Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
File:                     e_7CSauE-BJlaciz2OP0PNgsYRU.mft (raw, json)
Hash identifier:          IoXH5X0UgllhotLfPI6LshE/MABlOm75ev/xqGZsWNM=
Subject key identifier:   0D:48:E0:40:16:7A:F4:10:22:86:6C:06:DF:BC:F4:8E:D2:F7:C7:C1
Authority key identifier: 7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15
Certificate issuer:       /CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
Certificate serial:       0198D8F27EBBF4FD49D552DE5F448BA6DFCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 22:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 22:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 22:00:27 +0000
Files and hashes:         1: e_7CSauE-BJlaciz2OP0PNgsYRU.crl (hash: jjWld+CNAwz/rmDduWOL4Ny31GYPgujGlAHGVUqyRO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:f2:7e:bb:f4:fd:49:d5:52:de:5f:44:8b:a6:df:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bfec249ab84f8126569c8b3d8e3f43cd82c6115
        Validity
            Not Before: Aug 23 22:00:27 2025 GMT
            Not After : Aug 24 22:00:27 2025 GMT
        Subject: CN=0d48e040167af41022866c06dfbcf48ed2f7c7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:b0:07:93:3a:71:a7:9a:6c:26:51:83:ea:
                    ee:0e:06:d3:2f:0b:d6:7c:99:e4:5a:7e:c4:07:05:
                    a0:51:9a:ff:84:90:c3:7c:fd:d8:89:21:ed:c7:ad:
                    4e:8c:ad:e6:df:1c:d2:7c:f6:57:e0:40:99:56:41:
                    3f:39:1a:47:4c:a0:6c:c1:64:b8:5b:78:56:c8:02:
                    d2:59:01:14:3b:09:d5:45:c3:d9:79:a9:37:42:f3:
                    e9:cc:e6:aa:23:fe:d7:c1:68:71:04:0c:c6:5a:25:
                    38:c8:2c:b9:9f:8e:f6:b0:eb:55:45:51:e9:e0:d7:
                    3d:4d:4b:1e:cf:e0:fd:1b:bc:d1:bb:20:70:57:f6:
                    5b:81:c3:ef:96:32:d0:b8:77:d6:75:4e:6c:ea:f7:
                    24:00:c3:e3:5e:65:2d:cb:3b:74:0a:5b:ee:cf:b8:
                    27:7c:0e:f1:09:25:2e:d7:e8:e0:41:c4:c4:2d:19:
                    a8:8f:45:f8:f5:16:0b:ff:7f:6b:c1:8a:5c:98:60:
                    a4:9f:c9:d9:ea:03:c0:75:95:d0:16:c7:c0:74:91:
                    89:be:1c:38:31:d2:11:01:1e:73:ca:64:e3:2d:07:
                    3a:e6:aa:a9:8b:47:10:47:52:90:0b:eb:ba:9f:8b:
                    68:92:8a:48:ca:60:b4:6b:9d:4b:8f:83:5b:05:50:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:E0:40:16:7A:F4:10:22:86:6C:06:DF:BC:F4:8E:D2:F7:C7:C1
            X509v3 Authority Key Identifier:
                keyid:7B:FE:C2:49:AB:84:F8:12:65:69:C8:B3:D8:E3:F4:3C:D8:2C:61:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_7CSauE-BJlaciz2OP0PNgsYRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4f311b-46e3-4ac1-8e9f-debc282d483e/1/e_7CSauE-BJlaciz2OP0PNgsYRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:7e:ed:9f:7a:dd:ac:87:53:e8:29:a5:9d:1e:4e:a7:25:fc:
         a4:4d:07:6d:9c:c6:1b:f7:0d:a1:0b:65:d9:95:5c:c5:fb:03:
         6a:91:ff:58:4f:84:99:6d:1e:db:72:d5:30:21:95:ff:70:ae:
         7b:6e:66:10:29:00:b5:b3:7d:f9:f8:d8:b2:6e:a8:e4:ed:01:
         9e:61:e4:1e:b0:35:85:0d:1e:1d:79:c8:b3:2e:5f:53:16:2f:
         90:d2:2d:82:99:93:ee:10:a4:49:9a:19:f0:dc:15:7a:78:84:
         a6:1e:42:2d:65:10:b0:d4:76:a3:3b:62:0d:d6:d5:03:df:cc:
         d4:fd:83:65:1a:05:dd:f0:68:2e:63:50:e0:d3:72:35:74:0a:
         3a:29:e5:0d:d9:62:5b:b8:d7:46:cb:3a:49:0b:a5:73:0b:50:
         8a:ea:fd:22:c3:8a:22:2a:34:55:0c:13:56:df:e7:06:a4:a1:
         55:1a:cf:b4:f9:f5:4b:0a:c3:d7:1b:a3:e1:e5:6a:d0:bd:23:
         a6:77:16:ef:e4:07:f6:d1:0d:80:39:2d:eb:9b:14:c2:cf:52:
         80:53:c7:de:c9:47:e3:e5:81:bc:19:66:92:c0:3c:64:12:35:
         ae:07:be:0e:10:c2:c1:b7:fc:f5:63:4a:b0:40:66:a8:a4:5a:
         88:00:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:08:55 2025 by rpki-client