Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
File:                     k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft (raw, json)
Hash identifier:          gvlPbDy5Ug61sB9T1PNJjCtZWuA4FgRzFIQfNxoSyv8=
Subject key identifier:   DC:07:FF:84:70:ED:8A:3C:98:87:8F:C9:88:C2:55:AC:7A:9F:A0:A4
Authority key identifier: 93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC
Certificate issuer:       /CN=93ece780dfda43ab4a841727eb20d71fc76528bc
Certificate serial:       019A50E369F85E912051FC424725602F9843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
Manifest number:          0547
Signing time:             Tue 04 Nov 2025 22:01:12 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:12 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:12 +0000
Files and hashes:         1: V4JFeDwnCAqThlIryfbjYJ96jqI.roa (hash: kiCqOYzNhXEMGFGlKAItyp8yURJWNGMcGMSiUikSSU4=)
                          2: dJ3sMClT1nzY6ah-C08c4xayKh4.roa (hash: y9dD6eZbJdUtirxnu+MfTeTv9qcRoIhNkzIpNqVLlDg=)
                          3: eOWw0hoBD0V8VDv_9KrqRqo9fyA.roa (hash: ZHNmoz5Xj/PvA07453i2fwNiwXlHKUm8tYngOjzHSGA=)
                          4: k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl (hash: gQ0C1Z/36/5fRuWJ8tvx46v6wFGDkrAvxPkz5xDEwOI=)
                          5: lf-trLvA-qDd5zEdeoTS16VXX6g.roa (hash: UkGZWMolhkbNSX35kZCtNaOnC+PwksQdwebe8XEM76U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:69:f8:5e:91:20:51:fc:42:47:25:60:2f:98:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ece780dfda43ab4a841727eb20d71fc76528bc
        Validity
            Not Before: Nov  4 22:01:12 2025 GMT
            Not After : Nov  5 22:01:12 2025 GMT
        Subject: CN=dc07ff8470ed8a3c98878fc988c255ac7a9fa0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f9:0a:2e:d0:f0:4d:a7:12:07:35:6c:18:92:
                    90:6d:8c:91:25:67:82:2c:3e:4c:3b:a3:1f:aa:d2:
                    87:4f:82:f0:32:ef:8a:0a:98:03:55:46:b9:a3:e0:
                    1c:cc:54:01:fb:2d:f3:62:fe:fc:3e:c1:40:6b:29:
                    20:60:22:24:6c:a4:2f:80:d5:38:d2:3f:57:e6:35:
                    65:08:3e:ed:c2:af:6a:7b:ed:03:e3:70:98:0e:2a:
                    eb:3f:4a:70:1c:e7:04:50:c9:96:9a:c2:e8:7a:87:
                    f9:18:f5:cb:71:d5:2b:19:9b:e6:f5:f9:61:7d:b3:
                    03:26:f9:8b:5c:87:82:9c:4a:d3:08:af:52:2c:74:
                    30:0c:68:62:be:96:24:9d:92:46:a6:7f:19:07:d4:
                    27:4d:8c:ce:36:69:34:c1:b7:6d:b8:a9:83:e6:d7:
                    8a:f9:d2:ab:7c:e6:9f:76:d3:e0:bc:91:12:69:8e:
                    80:46:f5:44:b5:f4:04:53:f1:b5:ce:f3:fb:bc:0b:
                    eb:63:6d:d9:91:5c:73:ee:d6:f5:28:c0:85:da:e9:
                    01:9c:44:42:6f:e8:87:a9:93:b2:41:89:b6:f6:36:
                    12:c2:32:7b:31:c3:39:11:d6:f7:16:75:a4:ef:65:
                    a3:50:ce:65:8b:8a:d4:01:18:a6:45:fd:71:49:b8:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:07:FF:84:70:ED:8A:3C:98:87:8F:C9:88:C2:55:AC:7A:9F:A0:A4
            X509v3 Authority Key Identifier:
                keyid:93:EC:E7:80:DF:DA:43:AB:4A:84:17:27:EB:20:D7:1F:C7:65:28:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-zngN_aQ6tKhBcn6yDXH8dlKLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/7fa943-9ea6-4068-b6ae-a4d413d7f89c/1/k-zngN_aQ6tKhBcn6yDXH8dlKLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:da:80:e7:84:74:63:fb:52:98:7a:af:90:a8:28:bf:69:9f:
         6e:51:d5:fa:67:85:24:fd:11:76:c8:1d:ad:0c:41:10:d4:c8:
         2b:58:f0:b7:20:55:bf:da:12:25:43:12:94:ea:01:f4:e3:46:
         f5:e2:8f:75:9c:32:72:82:58:6e:71:cc:7c:07:72:f1:5c:0b:
         85:b1:5a:87:16:9e:be:03:5f:6e:cd:c8:9f:9b:0f:e5:c4:4f:
         76:e5:6e:40:96:2c:94:ca:1f:6f:15:52:be:8d:4e:34:cb:39:
         91:2c:96:a3:ef:cf:49:eb:0c:c1:74:42:e4:dc:e2:b3:b8:07:
         b0:8f:df:93:07:cc:c8:67:1e:86:c3:22:09:0b:27:0f:01:51:
         13:bd:59:82:16:86:f6:b3:85:de:da:e5:3d:a3:a5:2b:c0:7c:
         df:7f:eb:bc:ad:24:7a:79:65:7f:79:69:3b:2b:af:d5:ba:03:
         c4:bf:3e:1f:e4:77:20:59:4a:75:3b:81:67:78:20:6c:56:24:
         bd:21:75:12:d7:4e:67:4e:74:db:10:bd:00:c5:13:8b:3f:31:
         fe:3c:35:a0:4b:ed:0b:e1:9f:b4:8f:62:ee:e3:27:36:9f:f9:
         f0:e5:ff:ea:90:6a:b9:c2:eb:b8:4e:2f:e1:45:c3:b1:5b:bd:
         66:b5:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:59 2025 by rpki-client