Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
File:                     e27QJ9N71hCaAxHihp00StlZNfk.mft (raw, json)
Hash identifier:          vjz93iytehp/C4fLh8VhwoVyXiZEPRiV9hQEaDuZEjY=
Subject key identifier:   B7:6B:01:1F:73:DA:93:84:3B:63:96:F9:2D:FF:48:C6:0A:82:45:AC
Authority key identifier: 7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9
Certificate issuer:       /CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
Certificate serial:       0198D472791218B6A1F1DD15E597C436D58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
Manifest number:          1186
Signing time:             Sat 23 Aug 2025 01:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:08 +0000
Files and hashes:         1: EUM1aJwtUikB8Y65_LlAJqn1yzA.roa (hash: sBgbUqT6oAOJIMXxII7LF7GW+tMnc6VUu6aJMAgCWpA=)
                          2: e27QJ9N71hCaAxHihp00StlZNfk.crl (hash: FvvlM9sFKqCrgOh+gdmoVFGFoa0thj+xRJ0FUIeyZpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:79:12:18:b6:a1:f1:dd:15:e5:97:c4:36:d5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b6ed027d37bd6109a0311e2869d344ad95935f9
        Validity
            Not Before: Aug 23 01:02:08 2025 GMT
            Not After : Aug 24 01:02:08 2025 GMT
        Subject: CN=b76b011f73da93843b6396f92dff48c60a8245ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:06:10:f4:5f:14:01:ff:71:23:39:2f:48:62:
                    ca:3e:6d:23:66:70:fe:4c:26:f0:d7:06:28:7f:88:
                    9c:e7:ad:16:7c:c6:e3:e2:6a:6f:6f:24:23:b3:a5:
                    c4:69:9c:29:c8:fd:2b:df:fa:29:16:98:d9:30:9e:
                    47:fa:5c:52:09:51:44:5d:e4:aa:0b:47:9f:32:65:
                    eb:cd:3f:b1:36:8f:8a:8b:ae:1b:f9:2b:f1:3d:95:
                    67:f8:c9:c9:0e:bc:00:95:dc:e7:00:a5:eb:3c:d3:
                    fd:fc:de:ff:0b:c0:83:74:d3:67:66:f1:a7:27:93:
                    c4:0f:3a:02:e9:cf:48:4b:e4:1d:cf:e0:2c:c0:82:
                    f6:80:45:9b:eb:0c:f8:59:39:b5:cc:78:95:d1:3b:
                    11:43:a1:b2:91:8b:b6:0f:6b:9b:56:b9:64:b5:cc:
                    b1:a2:bd:21:f9:f1:5c:9f:64:38:0a:ca:5a:65:4f:
                    14:a8:d2:ed:41:1b:ae:bf:88:e3:64:48:e3:30:d8:
                    a8:9f:a5:c2:e8:e9:0f:c7:8a:b0:b4:f9:4c:2a:b6:
                    24:89:6d:f0:04:6a:6b:f4:84:e8:dc:b4:0e:94:50:
                    97:de:35:a9:57:d9:ce:5c:ac:6a:d8:72:4b:bd:d4:
                    45:52:4b:48:7f:45:53:b9:bd:bf:47:f5:9f:17:82:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6B:01:1F:73:DA:93:84:3B:63:96:F9:2D:FF:48:C6:0A:82:45:AC
            X509v3 Authority Key Identifier:
                keyid:7B:6E:D0:27:D3:7B:D6:10:9A:03:11:E2:86:9D:34:4A:D9:59:35:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e27QJ9N71hCaAxHihp00StlZNfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/597e45-cde4-4c34-8bea-c97e373d704c/1/e27QJ9N71hCaAxHihp00StlZNfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:86:ef:16:1b:ec:40:ab:ec:e0:dc:68:13:47:72:db:50:60:
         da:4c:16:19:46:b1:f1:03:cc:4a:ad:56:5e:96:36:be:be:5d:
         4d:8e:9d:ba:2a:1b:d0:20:2e:82:65:1e:0c:64:dc:cc:a6:53:
         c8:36:c4:ca:aa:ac:1b:e7:ee:c2:ac:f7:b7:65:87:1f:3c:8f:
         a2:9b:38:dc:2c:42:ae:59:30:58:85:a7:3e:ec:5d:8e:d4:05:
         b1:7d:c9:44:8a:84:ff:46:a8:5f:d1:25:33:13:a2:08:40:77:
         64:94:10:a8:9b:d5:b4:e4:14:8a:91:b0:be:d4:bd:ba:c7:2f:
         09:7c:12:ca:d8:86:c9:bb:b7:c6:45:33:d4:6a:b9:f9:d4:66:
         1c:13:d8:41:76:59:7c:75:cd:2c:31:fb:85:da:b7:c6:4b:c9:
         c2:14:71:28:a8:28:7d:e3:2f:4b:73:72:fd:97:f5:00:ec:01:
         c9:2f:e2:c7:a6:48:50:76:a7:31:da:01:35:ac:34:75:ca:10:
         88:4e:58:77:84:51:4e:18:5f:75:9d:2b:9d:16:ce:95:80:c1:
         ef:07:08:f4:a3:58:66:9c:d0:13:49:55:21:4d:e6:c1:1e:19:
         25:ab:1e:4b:b4:b8:2f:76:1c:66:1a:9f:26:6a:2a:b0:21:87:
         27:4e:10:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:58 2025 by rpki-client