Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          l7+3+ZGubknNBggW6y/+VO6nrW1EfSAZeYg0II4/WXI=
Subject key identifier:   17:AE:30:26:75:A9:C8:F0:EB:8B:CD:4A:D2:46:53:01:EE:A1:59:EC
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       0198D6CE02F5BDDC4F6098936705C83F96D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          118F
Signing time:             Sat 23 Aug 2025 12:01:21 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:21 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:21 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: 63z/9Ccjb7vZLdhr2siNBGt5fpxaESyuqK/Mk6cf55w=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:ce:02:f5:bd:dc:4f:60:98:93:67:05:c8:3f:96:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Aug 23 12:01:21 2025 GMT
            Not After : Aug 24 12:01:21 2025 GMT
        Subject: CN=17ae302675a9c8f0eb8bcd4ad2465301eea159ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:e4:f6:48:6b:d5:18:63:2c:f1:b0:8a:53:
                    c9:59:85:4f:b7:f5:5a:f7:f8:ad:e1:09:87:28:28:
                    96:1c:79:44:7e:b6:53:c9:d9:f8:21:14:dd:ef:32:
                    13:20:05:08:0e:ee:ad:0c:00:c4:e0:03:fb:22:38:
                    b6:e0:86:8a:d1:81:c7:c5:66:80:a9:fb:a2:7f:3f:
                    d4:25:c9:47:00:68:4d:d5:25:f2:0f:f1:85:9b:23:
                    3f:5b:76:1a:6d:99:44:dd:fd:03:13:4e:cb:72:48:
                    fd:4f:1e:67:d0:fe:09:50:e7:a5:34:4d:ca:1d:f5:
                    70:c1:4b:6b:ab:f6:3b:a7:c5:d1:11:70:a6:e8:a4:
                    29:8b:40:a9:b9:b9:fe:9c:99:9d:74:71:68:34:cb:
                    1b:25:d4:1e:83:65:68:b4:fc:c0:13:c7:67:24:7d:
                    2f:50:be:47:b3:3c:eb:fd:c5:b2:d2:54:7d:ec:de:
                    ed:96:b3:a1:75:33:34:0a:6b:8a:64:2a:70:e6:f3:
                    53:14:5b:ee:77:72:0c:74:27:b7:2a:e7:f3:f2:e1:
                    9d:20:bf:e3:ee:07:54:6c:00:95:67:34:f4:dd:12:
                    96:4d:0e:fc:ec:ec:09:99:1c:50:0b:e2:ea:79:98:
                    8c:37:11:bd:d6:dd:01:09:ac:a5:c8:e7:51:bf:38:
                    4c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AE:30:26:75:A9:C8:F0:EB:8B:CD:4A:D2:46:53:01:EE:A1:59:EC
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:65:c0:79:bf:44:35:8e:ab:91:5f:cb:db:6e:67:14:01:18:
         67:e9:02:46:92:ee:f6:07:4d:f3:ce:2b:37:5e:d0:4f:ab:55:
         1c:1a:40:2e:3b:bc:de:2a:f9:fe:73:3e:52:56:a6:9c:f9:37:
         31:0a:44:52:a7:38:0c:ce:70:01:81:25:1f:3c:bd:69:2a:32:
         ed:71:c0:d9:3a:c6:6c:d4:1e:e8:b9:69:c5:3d:9a:2b:9b:55:
         cb:4c:5e:88:a3:a4:f6:77:b9:b3:a2:8e:46:72:7e:84:45:32:
         22:af:83:6c:5b:34:1c:02:93:2f:6d:84:fa:c8:5a:6f:15:bc:
         16:fc:48:20:d0:e2:6b:f0:8f:95:83:6e:93:e4:cd:2b:6c:52:
         e3:16:79:9c:25:2b:cb:cc:9f:1a:f9:91:da:3d:2e:e3:c1:73:
         b8:3c:5c:66:47:34:98:6e:56:8b:77:c6:3c:7c:aa:f6:af:ab:
         39:c0:db:c3:8e:aa:0f:cc:96:99:ad:e0:f4:a7:c1:37:c2:44:
         08:a7:c7:dc:b1:3c:e7:d0:64:ca:7e:6b:60:24:78:da:70:c8:
         8c:d1:2e:7f:31:e7:8c:ab:d3:1b:a9:ba:11:f7:7e:16:61:9e:
         ec:c7:f3:f9:c2:c3:d0:51:f2:41:5f:7e:96:b8:d4:f1:f4:96:
         8f:83:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:20 2025 by rpki-client