Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
File:                     E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft (raw, json)
Hash identifier:          +QUwyrL4v1yQeJlBo1qXmJSFdKujhzb/i4v4/l3b3XI=
Subject key identifier:   7E:6D:21:B9:5F:98:2F:ED:E3:94:DF:00:3C:E6:6B:CA:15:A6:E2:BD
Authority key identifier: 13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE
Certificate issuer:       /CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
Certificate serial:       01984A781C0144C9C477465A5034C7B326FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
Manifest number:          0583
Signing time:             Sun 27 Jul 2025 06:00:42 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:42 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:42 +0000
Files and hashes:         1: E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl (hash: q3UK7niP9yr6/a9yDJJnd4suw1JmKq3XKsFx5HCD1nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:78:1c:01:44:c9:c4:77:46:5a:50:34:c7:b3:26:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13743d307a8b72ac532f4cd883f0c942bad0f4be
        Validity
            Not Before: Jul 27 06:00:42 2025 GMT
            Not After : Jul 28 06:00:42 2025 GMT
        Subject: CN=7e6d21b95f982fede394df003ce66bca15a6e2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:69:9a:43:d4:0c:0c:a7:9f:9a:7f:ba:d2:2b:
                    90:a2:ae:08:ec:27:d3:7d:cc:fd:e4:6f:99:da:e6:
                    fb:28:90:47:94:10:38:ca:55:0d:16:e0:da:3c:f3:
                    63:2c:04:e4:58:27:0e:f8:73:c3:e7:c4:60:2a:f1:
                    88:41:a3:63:4b:7d:83:fa:f1:a7:e2:d7:b2:f4:c6:
                    ce:87:64:7a:72:b8:1a:5b:e1:7d:cb:db:d3:59:a6:
                    09:32:c0:11:47:f6:44:6d:02:ff:ba:16:5d:6a:34:
                    6a:68:0a:a7:ab:a3:a2:1a:6c:2e:c0:74:bf:cc:a1:
                    48:f1:bb:68:a5:f5:12:9a:ce:de:42:fd:81:0a:3d:
                    16:46:21:48:21:10:4c:a4:e1:1c:3c:00:b2:03:cd:
                    ec:77:cb:e9:73:e1:8e:51:e8:dc:e8:2a:84:8a:e2:
                    f7:6d:70:1b:2c:ae:e6:79:ab:8a:d8:06:a7:11:d8:
                    2f:64:31:39:4b:f4:66:9c:68:08:2b:c9:04:45:78:
                    3e:50:ad:5b:db:74:ea:d1:a6:df:5b:1a:dd:6d:d0:
                    d0:2f:d2:bc:34:11:04:42:2b:7a:0c:1f:a1:06:ee:
                    dc:e0:c1:46:0d:0b:80:76:dd:6a:4a:90:03:66:e4:
                    44:77:3a:95:ca:c1:2c:4b:b7:30:9f:fa:f2:8a:27:
                    7d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:21:B9:5F:98:2F:ED:E3:94:DF:00:3C:E6:6B:CA:15:A6:E2:BD
            X509v3 Authority Key Identifier:
                keyid:13:74:3D:30:7A:8B:72:AC:53:2F:4C:D8:83:F0:C9:42:BA:D0:F4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/7e15c8-9631-4837-a05d-477d1e9a40b8/1/E3Q9MHqLcqxTL0zYg_DJQrrQ9L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:cd:2b:e2:00:eb:7d:1a:45:ea:09:01:77:31:e4:d0:b8:
         48:89:e7:b2:d4:06:b3:cb:dc:e6:d9:3e:70:43:78:ee:3e:c2:
         6f:f5:7d:28:2d:1c:92:cc:4c:e4:a5:e5:94:25:98:89:60:1e:
         dd:78:71:7c:e0:16:04:33:ab:23:58:fe:7b:95:d0:a3:33:ca:
         ef:bc:9e:da:77:de:35:2b:b2:89:02:76:57:85:98:fe:1a:1e:
         d3:a0:75:9e:86:60:d8:c5:6a:ba:16:85:8d:d0:8c:62:c6:da:
         b6:3e:9f:f1:53:c8:96:b9:f2:bd:cf:f3:17:9f:d5:7a:47:5a:
         49:a6:d1:be:88:2c:ca:46:2a:f0:da:18:b4:58:76:93:43:e5:
         6f:54:e8:b6:df:e5:99:1d:81:b0:4c:bc:15:7a:cc:cd:1b:01:
         f3:e8:f0:df:15:3c:f0:83:c2:6c:f3:d8:83:20:59:b2:37:34:
         05:e2:ad:de:37:8c:df:66:9e:f3:4b:f7:c9:06:53:c6:1e:00:
         fa:e5:dd:20:f3:e8:e2:8a:bb:0c:1b:96:c8:8d:01:c5:44:af:
         20:c7:6b:d0:6a:e3:ba:1e:67:b9:7e:50:4d:51:c9:f4:1b:30:
         74:41:8e:31:81:0a:ac:2f:e9:d7:80:04:ac:27:cc:70:9e:ef:
         cc:48:89:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:11:49 2025 by rpki-client