Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          IJhmaGNoqLWK7hYnbqymoGFmPv+aa2HZ1LqicvgIgKM=
Subject key identifier:   5B:05:4E:7A:A4:8F:BC:5F:D6:C9:A7:16:E4:FB:EC:4B:AF:EB:B4:7B
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       0198D4A7E19B9B38E7F508A6D61EE8B74817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          0CD5
Signing time:             Sat 23 Aug 2025 02:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:28 +0000
Files and hashes:         1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=)
                          2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: VWRPCB6FvQ2CNEaFpC/lyj8nY3fgeOt4rJ2lhTIOyU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:e1:9b:9b:38:e7:f5:08:a6:d6:1e:e8:b7:48:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Aug 23 02:00:28 2025 GMT
            Not After : Aug 24 02:00:28 2025 GMT
        Subject: CN=5b054e7aa48fbc5fd6c9a716e4fbec4bafebb47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:64:7f:c9:e3:ae:1c:31:d0:41:5b:87:95:59:
                    77:3b:9d:fd:06:f5:18:9b:56:58:93:cc:5e:73:bb:
                    f1:1d:37:fc:a7:b3:5a:47:b6:88:36:5c:2c:e6:d0:
                    ec:97:c9:ad:0b:20:79:a6:ee:56:ed:32:4e:89:ea:
                    e2:29:5d:6d:b8:96:03:cb:9d:89:27:1e:d5:58:d0:
                    e8:ec:19:e3:b3:cd:27:c8:de:e8:e8:b5:43:8e:33:
                    24:9e:28:51:77:32:fb:bf:ef:9e:71:4e:30:f2:70:
                    aa:b1:5f:50:90:66:c6:d3:46:22:70:73:25:4a:c0:
                    ce:31:e4:7b:ba:68:48:6b:3d:10:e2:5a:8c:ec:75:
                    60:3c:46:61:67:e1:3b:ec:d8:dd:91:03:da:c2:29:
                    76:cc:c5:ed:99:99:d6:2b:34:80:1e:18:39:6a:d4:
                    95:77:dc:51:b9:c0:4d:d7:a6:ff:35:1f:e4:20:17:
                    90:d5:63:05:68:7d:a6:38:a3:e5:7d:50:43:3a:12:
                    af:54:75:af:35:c1:fa:45:c0:8b:2a:05:9e:31:0f:
                    c2:a2:46:4f:8c:ed:4f:89:b6:1c:9c:36:59:11:30:
                    8a:8f:46:f6:e9:da:97:76:ce:4d:45:a4:30:9c:49:
                    7b:86:37:2f:33:9a:e3:75:1b:8c:9d:6e:af:bb:dd:
                    fe:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:4E:7A:A4:8F:BC:5F:D6:C9:A7:16:E4:FB:EC:4B:AF:EB:B4:7B
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:47:18:92:ef:c5:43:48:b5:54:68:1c:0b:3a:b4:89:c1:3e:
         15:ff:fd:11:46:32:43:17:98:93:e1:a0:f0:d6:3d:8c:a8:97:
         f5:67:9f:01:31:96:4f:e2:7c:1f:70:e4:96:0b:93:a0:c6:4f:
         5b:1d:38:ba:9a:0a:53:42:b5:f0:bd:1b:3d:0f:51:2f:ae:58:
         7a:af:e6:19:ed:d2:45:d9:6f:69:96:95:d6:07:6f:db:f9:43:
         ec:02:89:98:26:e4:e3:19:cf:9c:24:88:f9:81:88:ab:3b:c1:
         65:a8:86:da:5d:9f:0a:fe:da:cd:78:e9:33:aa:51:7f:ef:57:
         2b:6d:2f:37:46:0a:d5:e8:61:7d:fa:36:9d:1f:e1:ca:5d:39:
         33:ae:3c:ad:0a:d2:d5:87:55:ad:8d:66:b7:44:3e:b1:50:11:
         a2:41:3f:78:73:c4:a2:0d:e8:d0:19:4c:37:44:5d:91:6b:a8:
         d5:db:45:bc:75:50:ea:f4:3b:9d:bc:cf:e7:94:b2:7f:36:2b:
         d9:96:8b:16:5d:bb:6e:e5:12:bd:a0:1f:2e:49:44:59:c5:94:
         86:f1:77:0d:08:90:2d:00:5a:72:0a:d5:82:de:8e:44:85:16:
         66:81:54:70:cf:6d:44:2c:6c:9d:d6:b8:c4:9b:6a:8e:69:ae:
         fe:c5:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:38 2025 by rpki-client