Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
File:                     7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft (raw, json)
Hash identifier:          APDXwXl1Mn6CPvOThwRTEsF5qbf0gAXR5zqn7VCXnec=
Subject key identifier:   97:9E:AB:A0:9F:37:7B:B8:AD:67:00:26:83:C7:DD:F5:0B:43:F5:D5
Authority key identifier: ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C
Certificate issuer:       /CN=ed900a55518b679edc78faa9883ec6e6035ae71c
Certificate serial:       0198402B3A02D73B08816D1255DE7BEB3AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
Manifest number:          03BA
Signing time:             Fri 25 Jul 2025 06:00:31 +0000
Manifest this update:     Fri 25 Jul 2025 06:00:31 +0000
Manifest next update:     Sat 26 Jul 2025 06:00:31 +0000
Files and hashes:         1: 1-ieyIqujcrCxJblAajzfComBT5M.roa (hash: n5puj2nwsSUZldVzpI+lBrVc/7elXyEjudzznV0aSbQ=)
                          2: 7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl (hash: t9EEokdpmq6vDfaNp5awKs9hvoC91vk4amG5SSgEDp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 06:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:40:2b:3a:02:d7:3b:08:81:6d:12:55:de:7b:eb:3a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed900a55518b679edc78faa9883ec6e6035ae71c
        Validity
            Not Before: Jul 25 06:00:31 2025 GMT
            Not After : Jul 26 06:00:31 2025 GMT
        Subject: CN=979eaba09f377bb8ad67002683c7ddf50b43f5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:06:5e:51:86:e4:25:8f:55:ba:af:37:2e:
                    bb:dc:4b:d5:4c:aa:38:28:80:f1:d7:15:9a:91:41:
                    af:dc:1c:7e:6c:d1:54:6f:de:36:0c:1d:bc:90:38:
                    96:7c:68:38:24:d7:e9:a0:ee:1b:b4:65:9e:ee:e5:
                    19:f4:17:77:77:88:65:c2:c1:ef:92:43:7f:55:63:
                    43:2d:d1:1a:b2:30:fc:bc:35:3b:b4:e6:ac:92:40:
                    2f:da:65:af:e9:5d:4c:c6:52:d7:4e:1a:27:9e:6d:
                    a4:72:e2:48:3b:c3:6d:0a:9a:9c:65:db:0a:7e:0d:
                    4f:5e:75:d7:90:c0:f5:3a:65:2d:b2:21:e2:0a:2f:
                    3f:e3:13:13:84:78:a8:95:af:7b:0f:39:7d:18:16:
                    4a:e8:3e:ca:43:70:8f:74:d9:8f:65:1d:ce:32:15:
                    3e:fb:5d:68:96:fc:65:b1:bf:1f:89:97:3c:92:c1:
                    18:3f:19:97:87:a9:73:7e:76:10:91:05:41:e7:47:
                    42:1e:85:71:b7:29:96:f9:d6:47:32:2d:d1:24:35:
                    f0:11:c3:d5:1a:cc:17:f9:2b:a0:00:fd:a3:3e:24:
                    5e:08:24:2c:d3:ea:1d:03:30:0b:48:38:26:32:1f:
                    f9:b2:16:f0:e8:6e:c8:2e:80:cb:8e:7c:d8:3e:91:
                    88:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9E:AB:A0:9F:37:7B:B8:AD:67:00:26:83:C7:DD:F5:0B:43:F5:D5
            X509v3 Authority Key Identifier:
                keyid:ED:90:0A:55:51:8B:67:9E:DC:78:FA:A9:88:3E:C6:E6:03:5A:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZAKVVGLZ57cePqpiD7G5gNa5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fbfacc-a4f0-4bdb-abbb-0f73661d5f35/1/7ZAKVVGLZ57cePqpiD7G5gNa5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5d:96:10:42:00:f1:f5:b9:a1:ec:1d:dd:79:d2:ae:45:5e:
         df:4e:b9:5e:93:05:1d:4c:ad:a4:0d:f1:c0:20:70:4a:6d:12:
         6e:6a:ea:27:9c:24:d2:97:97:6e:a5:0a:48:2e:02:9a:77:1f:
         92:76:df:6a:fc:73:40:60:fc:cb:0a:c9:d5:9b:d4:ba:ce:3a:
         f8:d9:35:4b:a1:a1:da:e8:8d:40:2b:4a:58:2e:ab:7b:40:7a:
         80:3e:98:1b:70:06:a3:80:40:9c:8e:7d:0c:25:57:ba:ee:0e:
         eb:0f:28:d9:92:4a:cb:f8:a6:a8:70:60:8f:7b:79:26:5b:4e:
         77:2a:68:d0:f5:b2:d0:70:86:67:42:bd:28:2f:6f:28:8c:dd:
         18:cb:41:ed:44:43:34:92:ea:91:99:21:e4:72:77:b9:e1:4e:
         45:76:01:de:8d:f0:1d:b8:1d:7c:27:bd:6b:cc:88:db:dd:33:
         02:6d:49:89:27:f0:fd:0b:78:44:bc:3d:5e:60:22:cc:85:f6:
         1c:54:89:9e:3d:72:d5:0d:6b:1d:22:c3:14:07:a7:a2:74:2e:
         c0:ab:17:d7:bf:c1:7f:32:7f:d4:3e:55:30:84:07:b2:46:68:
         f1:9b:c5:b4:b6:3c:fb:44:80:82:25:bf:fa:57:9e:4e:ba:8a:
         d0:d2:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:57:23 2025 by rpki-client