Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
File:                     7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft (raw, json)
Hash identifier:          gfss+ZT4jc0XWc+IST69DOWYXVHM0JxAQtrr0pXPjEI=
Subject key identifier:   56:A7:42:EA:FD:2F:02:00:6E:B3:1D:B6:52:45:B8:44:40:AF:D8:72
Authority key identifier: EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC
Certificate issuer:       /CN=eeb59b791c7a11d232a95c7ef169285caea695bc
Certificate serial:       0198D73BD911A0E00C9F4522AFF3B5A57A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
Manifest number:          0665
Signing time:             Sat 23 Aug 2025 14:01:20 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:20 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:20 +0000
Files and hashes:         1: 5klL4oJYCAWVCtSt4Aa3ZqfkGO4.roa (hash: qBVepds6Syb8DaPWB6RynfxxSA3Sp6OU8dF9D31HEW4=)
                          2: 7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl (hash: oLE6W226pnpqbMGyClWFthYcfFyn8/Q+zO/fIXYYl/E=)
                          3: 8WMbOpSCq-43yrjp-Gue986sGls.roa (hash: lSFJ6DNUnrryZBRZ4iwSdCLZNyBNPcmv/tCrUVWgz2s=)
                          4: E6SsxrL0YU9sVh9I8GUbKrOvT1M.roa (hash: YCaqr7sid2K9NSVR3DjQ0cVKpB+Nv1AlUmt5Gzw4TLs=)
                          5: G40JELkFkjinZ7Bg4-gGMDe46ac.roa (hash: DxEJ7/YxUtp6mDjGz6vAkm+fJcRrhUMEE1ib29ZnNNg=)
                          6: dqHEZ0oARNoaVvG3IlOzVbCxw8E.roa (hash: Lu4R8BGvmtKvcPKaLg2jGVkmpU76/ij/EjZ+FuotBOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:d9:11:a0:e0:0c:9f:45:22:af:f3:b5:a5:7a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb59b791c7a11d232a95c7ef169285caea695bc
        Validity
            Not Before: Aug 23 14:01:20 2025 GMT
            Not After : Aug 24 14:01:20 2025 GMT
        Subject: CN=56a742eafd2f02006eb31db65245b84440afd872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cb:e8:d3:6e:4a:33:9f:32:79:d1:38:b9:a8:
                    6f:2d:c1:ef:f9:a5:b1:bb:ad:87:7c:c1:f7:7b:fb:
                    a4:24:eb:1a:a5:50:a5:33:93:a0:70:52:03:80:46:
                    4b:af:49:71:a3:93:46:65:9e:e9:d3:d7:25:91:1d:
                    aa:b5:d9:83:58:75:c6:86:42:71:3b:99:dd:19:80:
                    fd:b3:55:91:35:fd:cb:36:5a:2e:2f:47:9d:17:4a:
                    3d:d7:87:7f:65:3a:07:27:c3:e4:60:da:5d:55:65:
                    2b:7d:7f:5d:b1:a7:fb:2a:b4:8c:bb:51:58:f7:63:
                    ee:8b:27:ef:37:60:77:f2:d4:09:11:87:10:e1:94:
                    23:19:18:ea:52:bc:11:b6:21:36:af:94:65:0c:5b:
                    91:5a:b5:0c:90:12:ef:6d:a1:2d:f7:fc:0e:67:44:
                    36:8d:7e:72:e2:ea:af:48:99:7f:38:f8:9a:f4:07:
                    a7:49:b5:58:de:0c:80:b9:2f:39:fb:6f:c5:66:a1:
                    1c:d8:28:5e:84:ce:0a:43:e4:a8:91:34:de:df:08:
                    1c:10:d3:76:fa:59:58:50:62:e4:84:9d:03:75:93:
                    a8:02:6b:67:a0:c5:88:4b:3a:81:69:c2:ac:4f:f5:
                    b0:18:b5:53:8b:86:2d:54:2d:b4:36:2e:41:7f:d1:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:42:EA:FD:2F:02:00:6E:B3:1D:B6:52:45:B8:44:40:AF:D8:72
            X509v3 Authority Key Identifier:
                keyid:EE:B5:9B:79:1C:7A:11:D2:32:A9:5C:7E:F1:69:28:5C:AE:A6:95:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rWbeRx6EdIyqVx-8WkoXK6mlbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/efff71-7d11-4a1a-8ad3-a67d8c7ed7ca/1/7rWbeRx6EdIyqVx-8WkoXK6mlbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a1:85:47:d4:6d:d6:d8:f6:95:d1:f7:99:90:35:fa:10:b4:
         90:9c:bb:94:b8:ec:0d:1e:7a:bc:6e:f8:01:96:85:d2:8e:c1:
         a5:e7:d6:dc:99:c2:55:16:d5:51:a7:9c:6b:a9:52:9c:fc:20:
         42:4f:fe:7f:7a:19:e3:42:51:0f:5c:10:1a:e5:e9:64:ec:63:
         75:e7:6a:3f:99:f5:70:11:68:3e:a8:7d:24:d0:f8:c7:36:90:
         a0:74:9e:a5:60:aa:e3:3b:d5:f3:c8:7b:3d:c8:25:e2:8a:16:
         97:c4:e1:9f:04:92:69:7e:66:ba:7b:45:48:bb:17:9f:62:2a:
         54:53:3a:5f:6f:6f:42:e7:4e:94:b8:55:cc:64:df:ae:1f:c6:
         53:6c:0a:c4:2e:c7:7f:35:38:6e:ac:8c:06:b4:cc:0d:7b:a9:
         37:95:97:13:70:19:60:ea:51:d3:32:0e:c5:12:6f:f1:d1:e0:
         7d:a2:84:dd:d7:25:c1:e9:12:22:ea:b7:e7:38:16:ed:28:ff:
         fc:9f:d7:97:99:1d:71:79:93:94:fe:f3:0a:32:f5:e6:99:6f:
         67:c7:38:4c:70:05:a5:7c:d4:a7:ff:08:44:25:d7:e8:f9:d4:
         e5:1f:91:b3:b7:df:fb:ba:49:b0:f0:5e:41:87:7d:89:62:1c:
         51:f9:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:18 2025 by rpki-client