Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
File:                     7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft (raw, json)
Hash identifier:          qndB4I5vn7HdTShr3gilh453hdb2jBV1LI3+4y3gnOM=
Subject key identifier:   2F:EC:3D:7F:0F:65:C7:25:3B:0C:25:30:8B:88:14:A3:B1:1C:E9:4B
Authority key identifier: ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57
Certificate issuer:       /CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
Certificate serial:       019A4F624E966BC50A330F413042C9AC806A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
Manifest number:          169D
Signing time:             Tue 04 Nov 2025 15:00:33 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:33 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:33 +0000
Files and hashes:         1: 7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl (hash: hxWv073AEvmdeoDtitablBSVIKMuWWl9kd5ZhuDoumo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:4e:96:6b:c5:0a:33:0f:41:30:42:c9:ac:80:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed2415013f2e9c4ee58d7c2dfeeeab281692d857
        Validity
            Not Before: Nov  4 15:00:33 2025 GMT
            Not After : Nov  5 15:00:33 2025 GMT
        Subject: CN=2fec3d7f0f65c7253b0c25308b8814a3b11ce94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:4d:2c:1b:2d:e2:c5:8d:83:1b:95:b5:db:
                    8f:99:9d:3f:51:66:50:e7:8f:73:6f:4d:26:e8:94:
                    19:62:6a:15:b6:7d:28:30:29:95:5a:12:d7:d1:64:
                    08:ca:e4:23:e4:41:fb:75:f8:8d:2a:fd:92:52:f6:
                    b2:98:53:d7:d5:8e:3c:5e:4b:6f:97:18:16:b0:14:
                    55:d9:9d:7c:18:74:eb:d2:ef:1f:66:5d:6b:66:c6:
                    dd:9b:c3:fa:42:b5:d5:0c:9c:a2:75:49:8f:00:c8:
                    d3:63:32:7e:5e:64:4e:55:fe:1a:f3:33:eb:e2:cf:
                    20:5d:d3:b1:01:24:79:33:ed:22:52:81:d0:99:2f:
                    73:04:40:a4:f2:08:c8:b3:c6:e4:19:71:dc:10:e2:
                    58:b0:ad:1b:d4:d5:1b:a9:75:e6:25:7b:0b:c8:27:
                    bf:ff:ab:2f:b7:1d:5a:46:be:8a:7d:70:30:db:4d:
                    c7:9d:2d:2b:92:b9:e9:76:bb:cd:df:1b:f4:55:7d:
                    cd:45:f5:ea:11:1a:64:fe:fa:42:e2:d4:cb:f0:57:
                    7c:af:cc:98:74:67:2f:43:8f:a0:4e:e8:6a:e1:52:
                    16:20:08:80:80:27:0e:16:6f:ab:29:d2:02:e1:7a:
                    5a:49:f2:53:48:dc:05:8a:e7:31:09:a5:b9:c6:60:
                    dc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:3D:7F:0F:65:C7:25:3B:0C:25:30:8B:88:14:A3:B1:1C:E9:4B
            X509v3 Authority Key Identifier:
                keyid:ED:24:15:01:3F:2E:9C:4E:E5:8D:7C:2D:FE:EE:AB:28:16:92:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SQVAT8unE7ljXwt_u6rKBaS2Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7dabe7-dff1-466c-a600-0311d0d5ddbb/1/7SQVAT8unE7ljXwt_u6rKBaS2Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:af:3b:10:02:b9:22:49:49:d8:dd:bd:64:1b:3d:9a:80:30:
         ed:4e:cb:5f:be:83:32:c4:55:b1:84:8c:ba:e7:db:20:8e:ff:
         cc:95:c8:c3:60:e2:19:8f:25:ee:b2:ef:31:d0:a7:47:ee:9d:
         2b:e0:aa:fc:24:86:f1:a5:f6:a4:e2:31:2b:ad:14:b3:4b:9f:
         6c:e3:1a:52:36:05:db:07:20:19:db:5d:16:8f:d4:d2:01:1e:
         3d:1b:58:67:77:1b:74:4a:04:19:84:cb:d3:69:f6:15:db:4a:
         b4:b9:6f:0b:f0:e1:24:70:71:6d:75:83:54:51:57:82:d8:5b:
         8c:63:cb:f8:16:38:1c:53:7c:db:bf:7a:80:e0:a2:cc:e4:15:
         cb:80:ec:b1:a6:54:cc:af:02:ee:75:07:e6:a6:f2:3f:50:a4:
         7d:a0:b4:e1:f3:8f:c5:3f:f7:c9:b5:be:ed:4a:5c:81:ad:31:
         05:3a:a6:5b:ac:9a:6a:38:5a:d5:28:6d:0e:f4:61:4d:4a:65:
         c8:c7:c4:26:f6:68:a0:45:b2:7a:40:bc:63:b7:b9:9b:48:c7:
         6d:ba:f6:65:18:16:6f:3a:90:5e:75:a3:21:69:ff:8c:5f:0c:
         d1:b2:20:8b:b3:10:1e:3e:a7:15:9c:bc:82:0d:ae:3f:22:f5:
         19:59:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:46:18 2025 by rpki-client