Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
File:                     7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft (raw, json)
Hash identifier:          YFHB79TMk31rBL1pWEfGlRwiEuvKtgowCwkj6WgawXk=
Subject key identifier:   03:7E:F7:33:1B:9D:56:32:8F:18:EE:EE:53:89:BA:45:6D:25:51:62
Authority key identifier: EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD
Certificate issuer:       /CN=ef0f20533dcc7995a28cf67767a041698667c4cd
Certificate serial:       0198D473EBB2BDF450BC032FCEF123927DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
Manifest number:          0B90
Signing time:             Sat 23 Aug 2025 01:03:43 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:43 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:43 +0000
Files and hashes:         1: 7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl (hash: PPWdLl1VcK6MoXXNY1OJtxYCvS12zLuMCTyDLM+ozYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:eb:b2:bd:f4:50:bc:03:2f:ce:f1:23:92:7d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0f20533dcc7995a28cf67767a041698667c4cd
        Validity
            Not Before: Aug 23 01:03:43 2025 GMT
            Not After : Aug 24 01:03:43 2025 GMT
        Subject: CN=037ef7331b9d56328f18eeee5389ba456d255162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:b2:2d:fc:ad:22:d6:9c:b9:5e:c9:7e:6f:
                    39:41:b9:1d:09:e9:84:cf:f2:4b:b3:cf:44:58:46:
                    93:f2:de:56:af:67:b1:fb:d2:1a:4f:aa:3c:79:8a:
                    57:15:97:3a:80:81:aa:07:c0:24:b4:e7:e1:2a:db:
                    71:e6:3a:80:d1:b4:e3:7c:84:0f:b1:e8:ad:35:40:
                    6c:15:ca:cf:60:d8:49:7d:a9:42:af:aa:b5:c7:6a:
                    66:77:38:90:60:0a:fc:bc:8d:e8:13:99:97:bb:90:
                    88:e5:0b:68:b5:66:2c:2d:70:70:52:be:36:a2:6f:
                    6b:6c:eb:7c:7b:14:f4:26:bd:f1:cf:c8:9f:01:2a:
                    34:43:00:4b:f5:2c:e3:f7:39:9d:77:20:49:ce:ae:
                    20:17:b5:0a:07:20:59:67:5f:c7:13:55:60:4e:f1:
                    05:9b:09:31:78:34:f6:75:d3:90:8b:26:4a:58:e4:
                    10:47:42:e7:13:c1:64:e9:b8:74:56:a0:fa:e8:4b:
                    43:0f:dd:a0:26:1b:30:ef:f6:80:c9:d0:2f:51:fb:
                    a5:b1:42:4a:5a:f2:60:71:10:27:64:20:09:0a:f8:
                    ee:26:49:94:96:de:92:82:7d:7b:02:06:56:c3:30:
                    f2:47:af:28:9c:42:59:a1:a3:c8:c0:3b:d4:52:e3:
                    dd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:F7:33:1B:9D:56:32:8F:18:EE:EE:53:89:BA:45:6D:25:51:62
            X509v3 Authority Key Identifier:
                keyid:EF:0F:20:53:3D:CC:79:95:A2:8C:F6:77:67:A0:41:69:86:67:C4:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/ad883d-d243-4b1e-a32a-d14946e4f5cd/1/7w8gUz3MeZWijPZ3Z6BBaYZnxM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:18:53:57:c6:78:88:71:c9:9d:e9:00:48:9a:ca:80:99:
         41:19:b2:a8:5c:d4:38:72:b5:fc:a1:80:41:5f:b8:08:86:f8:
         5f:8d:5f:2f:88:79:7a:b1:92:5f:a1:5e:aa:8b:86:e3:39:61:
         c8:d6:8f:eb:95:06:9f:59:bd:a5:ab:c1:5f:4a:96:68:d3:ba:
         6a:09:25:a9:65:1e:28:4a:27:a3:4f:56:42:d7:52:2b:2e:e7:
         52:f3:90:24:d9:5e:5b:cc:ba:83:dc:ba:ba:a9:16:83:1a:72:
         e8:17:88:18:0e:ed:7e:5a:17:76:80:42:81:9e:41:a7:5c:8b:
         aa:d9:8e:96:d9:d7:bb:e2:45:4d:73:3f:63:a3:66:ab:af:e0:
         c2:56:23:63:8c:31:d9:31:84:9f:59:43:b9:fd:58:1a:59:b8:
         09:56:e7:01:e9:b5:23:0a:ff:7c:c0:98:7f:00:f7:0d:f5:45:
         aa:0e:ab:42:98:4e:a7:61:53:98:28:44:0b:06:25:e4:30:5b:
         6b:f6:2d:b5:c8:ed:ba:ad:dc:9e:a9:33:e8:05:60:88:fc:38:
         53:7d:9f:03:36:04:32:ce:56:f1:c3:48:8a:92:c6:db:a1:85:
         b3:1f:aa:b0:1d:1b:91:0f:15:fd:fc:66:89:e3:b0:11:31:e1:
         d1:1a:e4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:21 2025 by rpki-client