Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
File:                     7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft (raw, json)
Hash identifier:          wTQc5oRmDUYEOnm7iJLzjJRNsK+NSiZIrKKoFhGP1+s=
Subject key identifier:   EF:C5:E1:48:DB:F9:62:63:DE:54:67:D5:57:DE:17:73:70:E6:0F:2F
Authority key identifier: EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96
Certificate issuer:       /CN=eff987189da4e38385b0721854feccc3ef466a96
Certificate serial:       0198D7A98AF0C3C26BCBEF80DE847BBAD4DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
Manifest number:          0CE3
Signing time:             Sat 23 Aug 2025 16:01:09 +0000
Manifest this update:     Sat 23 Aug 2025 16:01:09 +0000
Manifest next update:     Sun 24 Aug 2025 16:01:09 +0000
Files and hashes:         1: 7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl (hash: /KxGY//kQYb7jQ3s3mcv2qZeyUdKhuujrI/sYsYVoGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:8a:f0:c3:c2:6b:cb:ef:80:de:84:7b:ba:d4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff987189da4e38385b0721854feccc3ef466a96
        Validity
            Not Before: Aug 23 16:01:09 2025 GMT
            Not After : Aug 24 16:01:09 2025 GMT
        Subject: CN=efc5e148dbf96263de5467d557de177370e60f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:75:4f:dc:42:ec:33:56:57:b4:f7:90:53:
                    cb:bc:90:3c:9f:c5:57:d8:be:cd:19:46:7d:26:f8:
                    3b:01:c4:3f:e9:99:8c:62:dc:ea:50:ed:00:5a:9a:
                    b8:f9:12:fe:bd:a3:95:a4:e3:26:32:e0:d6:ca:0d:
                    74:af:79:08:f7:0e:af:96:2f:70:d4:71:6f:42:8c:
                    8e:c5:f3:ae:75:0f:a6:2e:b7:06:a8:b5:79:f7:50:
                    cb:d8:e4:9b:c9:36:9f:cf:36:42:2d:22:34:f5:4b:
                    3d:80:24:67:0c:a2:f4:14:b8:cf:2f:06:c4:c9:e6:
                    ba:b5:78:0a:30:23:52:15:6d:dd:67:26:65:86:21:
                    c9:9f:d8:af:63:8a:c1:9a:63:e1:2d:a6:67:a3:8d:
                    2f:97:a5:1b:7f:8d:f9:51:ed:f3:6c:d0:18:f0:ed:
                    df:d8:58:e0:c0:7c:73:ad:a3:f9:37:a3:82:9f:56:
                    26:6e:3e:67:ee:a7:64:52:0b:d2:bb:bd:5f:65:21:
                    cf:64:6e:01:46:8f:64:83:f1:05:5a:6e:b6:bc:12:
                    ac:4a:fa:a6:81:78:fc:21:51:81:83:10:45:58:ef:
                    95:7a:b6:4c:c9:54:da:66:fc:f8:41:cf:e3:70:5c:
                    51:09:78:86:28:7f:4a:4a:a4:f0:e2:e6:48:3d:ec:
                    fc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:E1:48:DB:F9:62:63:DE:54:67:D5:57:DE:17:73:70:E6:0F:2F
            X509v3 Authority Key Identifier:
                keyid:EF:F9:87:18:9D:A4:E3:83:85:B0:72:18:54:FE:CC:C3:EF:46:6A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_mHGJ2k44OFsHIYVP7Mw-9GapY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a93010-f267-43ff-a760-885ee19ed6bf/1/7_mHGJ2k44OFsHIYVP7Mw-9GapY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:3c:cc:9a:34:cf:fa:0a:cb:45:9f:48:a1:25:88:f1:07:
         50:3c:ce:74:9e:2e:fa:44:83:47:20:aa:0d:54:82:5f:33:46:
         b1:b1:43:84:c1:0e:f6:c6:36:d0:bd:2c:72:b1:3e:47:b5:ff:
         37:45:e6:c9:02:a9:c7:9c:d5:bd:a1:18:f2:2d:17:85:99:72:
         6f:d7:d2:67:43:be:81:3f:74:b6:15:ca:86:ad:5d:77:cb:88:
         1c:60:40:ae:fc:96:a0:7a:7e:b1:28:fc:72:ea:e1:c7:e5:bd:
         52:16:63:c9:48:9d:1b:a7:61:e0:7d:13:98:50:88:e9:ad:6c:
         2f:18:61:9a:84:97:85:57:39:ea:5a:62:1b:72:58:16:d6:66:
         15:16:27:62:06:10:ba:d5:34:08:a6:1e:e9:54:86:c0:b2:c7:
         e7:f8:17:78:d8:4c:0b:59:20:16:d6:e4:0b:a2:dd:81:95:83:
         f1:70:27:61:18:f1:5d:ae:2b:c4:c5:05:f3:f7:e4:b6:7e:95:
         d1:b6:7c:31:98:ed:3f:e1:24:33:f4:e8:6e:25:07:76:ec:15:
         c4:0b:1e:1b:0a:f4:3d:f4:3e:e8:17:97:88:2c:4e:34:6b:8a:
         0f:ab:26:2d:c6:f6:04:db:19:d9:63:3b:ad:22:de:b1:c9:4a:
         6e:25:83:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:52 2025 by rpki-client