Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          vlVld2pIC7ldm9HUtt24frJUJwMLrKP7edfsowAyxY8=
Subject key identifier:   D7:AD:75:9E:E8:34:20:19:C0:E6:43:30:3E:64:11:A6:1E:9C:BF:FD
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       0198D54E18BCB000176629238644F6940EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          15C9
Signing time:             Sat 23 Aug 2025 05:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:01 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: ABsNTG5KBLnxA6+/YUIpk8ugIh9KAneRtnSIYQiqjeY=)
                          2: MuulXko9r_W9s3lZpOtOQspqBFI.roa (hash: H644QJfpv5o0XjCRyV5KUt5CE7o8qrfzHbuiFfSJd7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:18:bc:b0:00:17:66:29:23:86:44:f6:94:0e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Aug 23 05:02:01 2025 GMT
            Not After : Aug 24 05:02:01 2025 GMT
        Subject: CN=d7ad759ee8342019c0e643303e6411a61e9cbffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:c5:87:1a:4a:cf:ea:9a:a2:15:08:a5:81:
                    ca:cd:58:d8:50:c3:8c:66:99:5f:c0:76:66:10:c7:
                    e9:ad:22:43:c4:72:e8:2b:6a:54:28:9f:86:f3:c9:
                    1f:ae:29:4d:a3:b4:71:e4:40:b1:ba:c2:51:78:07:
                    76:25:a6:bb:ed:3f:3f:d4:d7:94:ef:6a:94:70:b6:
                    cf:01:d2:71:cf:42:d4:85:7a:88:01:79:1e:ab:de:
                    c6:29:10:2e:ba:64:84:82:8f:d1:52:aa:de:6c:e8:
                    9a:88:dd:5f:a0:d2:0e:54:c7:dc:d8:1e:20:0b:a2:
                    94:c1:30:88:1b:85:c5:a2:5a:51:cf:cc:88:aa:e7:
                    cc:15:7c:9a:4e:5e:4d:de:0f:20:77:58:21:ca:b0:
                    8f:31:cf:e3:9b:aa:02:48:5a:5f:d2:b6:dc:f9:13:
                    53:f4:52:ae:73:d5:63:88:9f:71:87:55:83:08:5a:
                    92:2d:48:bd:64:04:72:c6:51:a6:69:5a:0f:db:77:
                    f4:74:20:41:24:bd:d4:da:f9:a6:d1:49:37:81:99:
                    1b:96:df:e7:ec:55:4d:4e:75:44:48:fe:e4:0f:04:
                    8c:84:e7:5c:bd:55:d1:28:9f:59:45:31:20:12:ad:
                    e8:f9:6d:76:1f:59:5a:70:23:b1:74:fc:36:81:4f:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AD:75:9E:E8:34:20:19:C0:E6:43:30:3E:64:11:A6:1E:9C:BF:FD
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:26:c5:65:fb:c7:24:2f:2d:6e:bc:40:44:4d:36:cb:6f:60:
         9e:93:b4:08:24:39:ec:f2:b0:6d:76:68:15:94:d6:ba:a9:2e:
         b8:e9:95:ea:99:b3:7d:e5:90:2c:65:ae:2c:65:a1:0a:73:fa:
         c3:e1:ba:02:c5:a4:a2:5a:38:9f:e2:3a:00:71:a0:e3:a7:c6:
         b7:18:ee:ab:66:f1:1f:b5:a0:3d:08:a5:4d:16:9c:91:a9:37:
         36:2a:8c:55:7d:08:3f:37:f8:6c:de:ed:98:e2:81:51:de:68:
         e0:99:51:85:bd:52:d3:02:6d:05:ee:49:e1:aa:c1:01:ca:0f:
         5b:52:70:92:90:eb:23:2b:6d:22:7d:50:d5:bd:e3:b9:78:f3:
         b4:20:5b:39:7c:5c:0c:0c:d4:26:b0:ae:ad:0f:ff:51:86:e4:
         cc:4c:6a:1a:54:06:32:1a:b6:0b:24:cf:ef:59:6a:2c:da:e6:
         07:d5:37:5c:84:9e:21:2e:5f:bf:aa:27:c3:83:bb:7c:62:23:
         d8:d2:13:f8:ba:a1:b7:ae:bf:44:d8:85:17:b9:7d:72:d1:21:
         df:98:f0:fe:63:57:96:26:a9:be:bf:36:b4:bf:44:7a:f0:c9:
         e9:39:fd:77:27:b5:f6:a7:99:dc:b9:89:11:d7:d1:59:0d:c3:
         fb:0f:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:04 2025 by rpki-client