Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
File:                     l7v--RgT0Oj37t9o7VaefP3fDPA.mft (raw, json)
Hash identifier:          rrDKtjLlP6gUZF62aoO7c/9HgKrp3TIPI+bI5xpf2xw=
Subject key identifier:   04:65:E6:CC:B3:87:19:F5:18:74:B5:22:1B:CE:31:32:F0:92:D2:EF
Authority key identifier: 97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0
Certificate issuer:       /CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
Certificate serial:       019A51F5B2B9341F0076B681688DEFBAF032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
Manifest number:          170E
Signing time:             Wed 05 Nov 2025 03:00:47 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:47 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:47 +0000
Files and hashes:         1: 1-sigTPJAC1PNSATn-sK6lRfTKyQ.roa (hash: jOHa8XaZlnY37LiuZhg9CFenWtMsktZUfeaX7d5RSx0=)
                          2: l7v--RgT0Oj37t9o7VaefP3fDPA.crl (hash: 1Fhb4HHLHZ5bVaRKoBAJmQJclRY90HV2Jn/uomQSeRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:b2:b9:34:1f:00:76:b6:81:68:8d:ef:ba:f0:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97bbfef91813d0e8f7eedf68ed569e7cfddf0cf0
        Validity
            Not Before: Nov  5 03:00:47 2025 GMT
            Not After : Nov  6 03:00:47 2025 GMT
        Subject: CN=0465e6ccb38719f51874b5221bce3132f092d2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b8:cc:ab:dd:d2:d8:8d:e0:83:85:c6:32:ba:
                    fe:2f:4e:6c:e2:af:ee:53:c3:e2:f2:78:f5:1c:3e:
                    5b:00:ac:e2:3e:a0:7b:a7:33:b4:e6:a7:7e:37:4d:
                    77:89:0a:44:1a:51:57:4c:03:70:b0:4d:10:f7:06:
                    09:c2:8b:d7:e7:60:76:7a:ca:15:97:f4:30:3d:16:
                    1e:b0:b2:cc:b1:f3:e2:35:3c:ee:70:52:c6:5c:55:
                    0f:6f:18:f7:8d:db:27:6a:6f:e5:bc:7d:7e:88:b1:
                    ea:48:b4:b4:10:0a:44:48:05:36:53:b6:ca:d0:d5:
                    57:e9:68:2e:67:59:29:85:54:60:4f:5a:1a:cb:16:
                    9b:64:4e:b7:7d:4f:62:d4:c5:38:c1:13:09:30:fc:
                    a1:e6:9f:81:39:b2:f1:24:0f:21:ae:03:f3:3c:de:
                    3c:57:c6:15:d5:a5:04:a5:e6:05:4f:82:91:95:10:
                    a1:4b:35:8b:0b:0c:04:e8:13:d5:0f:10:e2:40:da:
                    55:27:05:3b:16:62:9b:df:12:31:89:39:3a:7f:a6:
                    85:df:5c:19:72:af:e0:53:8d:d4:fc:3d:f5:81:2a:
                    20:8b:5e:6a:a3:d4:50:56:cb:ea:52:12:fb:5b:b6:
                    fa:6a:f4:63:84:15:64:c1:18:56:19:1a:8c:3c:05:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:65:E6:CC:B3:87:19:F5:18:74:B5:22:1B:CE:31:32:F0:92:D2:EF
            X509v3 Authority Key Identifier:
                keyid:97:BB:FE:F9:18:13:D0:E8:F7:EE:DF:68:ED:56:9E:7C:FD:DF:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l7v--RgT0Oj37t9o7VaefP3fDPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4e8d35-6f4f-4523-ab31-0e1a0cc83b19/1/l7v--RgT0Oj37t9o7VaefP3fDPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:df:07:ea:78:dc:41:8f:4a:b5:61:ca:14:fe:6f:03:e8:1d:
         97:41:c8:82:c6:4a:43:e8:30:e8:34:f9:b4:1c:d4:2e:cd:19:
         76:6e:15:d6:39:8c:6e:bc:3b:98:73:cd:27:d8:3c:d2:ed:b8:
         17:46:40:4a:29:9d:eb:8f:a0:ef:95:0b:50:14:44:24:16:62:
         e5:bd:73:f0:a7:79:7f:74:91:ac:46:b2:b6:13:6e:eb:a4:f7:
         f9:c1:27:10:ea:80:c1:80:70:97:2a:9f:b4:af:74:cb:f0:b3:
         e1:43:2c:cb:a2:7a:1c:1f:3d:f1:8e:2c:c6:50:aa:39:b6:95:
         7c:81:d6:35:50:41:15:fd:4b:47:9d:2e:9f:e6:bd:03:0d:20:
         5c:f3:bb:4a:e2:da:e8:8c:0a:c2:b1:0c:2b:05:a8:71:07:33:
         20:3c:10:25:8a:64:5b:9d:2c:07:db:30:02:3d:9d:fd:ac:99:
         4b:c3:79:d9:a1:e6:1f:9e:77:4c:f5:0e:63:0c:bf:04:a3:e6:
         fb:35:b7:ee:30:9b:c1:08:21:22:51:1d:e0:8d:d1:d2:35:01:
         d9:c4:c3:f8:7c:8c:3c:5e:d7:55:a7:65:4c:b7:65:c5:ff:16:
         1b:43:ee:5d:d6:ba:4d:b2:49:dd:b3:a6:70:11:54:95:6e:da:
         57:15:42:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:43:17 2025 by rpki-client