Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File:                     R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier:          m4xUFzfmRPlojiT6MXVbyJMVTdX6iHHUDNqyFr+9WS4=
Subject key identifier:   60:5B:9D:31:94:00:3D:70:7F:AE:A2:A3:5D:71:5A:CD:BA:14:9F:37
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer:       /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial:       0198D5F11B302F7E4C7A5541CFD395FC310A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number:          02EE
Signing time:             Sat 23 Aug 2025 08:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:04 +0000
Files and hashes:         1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: GsjvpXq19dfiPW66Xq+tvBmY3Epsehul9VsmPQmFBsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:1b:30:2f:7e:4c:7a:55:41:cf:d3:95:fc:31:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
        Validity
            Not Before: Aug 23 08:00:04 2025 GMT
            Not After : Aug 24 08:00:04 2025 GMT
        Subject: CN=605b9d3194003d707faea2a35d715acdba149f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c0:a9:77:6a:85:b9:f5:bd:b6:e2:c6:b2:c7:
                    e3:ea:d8:da:ad:b7:9e:9d:18:65:38:53:7a:b4:55:
                    16:f0:3b:64:cc:2a:ed:0e:91:ab:38:55:aa:fa:0c:
                    50:d9:5d:27:bf:17:71:57:85:eb:3a:9d:76:b4:9d:
                    b6:92:36:7c:8f:20:5d:ae:71:43:e0:77:4b:0a:8c:
                    8a:81:f6:2b:00:20:8a:89:96:a4:07:23:99:27:f5:
                    9c:e5:33:0f:68:08:7a:a0:61:3b:37:43:d0:82:90:
                    d3:ee:68:ba:66:ae:b6:47:2d:f6:02:3f:72:ef:be:
                    38:90:15:54:be:14:38:b1:e7:6b:f5:80:b7:c1:45:
                    87:66:4b:75:28:84:8c:7a:9c:83:23:5d:0e:74:73:
                    cc:c1:f6:a9:06:75:f9:a3:1e:ec:b6:25:a1:1a:ad:
                    fe:e3:63:30:82:ea:c9:1b:4f:59:9e:7d:e5:f2:6d:
                    78:e2:38:07:7c:f8:17:b8:98:69:9c:24:57:7a:82:
                    89:94:67:cf:c1:6a:c5:e0:18:1d:a3:db:5e:10:8e:
                    cb:90:d9:d4:f9:a3:f2:7d:b2:59:a4:89:68:e8:cc:
                    36:9e:e1:bf:02:b3:bc:f1:b7:00:23:61:b6:85:06:
                    34:73:25:31:ef:14:fe:30:85:96:90:5c:d7:3d:5d:
                    8d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5B:9D:31:94:00:3D:70:7F:AE:A2:A3:5D:71:5A:CD:BA:14:9F:37
            X509v3 Authority Key Identifier:
                keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:70:c9:c2:f9:a3:f8:7a:94:a9:3d:13:13:32:7d:bb:27:
         1b:3a:9d:a8:55:cb:f3:0b:e6:57:57:5a:97:de:41:2f:8b:ad:
         e3:7b:d7:9d:50:cd:17:17:d0:d3:83:4e:f1:2a:2c:bb:26:58:
         56:a0:41:df:56:65:6c:2e:ed:6b:02:de:c3:5e:7c:2c:74:f5:
         64:53:59:78:85:74:7e:4c:f5:32:15:36:8d:1a:50:73:0b:aa:
         28:e2:ac:41:9e:bf:00:b1:09:90:c8:4d:9c:8c:1b:35:bd:dc:
         2d:6e:5e:9e:c5:a6:9d:e7:a2:d2:1d:f7:b7:03:96:62:35:80:
         b0:38:01:1c:f6:40:73:35:66:31:e6:90:96:02:ec:64:1d:8b:
         70:1d:b2:6e:f7:23:c5:18:34:b8:98:07:80:7d:92:89:5a:e3:
         e3:18:c2:e0:9a:d5:78:db:31:03:e5:df:bd:2e:cc:00:96:06:
         f6:71:24:83:f6:94:54:64:ad:e3:9d:f9:09:69:86:ee:88:53:
         eb:ad:a0:64:d9:00:a9:73:c6:f4:bd:7d:c7:f5:84:ca:a6:c9:
         b6:b8:16:27:24:3a:97:88:04:92:31:82:a0:c6:63:f1:b8:30:
         b8:b9:da:49:00:a2:c2:18:b3:6c:f0:c2:5d:7f:0a:3c:9a:ca:
         bd:9a:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:01:03 2025 by rpki-client