Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File:                     7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier:          g/NyfeMM4PZmDWZ94RJaWMQO1nMvEkDwnPP9oMreGHk=
Subject key identifier:   7E:0F:8B:C0:23:D7:DD:49:23:2D:91:E5:FD:1C:4E:82:6F:9C:B2:B5
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer:       /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial:       0198D73B2D3AF830D882730B6C3315518E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number:          05F4
Signing time:             Sat 23 Aug 2025 14:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:36 +0000
Files and hashes:         1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: MLYPC5sR/74LrZIS1H/jmMmGDvJ4AEstUyJOtLtRkHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:2d:3a:f8:30:d8:82:73:0b:6c:33:15:51:8e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
        Validity
            Not Before: Aug 23 14:00:36 2025 GMT
            Not After : Aug 24 14:00:36 2025 GMT
        Subject: CN=7e0f8bc023d7dd49232d91e5fd1c4e826f9cb2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:f6:64:72:c3:a2:c9:5b:64:14:7b:db:cc:
                    85:89:ed:5b:9d:0b:64:c9:50:5e:9a:55:bc:64:bd:
                    0f:51:c0:cb:8d:72:e2:e6:b5:0a:a6:67:4b:06:6b:
                    5a:af:e0:b6:76:ec:18:00:8c:91:01:f5:7e:76:0b:
                    eb:c7:66:b9:70:78:eb:e0:fe:89:85:b2:c1:bf:5e:
                    ac:78:6b:ae:1a:a7:1b:8d:8d:01:61:75:1d:83:b3:
                    58:ff:8e:6c:1d:91:cd:25:b7:d2:1a:bf:a3:1b:62:
                    47:62:9e:bb:da:51:ba:32:1f:54:9b:2d:69:49:88:
                    df:25:6f:c0:a0:b2:02:04:b4:60:9d:28:65:15:f1:
                    ca:76:2a:ca:74:c8:fa:b6:29:3d:d1:bf:12:7c:4c:
                    10:1c:da:83:ee:60:3f:4c:5b:ac:20:b6:a9:bd:62:
                    d0:90:3d:6c:c5:71:0d:f2:c3:c4:33:9e:cf:63:c3:
                    c5:cc:db:30:86:d2:fa:a1:ec:c7:68:21:75:a5:aa:
                    c7:e1:ad:65:25:a4:7f:7b:76:7e:2f:e0:16:5d:d7:
                    e6:63:db:f7:c4:3d:d6:d4:a9:93:39:98:c5:7e:f0:
                    b9:83:0d:8a:7c:69:1a:11:42:0e:81:cb:d5:1f:6d:
                    12:cd:5f:ec:91:6a:e5:df:a0:f5:4f:80:c3:2c:d2:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0F:8B:C0:23:D7:DD:49:23:2D:91:E5:FD:1C:4E:82:6F:9C:B2:B5
            X509v3 Authority Key Identifier:
                keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1b:35:ec:e0:57:fe:ad:0f:82:35:a1:41:d8:30:80:45:76:
         9e:92:a8:bc:c8:b5:a8:dc:a3:42:91:4a:70:8b:24:aa:5a:50:
         8e:b3:a6:81:83:f5:a7:18:85:c8:4d:d7:e2:57:fe:f8:e2:44:
         09:6a:e2:80:ce:11:4c:00:48:9b:6b:94:8f:6b:95:a6:aa:f4:
         06:68:38:a8:0f:04:fb:ce:23:2e:86:85:e6:80:b0:dc:f0:87:
         3d:fe:99:06:15:10:04:e8:7c:7b:4c:34:53:de:10:b7:02:c4:
         1e:c2:0b:3b:6b:9e:95:99:33:f3:9f:a1:02:72:64:79:f5:99:
         6b:d7:42:eb:96:04:e3:57:d9:98:30:7f:be:ba:ae:58:a9:68:
         a5:89:a9:bc:8f:47:9f:02:b2:45:b9:a5:2c:59:ff:96:f8:87:
         a3:bd:61:6c:22:34:3c:df:30:a4:39:1a:bb:74:20:29:ed:5b:
         19:b2:5b:b7:1d:ba:eb:74:01:7c:8c:06:b7:27:b1:de:a8:a3:
         fa:2e:a8:a6:ac:93:2a:8f:d4:e9:26:3a:05:64:76:2d:f3:c6:
         0f:17:98:b7:6a:04:f7:01:39:26:88:19:39:02:b6:ea:1e:85:
         69:0d:3f:a6:c0:6d:71:82:60:f8:7d:3e:aa:8b:40:b7:0a:f8:
         a2:7f:17:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:59 2025 by rpki-client