Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File:                     ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier:          hxlV2xQpCf28t/iZACQsYVyxA6dM5kYmjrXW1qAdvVI=
Subject key identifier:   1F:68:7C:96:E8:DA:31:19:9B:B4:15:52:81:9A:7A:06:B5:0D:88:7F
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer:       /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial:       0198D54E3AE46C46B346C7C0F221648ACB80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number:          1567
Signing time:             Sat 23 Aug 2025 05:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:10 +0000
Files and hashes:         1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
                          2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: qNHhUAchezBWAChR1eG6rZxqHURn8VVXMZQgIddEAz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:3a:e4:6c:46:b3:46:c7:c0:f2:21:64:8a:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
        Validity
            Not Before: Aug 23 05:02:10 2025 GMT
            Not After : Aug 24 05:02:10 2025 GMT
        Subject: CN=1f687c96e8da31199bb41552819a7a06b50d887f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:44:73:09:53:7d:6a:04:55:87:67:99:50:00:
                    f7:0e:f1:6e:39:f6:8a:77:9f:48:9e:41:07:95:5d:
                    28:f0:d6:99:6a:c5:0e:3a:0c:30:17:83:16:1c:94:
                    a2:88:5c:42:e6:4c:b9:0b:ef:66:6c:6e:c5:b3:13:
                    56:c8:f5:a0:21:9d:82:0b:86:b5:fe:aa:b4:d8:a0:
                    b1:0a:40:64:17:5b:4c:c5:41:be:3e:09:cc:13:8c:
                    d5:26:4a:56:97:8f:71:29:fa:97:82:d4:5a:b5:2c:
                    a0:13:ce:de:56:2f:fd:0d:fe:25:cd:d5:c4:8c:ad:
                    35:bc:c0:e5:ce:c4:09:29:97:88:63:81:e3:42:b0:
                    b8:70:14:b4:49:78:08:b8:f6:24:ea:d1:28:ea:f3:
                    ae:06:20:75:a9:cd:ea:9b:72:55:c2:4e:80:fd:81:
                    23:77:94:51:2a:da:92:1f:2e:ad:67:27:d0:dc:ef:
                    85:55:26:fb:c6:d2:04:35:c9:a5:95:48:79:21:51:
                    9d:fd:df:be:f1:53:5d:5f:01:92:e7:21:09:01:82:
                    21:12:72:a0:12:69:41:77:94:66:fc:f5:80:d2:b7:
                    25:10:25:ae:fd:fc:e3:49:09:af:84:3a:b2:c5:2b:
                    1e:b2:50:90:6a:d7:89:be:be:47:32:ec:71:30:0f:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:7C:96:E8:DA:31:19:9B:B4:15:52:81:9A:7A:06:B5:0D:88:7F
            X509v3 Authority Key Identifier:
                keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4d:36:96:75:82:74:0e:7a:c5:3f:93:2a:e6:2d:d5:27:a1:
         91:3f:a2:04:1b:d2:c1:61:4a:9d:3a:a1:f5:fe:2e:51:b2:1b:
         5d:48:3c:bd:ac:ca:d8:18:37:8f:3b:f0:1f:15:d6:55:1f:ec:
         4e:48:35:49:42:f7:92:83:bf:90:ff:45:09:e5:13:2a:02:af:
         07:3b:63:9d:eb:dd:da:0c:d3:08:e9:55:a1:ad:3a:3c:91:24:
         fa:9d:5f:9a:b0:30:1f:e6:a9:2c:84:39:5a:50:01:30:69:b3:
         fc:bc:10:5c:ee:7d:22:b1:e3:03:ec:7d:c6:9d:96:a6:19:b5:
         01:a7:10:92:dc:97:8f:6a:9f:b0:56:3f:3e:9d:2c:b2:95:d2:
         4a:eb:55:11:76:d5:0d:b6:60:3c:93:9b:11:b2:97:4f:63:7c:
         10:2e:6b:b9:35:1a:f4:a7:61:52:b1:6a:ae:41:e2:c6:76:ea:
         c0:21:e1:76:24:59:50:0b:2a:5d:90:e5:a5:5f:cf:75:9a:33:
         4c:41:da:47:6e:7a:a4:f6:6f:3c:3e:ac:0c:c5:42:c1:b9:9a:
         08:d7:65:b1:d1:e9:f2:37:6d:5d:f0:2e:d5:e5:97:e8:7b:35:
         ff:c0:5c:7d:2e:6b:cd:1a:cb:49:dd:bd:49:74:a8:b7:80:74:
         c6:c6:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:39 2025 by rpki-client