Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
File:                     7W3VjHMPSQxsZTC3ULUY55Okh6U.mft (raw, json)
Hash identifier:          Mjsy2uwA5eFcf4cGiuJZjU74Od+3MsC+vnVfAcjBc0A=
Subject key identifier:   05:79:A2:A7:36:23:BF:FE:20:19:33:89:3C:86:29:82:08:EE:8C:E2
Authority key identifier: ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5
Certificate issuer:       /CN=ed6dd58c730f490c6c6530b750b518e793a487a5
Certificate serial:       0198D472978BAD7FB092642E4D444E9B8B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
Manifest number:          0D2E
Signing time:             Sat 23 Aug 2025 01:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:15 +0000
Files and hashes:         1: 7W3VjHMPSQxsZTC3ULUY55Okh6U.crl (hash: m1Sm8SWEwHitnGqFhJXAiQzUN3+KVE7wWwP7VWWcRXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:97:8b:ad:7f:b0:92:64:2e:4d:44:4e:9b:8b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6dd58c730f490c6c6530b750b518e793a487a5
        Validity
            Not Before: Aug 23 01:02:15 2025 GMT
            Not After : Aug 24 01:02:15 2025 GMT
        Subject: CN=0579a2a73623bffe201933893c86298208ee8ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:95:38:d3:6e:51:41:fe:89:d8:6e:7d:37:
                    07:88:c8:aa:a6:e8:5c:2c:47:31:8d:46:dc:f4:0e:
                    48:50:44:f8:e1:af:6b:07:bc:ff:00:fa:fb:ac:4d:
                    51:40:2a:46:d0:df:49:9a:ed:08:98:73:5f:5b:e7:
                    e7:12:68:da:b2:5a:ca:99:f6:1d:b5:54:6a:f2:3c:
                    37:15:a7:f1:7e:e3:5b:66:76:cb:f2:e0:ae:61:5d:
                    41:0d:f5:78:86:d0:a7:be:4c:3c:fd:eb:15:d6:65:
                    8e:3e:a8:c9:ed:c9:ac:9b:19:6f:26:7a:7d:af:94:
                    1a:77:f7:0e:98:4c:eb:81:52:86:c4:2a:7b:88:71:
                    3d:d3:b2:19:44:5d:96:88:bf:ca:e5:86:fd:0c:db:
                    65:91:bd:f8:a7:c8:99:86:1f:1f:d6:46:46:16:03:
                    e0:80:a7:3c:d4:22:93:c0:3a:38:d8:01:ef:3d:b1:
                    07:46:60:1b:a8:4f:dc:2a:3f:73:34:85:56:c9:45:
                    e7:21:2f:c7:cf:55:94:d0:7d:fb:90:bd:7e:d6:72:
                    14:6c:9e:0f:85:c5:c1:97:5a:1c:e5:3a:f6:30:9d:
                    93:64:55:5a:e3:02:74:8f:16:95:d0:ad:ff:60:35:
                    de:84:99:35:8b:00:ac:f7:6f:8f:7e:70:6d:73:a8:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:79:A2:A7:36:23:BF:FE:20:19:33:89:3C:86:29:82:08:EE:8C:E2
            X509v3 Authority Key Identifier:
                keyid:ED:6D:D5:8C:73:0F:49:0C:6C:65:30:B7:50:B5:18:E7:93:A4:87:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W3VjHMPSQxsZTC3ULUY55Okh6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e1dad2-1796-4764-acf9-0aaea6670663/1/7W3VjHMPSQxsZTC3ULUY55Okh6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:29:6a:a6:b1:71:e4:36:60:c0:10:f4:88:bf:cd:59:90:
         f5:69:11:44:5c:f1:58:6c:09:96:cf:56:78:6d:7c:09:b7:3e:
         90:6c:93:3a:28:39:53:31:10:6c:a8:42:85:e8:42:60:a8:74:
         09:6e:46:54:56:ff:ab:d1:3a:39:10:4b:d5:f1:f5:28:9e:a7:
         ab:fc:6a:7f:33:9a:d3:65:c1:5a:97:05:b8:b6:87:5f:52:80:
         ac:2a:af:6c:05:b4:db:6b:73:0a:f7:a0:48:8d:87:20:b6:ad:
         f7:20:dc:fb:2b:44:67:12:6d:29:d0:f5:58:49:69:09:63:8a:
         d8:1f:8b:85:5b:b6:43:15:bc:8d:6c:ca:4c:8d:fb:d4:5c:44:
         48:8c:35:8e:86:62:01:c6:07:d2:46:c6:34:29:98:c1:49:0c:
         9a:57:1d:8a:c0:16:74:49:85:a6:c6:de:39:1e:b3:f1:6e:5b:
         57:b0:96:17:34:35:fc:08:68:2f:02:23:7a:68:fc:ac:4b:a3:
         41:5e:16:22:0a:44:83:b7:1a:a6:25:01:f8:5f:9d:49:65:2a:
         76:14:c3:da:4e:38:38:82:8f:70:1d:63:2e:ea:08:58:5d:ef:
         8c:f0:68:78:16:3a:a0:d5:e2:34:24:4b:64:63:ec:18:10:61:
         b0:f9:fe:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcpeLrX+wkmQuTUROm4tIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNmRkNThjNzMwZjQ5MGM2YzY1MzBiNzUwYjUxOGU3OTNh
NDg3YTUwHhcNMjUwODIzMDEwMjE1WhcNMjUwODI0MDEwMjE1WjAzMTEwLwYDVQQD
EygwNTc5YTJhNzM2MjNiZmZlMjAxOTMzODkzYzg2Mjk4MjA4ZWU4Y2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5iVONNuUUH+idhufTcHiMiqpuhc
LEcxjUbc9A5IUET44a9rB7z/APr7rE1RQCpG0N9Jmu0ImHNfW+fnEmjaslrKmfYd
tVRq8jw3FafxfuNbZnbL8uCuYV1BDfV4htCnvkw8/esV1mWOPqjJ7cmsmxlvJnp9
r5Qad/cOmEzrgVKGxCp7iHE907IZRF2WiL/K5Yb9DNtlkb34p8iZhh8f1kZGFgPg
gKc81CKTwDo42AHvPbEHRmAbqE/cKj9zNIVWyUXnIS/Hz1WU0H37kL1+1nIUbJ4P
hcXBl1oc5Tr2MJ2TZFVa4wJ0jxaV0K3/YDXehJk1iwCs92+PfnBtc6i9AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV5oqc2I7/+IBkziTyGKYII7oziMB8GA1UdIwQY
MBaAFO1t1YxzD0kMbGUwt1C1GOeTpIelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjkt
MGFhZWE2NjcwNjYzLzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9lMWRhZDItMTc5Ni00NzY0LWFjZjktMGFhZWE2NjcwNjYz
LzEvN1czVmpITVBTUXhzWlRDM1VMVVk1NU9raDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvgpaqax
ceQ2YMAQ9Ii/zVmQ9WkRRFzxWGwJls9WeG18Cbc+kGyTOig5UzEQbKhChehCYKh0
CW5GVFb/q9E6ORBL1fH1KJ6nq/xqfzOa02XBWpcFuLaHX1KArCqvbAW022tzCveg
SI2HILat9yDc+ytEZxJtKdD1WElpCWOK2B+LhVu2QxW8jWzKTI371FxESIw1joZi
AcYH0kbGNCmYwUkMmlcdisAWdEmFpsbeOR6z8W5bV7CWFzQ1/AhoLwIjemj8rEuj
QV4WIgpEg7capiUB+F+dSWUqdhTD2k44OIKPcB1jLuoIWF3vjPBoeBY6oNXiNCRL
ZGPsGBBhsPn+Gw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:48 2025 by rpki-client