Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          WTUMvtgFcDmESFPkaO+aPkMg3VAZVKdFsOJBnitEZNg=
Subject key identifier:   FB:48:D2:BE:2E:A7:09:F8:7D:84:AC:E6:BC:32:F1:72:3D:39:D8:2D
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       0198D54E69E8C6F4D7F3BFB1F00E8FC4B3C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 05:02:22 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:22 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:22 +0000
Files and hashes:         1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: VOGeCaRcVth9ulk9ERtfU/YL/4XGE36k8NGU0ZSvHGk=)
                          2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:69:e8:c6:f4:d7:f3:bf:b1:f0:0e:8f:c4:b3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Aug 23 05:02:22 2025 GMT
            Not After : Aug 24 05:02:22 2025 GMT
        Subject: CN=fb48d2be2ea709f87d84ace6bc32f1723d39d82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:d3:9e:2b:c1:73:9d:db:78:a5:33:8c:45:
                    88:4a:ed:f4:66:fc:d1:4b:20:57:bc:c0:0a:0a:16:
                    4d:d8:7d:cc:21:ad:df:03:37:5c:37:aa:3f:e2:7d:
                    8b:93:57:e6:7b:09:ea:51:48:f6:9c:c6:a1:31:f2:
                    7e:8a:40:62:a2:8b:57:2a:1f:fa:f7:0d:2f:b8:70:
                    ac:73:3f:cf:38:28:aa:96:41:e5:04:6a:a1:78:48:
                    16:a3:84:ed:f7:3a:a0:a8:aa:f4:db:0f:c1:55:3c:
                    0d:41:b8:f4:6d:20:2f:c5:02:25:d7:1c:f6:37:05:
                    18:18:c5:52:f8:1f:3d:17:cd:79:a9:34:fd:18:ad:
                    4f:fd:32:61:25:71:5e:78:f1:a2:71:99:db:0c:ba:
                    36:17:46:5d:f1:54:c6:47:22:9f:66:4b:7b:c3:24:
                    98:4a:92:f9:43:f4:c3:58:09:13:d0:57:01:17:5f:
                    3a:87:e2:42:14:be:8a:aa:6f:9c:83:78:5e:07:55:
                    61:13:24:e4:1b:6b:3a:50:da:a5:84:29:44:6f:2d:
                    77:ab:a5:74:29:ad:ab:f0:c9:0c:9c:70:f9:6d:ba:
                    58:8e:06:57:11:60:ee:9c:88:66:ea:07:d3:f5:b0:
                    b8:b2:41:64:f0:c9:13:72:28:3d:d4:27:07:f7:07:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:48:D2:BE:2E:A7:09:F8:7D:84:AC:E6:BC:32:F1:72:3D:39:D8:2D
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:97:35:b7:bc:03:5e:95:5d:49:a8:96:0b:5b:b6:e5:53:cf:
         41:4c:5d:4f:d2:63:6c:b1:70:8e:54:9c:26:0e:c2:94:48:a4:
         a9:da:f4:fa:31:1f:00:4c:f4:53:02:b2:cb:a2:33:b8:d0:b0:
         c5:c2:be:da:da:04:64:40:ac:db:7b:90:c5:c3:d9:a3:76:6c:
         16:6c:84:c2:7a:89:1a:95:34:ee:66:6b:c0:c6:b6:d0:e0:29:
         e4:e3:83:a2:3f:77:75:61:96:76:70:69:e7:f7:ae:4a:bd:8f:
         b1:3e:1c:0f:c3:4d:7a:7b:a3:13:55:23:c3:31:5e:c5:32:1a:
         18:39:e2:1d:7d:23:10:27:68:a8:28:76:35:47:51:74:e4:13:
         46:e0:71:83:a7:c6:c5:c8:8d:5f:bb:b0:11:ba:55:fe:49:4f:
         be:64:e1:37:ff:eb:24:70:c9:ed:66:2a:f1:13:39:a7:6f:5d:
         bf:eb:0d:be:c3:30:c9:d8:c0:23:2c:4b:36:0c:3f:b8:f3:cc:
         fb:4a:ed:bf:35:c2:fc:a3:98:27:29:39:f5:f9:24:ad:f8:50:
         35:07:53:0a:f5:4e:51:aa:7e:c3:e3:c7:63:cc:0f:c2:8b:b1:
         f6:13:bb:0d:3e:98:27:38:e5:9f:fa:be:e7:62:6a:40:87:f2:
         3c:c1:6d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:06 2025 by rpki-client