Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          3vNM1jUP+fgAUm5xx/VJuITx5MECBavshKQEknD/ebc=
Subject key identifier:   C2:AB:52:48:7B:59:5A:FA:1E:01:78:9C:61:34:B5:C0:69:A8:59:4C
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       0198D4E05D55A8A798FE9C5996DCFD8DD99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0B28
Signing time:             Sat 23 Aug 2025 03:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:10 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: CyJqH6OQZcmZDC1aEbniONJmknpzbFMgXxW9fIVZfGU=)
                          2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:5d:55:a8:a7:98:fe:9c:59:96:dc:fd:8d:d9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Aug 23 03:02:10 2025 GMT
            Not After : Aug 24 03:02:10 2025 GMT
        Subject: CN=c2ab52487b595afa1e01789c6134b5c069a8594c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5e:64:d8:78:4b:b2:01:e2:6c:c8:a8:6e:f8:
                    c9:90:cf:42:c5:b5:f1:b0:cb:df:c9:3e:83:74:49:
                    9a:a9:87:69:81:86:97:85:1d:8a:9c:fc:a3:79:7d:
                    af:8a:db:ff:2f:89:0c:35:cc:9f:f1:c1:ef:2e:33:
                    5f:b4:b4:68:70:92:0f:3d:29:80:4f:0b:a0:21:f9:
                    1f:d1:d6:08:30:16:ea:44:a0:d8:2c:15:0b:20:94:
                    16:a5:ab:99:01:ae:d1:a1:0b:6d:b7:e2:01:2c:2e:
                    ed:e2:ad:22:04:ff:c0:ba:eb:bb:20:57:54:b9:79:
                    5a:47:13:d2:56:c4:9c:19:ba:f0:96:c0:17:7c:22:
                    27:87:30:23:50:8d:05:f2:ad:02:31:fa:6d:f9:79:
                    d8:f6:1d:75:e9:4c:00:11:d4:19:e6:57:4a:2a:05:
                    f5:4a:44:26:2f:b0:87:af:6c:0c:83:0c:5c:24:78:
                    71:ac:00:e9:75:3f:40:7a:f9:63:45:0d:0f:87:ba:
                    97:a8:43:2a:95:d0:27:77:2d:32:2f:dd:30:48:db:
                    b3:43:70:d1:68:3d:72:a7:a9:26:7b:8d:d5:b1:50:
                    7c:21:c3:fb:e4:9e:f5:f8:75:c8:ea:11:04:69:11:
                    07:11:9e:8c:90:bc:98:f3:9a:fd:80:8d:6f:f9:ef:
                    56:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AB:52:48:7B:59:5A:FA:1E:01:78:9C:61:34:B5:C0:69:A8:59:4C
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ec:20:a5:38:24:ae:eb:b8:26:70:6f:85:17:51:f3:0d:5c:
         5b:da:7d:e7:27:cb:0b:c6:fd:aa:77:86:08:04:04:db:17:ad:
         8f:a5:16:4b:49:f4:b4:79:83:2c:fc:bc:a9:b4:fb:ff:3a:55:
         0a:38:0a:6a:e7:a0:30:0a:8f:c9:b6:df:e0:47:40:46:9b:e2:
         69:1e:7d:f3:27:65:0d:c8:0a:1b:fb:ae:8c:20:cb:6d:11:c3:
         6e:36:f8:bb:db:9f:88:af:c6:d4:fe:bd:5d:67:e1:d9:ec:e7:
         96:c0:a8:73:58:03:22:f3:26:6a:db:b0:c0:40:ba:99:4f:4e:
         c3:49:fb:c6:82:2a:6e:11:d6:26:85:90:71:1f:93:34:8d:9a:
         6b:71:d8:e8:d9:ad:d5:41:16:4b:94:f6:33:10:35:c2:c0:71:
         24:57:be:13:51:23:80:b9:50:73:93:48:48:4e:5d:79:05:f7:
         8a:0c:de:a0:6d:73:4e:18:e9:cd:b2:b5:b4:fb:65:64:3c:16:
         94:b2:f6:f4:97:cb:e4:76:03:db:b8:8f:a3:2d:45:ca:ce:43:
         72:70:f4:ee:5b:2a:f3:a4:55:ae:7e:83:a9:05:f1:c6:a0:74:
         95:54:db:18:e8:e0:9c:c4:4e:5f:3d:5e:da:1a:67:96:34:bd:
         91:db:0f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:15 2025 by rpki-client