Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
File:                     7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft (raw, json)
Hash identifier:          tFMRptmOyqFgvhQzE2IkfWuLU5kA8gE1oN5OQuW/vkA=
Subject key identifier:   67:4F:AF:A7:90:8A:43:3D:FF:E8:5C:FF:11:70:DB:60:6D:0D:E9:6B
Authority key identifier: EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B
Certificate issuer:       /CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
Certificate serial:       0198D8BD2DEF95A37D40FCBE3DA1EC23DA51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 21:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 21:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 21:02:13 +0000
Files and hashes:         1: 7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl (hash: FwDEl6SHawR7b53t7lRV8ILzVV3UD1f52kObAwkF5zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:bd:2d:ef:95:a3:7d:40:fc:be:3d:a1:ec:23:da:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2f09530061045f42f7bd51f1c3b6259ebae1b
        Validity
            Not Before: Aug 23 21:02:13 2025 GMT
            Not After : Aug 24 21:02:13 2025 GMT
        Subject: CN=674fafa7908a433dffe85cff1170db606d0de96b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9d:20:3c:89:97:29:f3:68:b8:c1:a4:68:ee:
                    7d:c1:bc:d9:37:dd:a6:63:8f:84:97:ae:38:96:f2:
                    72:43:5a:51:8e:07:c8:bd:e0:e1:5e:dc:67:72:c5:
                    f2:30:b8:bf:8d:03:ba:ec:c8:5d:64:22:78:1c:93:
                    cb:31:a3:b6:27:76:7d:be:1e:e7:8a:f4:34:88:94:
                    96:06:2c:bd:11:c3:a5:33:14:35:bc:85:b9:78:83:
                    97:da:e2:f1:22:d7:ba:0d:62:0e:1b:35:1f:91:a6:
                    36:0c:39:77:68:56:5f:2e:ff:48:f2:44:41:53:3d:
                    39:b7:d3:e4:49:c0:e8:56:12:42:fb:4d:3a:9f:40:
                    f4:4c:f9:56:a9:6d:87:ec:93:81:59:d7:f2:f9:17:
                    4a:61:a9:5a:15:a1:e3:9d:43:18:16:2d:1f:b2:fa:
                    c4:f1:14:f5:d8:2b:61:d6:6d:e8:48:16:9d:09:f3:
                    ad:7f:24:27:47:e7:bf:7a:0f:61:0e:e3:18:7b:10:
                    e5:ec:de:f3:92:bb:bc:e8:64:6c:b8:72:5f:aa:01:
                    86:aa:a8:21:e1:ef:f2:5d:91:68:7c:17:e9:a4:fc:
                    6c:ce:8a:31:af:51:09:33:07:92:d0:6d:6d:c0:cc:
                    5e:94:4f:01:4b:5f:2e:54:15:ab:2c:a5:e3:71:fe:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4F:AF:A7:90:8A:43:3D:FF:E8:5C:FF:11:70:DB:60:6D:0D:E9:6B
            X509v3 Authority Key Identifier:
                keyid:EC:B2:F0:95:30:06:10:45:F4:2F:7B:D5:1F:1C:3B:62:59:EB:AE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ed702-8739-4cd0-b2be-1ab07a269010/1/7LLwlTAGEEX0L3vVHxw7Ylnrrhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0d:ad:66:04:c0:d4:f8:53:80:67:27:37:04:4a:28:94:f3:
         0e:ec:e4:21:2b:be:8e:ac:9c:f9:54:55:bb:00:78:de:fb:12:
         06:26:86:6d:22:cb:ba:e2:91:20:a9:af:c1:21:f0:97:77:08:
         6b:95:b9:81:d4:35:ce:18:28:fd:e9:6d:04:b8:c1:dd:08:a2:
         60:9c:59:f6:5f:c8:af:38:8c:ab:9d:06:84:99:66:14:99:bd:
         a6:3b:6d:23:61:59:d3:8a:41:0a:85:c2:9c:68:55:c5:dc:5c:
         41:f6:ea:67:f4:c1:e5:32:47:3e:62:2e:6c:c9:30:a9:4d:03:
         2c:0d:2d:7c:36:fd:e9:65:4f:be:69:8e:03:71:82:0a:49:a6:
         2e:60:b3:75:e6:24:3a:6d:99:3c:c5:78:49:30:55:00:ff:5d:
         f8:0d:96:71:b8:18:ea:c8:07:cb:ab:0d:4d:bd:82:29:82:ea:
         9f:a1:59:a4:39:99:74:25:50:c4:b8:ce:51:c8:64:53:d0:c6:
         bc:cd:5f:76:36:1c:60:56:82:1a:50:31:30:24:5f:0c:a7:0a:
         d5:f7:ee:4a:59:79:d1:70:ab:0e:07:3e:6c:8e:ff:96:1d:34:
         75:e9:ad:87:3b:24:46:36:8d:40:e7:31:46:1c:0d:9a:94:68:
         92:cb:62:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvS3vlaN9QPy+PaHsI9pRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYjJmMDk1MzAwNjEwNDVmNDJmN2JkNTFmMWMzYjYyNTll
YmFlMWIwHhcNMjUwODIzMjEwMjEzWhcNMjUwODI0MjEwMjEzWjAzMTEwLwYDVQQD
Eyg2NzRmYWZhNzkwOGE0MzNkZmZlODVjZmYxMTcwZGI2MDZkMGRlOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl50gPImXKfNouMGkaO59wbzZN92m
Y4+El644lvJyQ1pRjgfIveDhXtxncsXyMLi/jQO67MhdZCJ4HJPLMaO2J3Z9vh7n
ivQ0iJSWBiy9EcOlMxQ1vIW5eIOX2uLxIte6DWIOGzUfkaY2DDl3aFZfLv9I8kRB
Uz05t9PkScDoVhJC+006n0D0TPlWqW2H7JOBWdfy+RdKYalaFaHjnUMYFi0fsvrE
8RT12Cth1m3oSBadCfOtfyQnR+e/eg9hDuMYexDl7N7zkru86GRsuHJfqgGGqqgh
4e/yXZFofBfppPxszooxr1EJMweS0G1twMxelE8BS18uVBWrLKXjcf4VbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdPr6eQikM9/+hc/xFw22BtDelrMB8GA1UdIwQY
MBaAFOyy8JUwBhBF9C971R8cO2JZ664bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUt
MWFiMDdhMjY5MDEwLzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83ZWQ3MDItODczOS00Y2QwLWIyYmUtMWFiMDdhMjY5MDEw
LzEvN0xMd2xUQUdFRVgwTDN2Vkh4dzdZbG5ycmhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg2tZgTA
1PhTgGcnNwRKKJTzDuzkISu+jqyc+VRVuwB43vsSBiaGbSLLuuKRIKmvwSHwl3cI
a5W5gdQ1zhgo/eltBLjB3QiiYJxZ9l/IrziMq50GhJlmFJm9pjttI2FZ04pBCoXC
nGhVxdxcQfbqZ/TB5TJHPmIubMkwqU0DLA0tfDb96WVPvmmOA3GCCkmmLmCzdeYk
Om2ZPMV4STBVAP9d+A2WcbgY6sgHy6sNTb2CKYLqn6FZpDmZdCVQxLjOUchkU9DG
vM1fdjYcYFaCGlAxMCRfDKcK1ffuSll50XCrDgc+bI7/lh00demthzskRjaNQOcx
RhwNmpRokstiyA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:57:48 2025 by rpki-client