Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
File:                     z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json)
Hash identifier:          DqjvBfNf+/nLbjCCKQ9Hb5C9rvrI8kle9hNMU7rAOtY=
Subject key identifier:   C2:6D:CB:94:9D:B4:B4:08:B5:F2:5E:82:F9:32:53:AE:70:69:6E:6E
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Certificate issuer:       /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial:       0198D515B9054688D1367640CC00677A031E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
Manifest number:          0EB5
Signing time:             Sat 23 Aug 2025 04:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:27 +0000
Files and hashes:         1: ywILmYvfHvLy0zrc3mPdeVVeQE8.roa (hash: lEGb7Lo1v/pUmyHP90bFn1LBuW2bb3HIQFNpoQo/fns=)
                          2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: 7BXADEmce4yDO5fLugDcC+zNZLae45w19d4H6uSFSCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b9:05:46:88:d1:36:76:40:cc:00:67:7a:03:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
        Validity
            Not Before: Aug 23 04:00:27 2025 GMT
            Not After : Aug 24 04:00:27 2025 GMT
        Subject: CN=c26dcb949db4b408b5f25e82f93253ae70696e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:e0:3a:00:7d:96:94:71:10:1a:30:90:72:
                    61:ae:73:ad:ec:d0:c1:f6:0a:d1:3b:cb:85:4b:e2:
                    9e:2c:ac:71:44:4d:6c:ca:73:97:45:11:68:0c:95:
                    dc:6e:1d:60:f5:ff:34:60:a2:88:53:1a:25:bb:6d:
                    61:b7:c8:d6:7b:c2:03:3f:e7:da:04:c6:1d:30:25:
                    a8:d1:df:67:82:c3:46:08:fe:e5:49:f7:fe:fc:f1:
                    8d:83:2b:83:82:8d:4a:a7:00:06:c3:d2:04:d8:ec:
                    00:71:ae:40:4a:12:37:71:9e:dd:1a:34:bb:01:5d:
                    2b:09:c7:f5:31:77:54:4d:61:5d:cd:8d:e3:59:44:
                    01:ee:e7:95:14:ef:60:42:84:5e:21:ca:39:c7:61:
                    b9:0d:5e:b0:fc:79:dc:6c:d6:b9:4f:74:ef:bf:41:
                    6d:df:62:f2:ef:a9:61:46:45:01:ce:48:2b:5b:1b:
                    41:4e:01:47:4b:04:3f:c8:82:fb:ac:12:24:00:90:
                    e4:fb:40:d9:e5:a9:46:7f:d6:86:98:3c:cb:28:67:
                    da:f6:79:42:c8:1b:8f:f3:7d:b1:f5:44:a9:55:60:
                    72:18:f2:60:11:94:a2:37:7d:fd:38:73:8f:a7:85:
                    ff:21:29:36:55:26:54:e4:eb:bc:23:d2:83:85:44:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:CB:94:9D:B4:B4:08:B5:F2:5E:82:F9:32:53:AE:70:69:6E:6E
            X509v3 Authority Key Identifier:
                keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:7c:df:35:3a:4e:28:80:75:5a:01:97:58:53:4a:63:43:38:
         91:f2:77:d6:00:f6:37:67:5a:bb:00:46:26:0c:b2:96:60:d7:
         b7:36:af:ec:b2:b9:5f:26:f6:cb:65:83:eb:2f:91:55:3f:ab:
         1d:80:47:1d:05:c5:7c:d9:ea:b0:62:30:4e:f4:1f:61:cc:3f:
         73:b9:e0:0c:1c:ea:e6:e0:48:50:fa:ab:f1:e2:45:e4:13:8b:
         38:e4:cb:95:d0:62:e6:2d:1b:d4:9c:3a:43:a5:65:cc:c2:01:
         a1:37:61:90:33:1e:39:b4:24:06:2f:7c:14:df:1b:42:62:67:
         c7:07:8c:0d:cc:d1:36:8d:c4:02:f2:ed:e7:6d:8a:c6:f1:04:
         76:f5:1a:8a:1d:24:75:b4:25:c2:e1:88:c4:f0:a5:c2:62:67:
         76:5a:4a:8c:62:be:db:a6:aa:42:02:59:ed:d3:c9:3a:fa:b0:
         c6:38:47:93:d1:3e:58:b2:b3:3d:df:eb:8e:bc:2e:46:39:b9:
         55:40:70:7e:f7:e0:8a:de:fe:63:98:ae:59:f8:78:32:5b:1b:
         1e:ce:d7:82:3f:5e:91:fb:8f:7c:1b:7f:f5:e1:b8:5c:5f:37:
         13:1e:dd:92:6c:b8:04:10:dc:2b:89:94:c2:5a:34:c9:d3:7d:
         76:63:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:35 2025 by rpki-client