Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
File:                     7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft (raw, json)
Hash identifier:          wdtkSQU9xxC7+YJbQbyHJsweb06dc/sxP5jtDnxELsM=
Subject key identifier:   33:9C:F0:0A:03:D5:7D:81:C6:31:61:F9:AD:FD:65:11:FA:B7:20:BC
Authority key identifier: EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40
Certificate issuer:       /CN=ee0abba552f46b94edf22394feec1d0459f20140
Certificate serial:       0198D698427DCE3855106E8F6D144EBF4495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
Manifest number:          0520
Signing time:             Sat 23 Aug 2025 11:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:39 +0000
Files and hashes:         1: 7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl (hash: 2+4b/S1WfA4mMZh0K1rMUSPnml1X2mHQ8T4BNFKno2s=)
                          2: ZSfnZXfCOs8x_SKnrQS-DfOeOBs.roa (hash: k4WlesxZPYjMy2rKnlrfZMvi67C/I6Pliai9HgbVxyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:42:7d:ce:38:55:10:6e:8f:6d:14:4e:bf:44:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0abba552f46b94edf22394feec1d0459f20140
        Validity
            Not Before: Aug 23 11:02:39 2025 GMT
            Not After : Aug 24 11:02:39 2025 GMT
        Subject: CN=339cf00a03d57d81c63161f9adfd6511fab720bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:03:be:db:98:e8:83:08:71:86:fc:6b:0d:
                    c4:2c:44:e8:48:06:09:40:f9:55:56:b2:ae:5b:30:
                    d2:66:ed:40:10:8b:f2:54:99:90:c2:a3:e7:ea:f3:
                    6b:f4:f5:25:0f:8b:31:a5:80:27:fa:a7:9e:fc:e0:
                    7e:4e:08:d9:a3:c7:07:d0:2e:3c:64:9a:6e:c4:49:
                    8e:7c:24:9a:1d:d6:8e:07:6e:c9:6f:87:0f:09:58:
                    d0:42:14:b3:21:78:c4:aa:f9:3d:2a:ae:22:a7:dd:
                    25:fa:05:03:dd:b1:94:d4:b2:5b:7b:95:33:b8:3a:
                    21:05:30:5b:cc:d3:c8:e6:dc:d9:ed:9c:4c:ad:3b:
                    6c:15:00:e9:d1:3d:7d:a6:73:2b:7b:32:51:95:5b:
                    df:56:c1:12:4d:86:37:c7:b8:70:74:e2:a1:f9:84:
                    ac:14:e7:4d:09:a7:1e:70:12:5b:6e:65:6a:64:86:
                    6e:15:6c:ac:56:b5:62:15:d1:e7:ff:e3:5d:ff:8c:
                    4f:d9:8e:87:39:3a:b8:91:28:9d:15:08:ea:fd:a8:
                    22:fa:27:5b:64:83:6c:a7:40:e1:29:6d:3a:ad:91:
                    72:f3:7f:c7:e5:8c:5b:3e:d8:cf:2e:24:8b:07:8e:
                    bb:51:32:56:9e:ee:da:a6:51:4d:c8:2d:e8:69:83:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9C:F0:0A:03:D5:7D:81:C6:31:61:F9:AD:FD:65:11:FA:B7:20:BC
            X509v3 Authority Key Identifier:
                keyid:EE:0A:BB:A5:52:F4:6B:94:ED:F2:23:94:FE:EC:1D:04:59:F2:01:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/ea5d84-20b7-4108-9b62-3b773e5ee663/1/7gq7pVL0a5Tt8iOU_uwdBFnyAUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b1:22:e6:65:a9:a1:26:cd:10:5e:5d:5a:3d:47:0f:f1:d5:
         cc:ff:90:30:85:b6:68:eb:a7:56:f3:03:50:68:dc:35:6d:20:
         3e:9b:f6:a4:3f:51:55:4d:32:ca:3a:3b:92:fc:d6:06:ab:a5:
         81:09:79:82:69:ae:c0:24:23:f4:83:29:b3:0f:7a:00:33:c5:
         ee:79:80:fd:8e:4d:19:88:96:dc:94:30:fb:6d:d2:dc:27:ae:
         8c:2c:a1:8b:7f:87:43:a1:11:e7:c6:10:35:98:ae:98:51:66:
         eb:f2:d4:11:dc:d9:01:e5:12:37:68:9e:8a:7d:a3:7e:31:89:
         e8:8a:13:e6:b3:95:36:e7:99:ea:a9:f6:33:2e:8e:f1:05:d3:
         a1:48:37:ab:0d:6b:44:c0:a8:53:cc:a4:dc:66:b0:ac:eb:f3:
         7e:78:37:0e:1a:15:ca:05:24:19:38:bb:37:4c:14:91:1d:17:
         ea:30:33:3b:10:27:5f:63:ac:f8:1b:51:ca:cc:ee:91:95:44:
         ac:64:91:19:03:e9:50:0b:38:4e:ea:36:e1:ab:61:09:50:cb:
         79:4a:68:d4:5a:1f:1b:ef:31:2a:d4:70:40:47:6b:6e:e7:26:
         1c:d1:f0:a9:53:cb:85:a9:83:84:43:18:c1:7c:1b:0c:e5:2c:
         de:9e:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:50 2025 by rpki-client