Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File:                     7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier:          yN/rwvjuf59pT9UOc/yRByobm029GdWMoU1BfWXuwWc=
Subject key identifier:   7C:B3:54:F4:18:07:0C:BB:90:A8:F8:93:BC:60:E6:19:CD:F7:5B:54
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer:       /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial:       019848F749F9F915B35B29AFC200AEA711F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number:          0F6B
Signing time:             Sat 26 Jul 2025 23:00:22 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:22 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:22 +0000
Files and hashes:         1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: LoawxeD88iecIUrG91QsCk/svz5lM+zVXMgdfpRNYNg=)
                          2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:49:f9:f9:15:b3:5b:29:af:c2:00:ae:a7:11:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
        Validity
            Not Before: Jul 26 23:00:22 2025 GMT
            Not After : Jul 27 23:00:22 2025 GMT
        Subject: CN=7cb354f418070cbb90a8f893bc60e619cdf75b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:2f:3e:40:37:92:63:7b:66:d0:60:64:e2:
                    d0:44:14:50:ef:2f:a0:19:a0:28:9d:9d:6a:88:02:
                    da:cd:fa:2d:fb:51:71:2d:43:48:6c:51:4a:d1:20:
                    ec:9c:98:79:7f:9f:bb:27:05:ae:ee:b5:13:57:53:
                    3f:3f:49:30:0d:94:33:e8:2a:e8:7c:d6:09:1e:b3:
                    0e:44:c6:bf:df:72:3c:df:c1:a8:0c:08:85:16:c3:
                    ef:85:0e:3d:4e:0a:24:6d:9b:53:42:44:d6:b6:26:
                    b9:a2:6d:ea:86:24:b0:5d:11:80:91:57:3e:c4:77:
                    6d:f7:8a:90:29:e9:1b:c3:7b:07:ca:b6:46:2d:09:
                    ab:b3:ff:80:2a:ae:91:03:bd:a1:fd:dc:61:a0:fb:
                    5b:fc:eb:4f:6c:4c:2b:93:e8:fc:cf:50:ec:4c:05:
                    99:cc:2d:b2:43:55:48:87:3a:f1:57:39:13:68:61:
                    ed:d7:c2:0e:cf:75:76:af:f1:9d:04:d9:13:da:93:
                    b6:fe:e3:44:28:47:48:67:73:72:23:ee:34:4e:ef:
                    2d:26:35:6c:8e:27:77:67:27:4d:77:4f:96:15:bc:
                    57:de:e1:2c:26:2b:b8:d7:49:d3:0b:b9:44:77:fc:
                    ea:74:64:fe:55:49:d5:74:13:8a:bb:f7:07:c2:ea:
                    83:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B3:54:F4:18:07:0C:BB:90:A8:F8:93:BC:60:E6:19:CD:F7:5B:54
            X509v3 Authority Key Identifier:
                keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:53:f9:33:35:77:ff:04:58:a8:05:a2:fe:b0:0d:6e:b4:e2:
         ba:17:37:ca:1f:67:ee:0d:53:4d:9b:17:38:c9:11:8e:e2:41:
         e7:75:55:3c:47:49:b7:ca:53:3f:28:77:9a:80:80:24:84:57:
         ef:ed:4b:6f:a0:e9:e6:87:51:23:a7:65:4a:95:a2:8c:e5:f3:
         dc:de:c1:6a:ba:ca:c8:cd:51:e8:3b:29:88:d6:6e:c0:5a:3d:
         40:46:45:9d:30:59:82:34:78:2e:10:e7:be:44:2f:e9:6f:70:
         83:92:59:d8:5c:4c:a3:0e:95:4a:35:77:05:5b:a4:70:af:7d:
         5a:06:c0:55:65:9e:7d:b5:bb:cf:7b:8d:ee:2e:07:b9:c4:d0:
         3f:14:d0:fd:3c:34:95:43:84:e8:07:00:02:92:be:0c:04:62:
         25:0d:4f:10:0f:3b:b4:09:98:7b:23:88:64:5f:8b:a1:08:41:
         42:b7:63:83:9e:dd:14:a3:0c:ba:4d:65:6c:44:cd:77:87:88:
         a8:67:e7:fd:b7:83:7e:e9:08:d4:eb:6a:1c:f2:18:a6:32:8e:
         c3:01:e2:50:9f:3e:29:ef:ac:7c:59:07:ae:01:9c:78:59:f2:
         ef:79:5c:42:00:41:2b:ec:03:4d:7d:40:ab:ed:22:8d:0f:94:
         67:a0:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:29:54 2025 by rpki-client