Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          ZDyNN0zx6qMXfYc/q0Ee3gwPWfAPAFIgSXKCK6nn1Fs=
Subject key identifier:   66:78:BA:2B:3F:B1:D3:37:C9:C9:32:8E:85:BA:F4:67:DA:30:19:70
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       019A51F54960061F39AE26713471C406FAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          16A1
Signing time:             Wed 05 Nov 2025 03:00:20 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:20 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:20 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: tLUdYd//M4K5D6kLXSMKgxZgm+k1fVMhRqJIMsMV5kU=)
                          2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:49:60:06:1f:39:ae:26:71:34:71:c4:06:fa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Nov  5 03:00:20 2025 GMT
            Not After : Nov  6 03:00:20 2025 GMT
        Subject: CN=6678ba2b3fb1d337c9c9328e85baf467da301970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:99:ee:3d:4f:1d:a6:f8:40:00:19:0b:33:
                    93:bf:2d:5f:ee:7e:c3:5c:54:24:30:47:e2:9b:f8:
                    98:ec:98:bf:a6:b8:e6:b2:db:c2:2f:59:87:ad:7c:
                    74:89:25:c0:52:41:f5:67:80:f1:ed:e2:c3:8f:87:
                    58:88:0d:39:29:5f:1a:7c:39:71:e3:28:42:9e:3b:
                    50:d9:06:7c:ed:7e:5f:7a:fb:c6:e0:85:9b:34:46:
                    da:32:9f:7e:68:12:cf:d3:a0:36:66:fa:89:6c:04:
                    e8:58:68:3d:4b:25:37:c4:f9:1c:96:fd:c9:37:12:
                    06:df:59:cf:7e:41:35:d2:6e:19:bc:cb:57:df:59:
                    50:79:44:e1:45:8b:7c:7d:dd:d4:b4:8e:8a:e1:05:
                    f7:62:96:d2:c3:27:2e:b6:7f:6e:e2:28:40:e8:98:
                    98:df:3c:4c:3d:4b:dd:13:65:d5:ea:de:23:a3:4a:
                    04:ad:b4:4a:ac:a8:6f:5f:bb:47:df:29:b9:12:3f:
                    67:b0:f6:48:65:ea:ed:e5:65:e8:10:14:31:09:2a:
                    0c:b5:02:97:ad:5e:29:a2:c6:da:bc:09:da:5a:59:
                    ae:08:54:5a:31:cc:5d:73:72:c0:31:0d:1a:31:d8:
                    04:4d:d9:09:ad:52:48:37:fa:c2:28:89:15:63:9d:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:BA:2B:3F:B1:D3:37:C9:C9:32:8E:85:BA:F4:67:DA:30:19:70
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:00:6d:62:4f:10:bd:10:89:05:41:d3:cd:0a:fd:46:55:07:
         42:ff:9f:9e:df:f1:54:58:86:9b:0f:8a:36:25:67:ff:50:d4:
         e5:0b:12:9a:9e:86:d7:90:d8:58:ae:52:ef:c6:11:e0:e5:e1:
         d9:40:9a:a5:08:60:87:13:89:fe:e1:07:4e:b9:a7:1e:10:ee:
         7a:29:54:55:28:c1:09:5a:91:1a:a2:d0:9b:e3:de:d4:a9:39:
         a7:e0:1e:d3:5a:c2:66:4d:8b:fb:49:23:7b:55:27:03:d6:3a:
         fe:05:73:90:88:cd:da:52:ca:cf:c8:c6:cf:36:01:f6:e4:2d:
         19:1b:f8:cf:46:86:84:8c:16:04:09:12:b8:62:3a:f1:31:f7:
         1f:91:70:ae:87:a5:2c:4d:03:34:64:6c:f8:a4:00:d0:fd:f7:
         02:28:22:ba:21:45:05:86:8c:b2:89:7f:f4:a0:b1:92:69:f6:
         27:a4:e9:77:91:4c:b4:e3:d1:f2:3c:90:bb:7f:98:31:09:aa:
         f6:2e:20:eb:71:a6:51:fb:7d:f6:7f:af:65:08:4b:27:e0:80:
         71:ca:6b:8f:37:fa:64:f9:4b:01:6e:f1:d2:20:b0:76:85:04:
         c1:3a:50:f5:98:46:b2:a9:02:37:55:db:25:83:c5:e9:f5:4c:
         44:c4:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:32:37 2025 by rpki-client