Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File:                     7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier:          LHeM5pbhSdVmIQnDaYxQIMZpCfX9G6lGxlHI7k/M2dU=
Subject key identifier:   E3:DE:09:9E:08:B2:7E:B4:F7:E2:C2:F2:95:1D:DF:D2:4A:F3:7A:B8
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer:       /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial:       0198D54E3EA44FEC13EAC3A30E7318B2ACCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 05:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:11 +0000
Files and hashes:         1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: g3UIPfrSdbBCWo8/Et3Fm4HmFlf89es4Z8RdPfIwSBs=)
                          2: wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa (hash: 1qal0bkeh/nfDvlv2LnznS6FzwmXQAEY+XJKvfyD2Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:3e:a4:4f:ec:13:ea:c3:a3:0e:73:18:b2:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
        Validity
            Not Before: Aug 23 05:02:11 2025 GMT
            Not After : Aug 24 05:02:11 2025 GMT
        Subject: CN=e3de099e08b27eb4f7e2c2f2951ddfd24af37ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:85:c4:30:30:e4:9e:20:99:d8:0a:43:ab:
                    cc:6f:01:8e:a0:5b:45:63:fe:07:ca:b7:11:1f:b4:
                    60:a2:a2:52:61:99:3c:7b:59:88:6b:fe:6b:18:4b:
                    96:95:37:d3:32:19:f9:71:ec:96:2b:e6:25:ce:e7:
                    e9:a1:45:d9:2f:59:19:4a:c8:a7:d3:d7:7c:98:39:
                    12:31:4f:3a:b2:42:78:a8:bc:db:77:b7:4c:40:32:
                    f8:79:ac:41:05:54:a9:d2:62:7e:c9:1d:65:d7:80:
                    2e:a4:35:98:47:1c:2c:f6:81:eb:28:81:9e:9c:95:
                    32:d1:18:d4:74:d5:c6:06:4f:1e:70:0e:46:3b:69:
                    af:44:b9:76:f5:1a:39:5e:aa:f2:8a:df:f8:06:b6:
                    fe:0f:6d:b2:61:32:0e:94:74:cc:d5:43:99:fc:99:
                    bc:b0:ad:e3:09:4c:79:9e:70:5c:2b:b6:b1:55:95:
                    f2:3c:b0:24:f6:7f:50:33:c5:60:5b:fa:42:77:8b:
                    10:63:ce:ba:70:04:b3:e2:ce:9b:6a:61:53:69:9d:
                    b6:5f:02:8e:10:b3:46:95:c6:be:50:1b:27:8c:a7:
                    c4:71:ce:62:3e:ca:91:bd:57:bc:51:31:b5:67:b7:
                    6b:0f:9d:33:f1:9c:07:c2:c3:8c:71:96:41:bb:7e:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:09:9E:08:B2:7E:B4:F7:E2:C2:F2:95:1D:DF:D2:4A:F3:7A:B8
            X509v3 Authority Key Identifier:
                keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:67:56:56:6a:16:eb:b0:b3:c3:3e:b3:55:a1:0d:bf:9c:e0:
         76:ff:76:f8:6a:68:fe:1b:68:b8:c9:60:ff:4b:fc:7d:b8:10:
         de:dd:16:f4:e0:23:52:23:75:7f:a3:14:48:d2:7e:a7:c6:35:
         4b:c0:e5:0b:b2:84:a2:34:d3:d0:a6:57:64:05:cf:e7:be:17:
         81:c3:ea:4e:72:c9:88:b2:ae:16:32:0d:c1:2f:57:2c:2b:c7:
         76:31:3f:7c:2b:c4:45:fd:19:79:14:dd:3a:27:91:26:3a:38:
         3a:ce:85:1f:57:de:6a:1a:6e:c3:11:2b:1a:0a:ce:4d:23:0a:
         f4:64:fd:0e:c8:49:8e:09:f9:35:d5:d4:ac:78:b5:b0:3c:ff:
         57:04:fb:36:dc:19:eb:f4:2e:7c:68:66:33:fc:97:84:7e:13:
         0f:88:43:5e:b2:27:7f:49:6a:e7:da:8f:2f:3a:79:a0:a7:22:
         e7:88:a9:ff:68:b7:18:ae:e6:36:77:ae:ee:e9:f7:c7:17:3f:
         02:10:00:b1:44:d5:84:ed:54:f6:82:fd:90:4b:4e:37:69:b1:
         61:07:b2:0b:80:1d:aa:3f:8d:a1:c5:d6:e6:d6:04:73:85:55:
         79:28:14:20:21:c3:23:e3:06:34:52:09:80:4a:b2:aa:f1:42:
         f5:b2:c0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:57 2025 by rpki-client