:68:56:
         e3:db:92:f7:03:e4:3a:01:07:ee:c6:4c:8f:cd:d2:2e:4c:1a:
         94:82:fd:e9:09:2d:91:2b:61:b6:7d:41:f8:87:bd:6e:d0:38:
         cd:16:ac:46:2d:38:16:c6:8b:28:dd:08:3c:8d:c1:1e:1b:57:
         82:79:93:63:37:c0:ef:52:3e:cd:d4:c0:6b:d1:40:e5:a9:3c:
         a8:ed:ca:f4:71:01:97:92:d6:df:57:6e:d2:90:4b:9f:0a:0d:
         68:2d:ed:38:f7:14:91:20:f2:9a:a4:f5:7b:c6:89:c9:5e:10:
         37:cc:de:5b:67:1a:ea:b5:b0:a7:1e:a9:1d:da:f9:53:3d:90:
         96:a2:bf:bc:04:e1:1b:c7:7b:c3:d4:ed:a2:5d:40:b9:a9:e8:
         46:86:df:47:1a:5d:61:f6:66:c5:62:91:78:df:9a:ef:4a:cd:
         24:6f:15:f4:23:97:c5:87:a5:e0:11:d6:df:f7:76:e8:1e:2d:
         55:26:23:13:57:e9:c5:ad:48:81:42:ab:22:ce:e6:c7:01:86:
         8e:44:61:50:8d:53:5f:53:c1:5a:a7:e3:14:6c:cc:e6:c9:8f:
         f6:d0:ac:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:34:51 2025 by rpki-client