Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File:                     7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier:          I68FB1B/6eGEb/Iagn6OKaboDnZeBFCY8zPRiFMCqmw=
Subject key identifier:   3B:28:9A:49:98:D3:35:38:D8:06:08:52:E1:F9:B1:45:58:0A:21:96
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer:       /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial:       019848F7645D0D1E9FFE87930A4B1BB951B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number:          1603
Signing time:             Sat 26 Jul 2025 23:00:29 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:29 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:29 +0000
Files and hashes:         1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: 0X219ZFbHD4zEYXho9cj154VdaK0z8d1OaxlrOXcdyk=)
                          2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:64:5d:0d:1e:9f:fe:87:93:0a:4b:1b:b9:51:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
        Validity
            Not Before: Jul 26 23:00:29 2025 GMT
            Not After : Jul 27 23:00:29 2025 GMT
        Subject: CN=3b289a4998d33538d8060852e1f9b145580a2196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:37:2a:a8:d8:1c:46:2b:b9:dd:ac:d5:89:
                    0a:5b:49:46:37:ff:16:79:16:72:3e:db:dd:26:51:
                    ad:18:50:71:86:4c:f1:0f:0d:3f:f8:f9:d6:5f:1d:
                    83:6a:4c:11:14:6a:53:39:b6:ea:4e:34:ba:36:2e:
                    d5:cf:14:a8:95:d4:73:80:6b:57:7f:ab:16:8d:c1:
                    6d:53:47:a8:16:67:e0:3f:13:1b:56:c5:d0:8d:a3:
                    d0:46:65:fb:5b:36:ce:27:f6:ef:44:fd:09:2d:be:
                    09:26:4e:a3:05:bd:34:9c:42:70:6b:bc:a1:43:ed:
                    d2:2c:d4:a5:99:38:fa:d0:1d:04:1f:63:05:ba:47:
                    ea:2f:6c:f5:b7:28:dd:e3:4f:be:22:7c:24:ab:75:
                    12:2b:82:8d:ec:73:2e:e1:b4:12:39:3a:55:fd:d8:
                    dd:98:dd:60:98:4b:27:46:0e:e5:46:40:3a:7d:8e:
                    b9:fc:df:f4:0d:30:26:73:c1:d0:fc:7b:14:c3:21:
                    74:16:7f:86:8e:48:c2:51:ce:e1:df:ee:63:c8:46:
                    69:52:3d:da:89:bc:55:e9:d1:b2:31:53:57:df:3b:
                    2c:2a:f2:b4:7b:89:cf:39:20:7c:b8:3b:4a:81:7e:
                    ca:1b:c5:b9:d0:81:b9:83:d6:5c:45:f9:dd:a5:22:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:28:9A:49:98:D3:35:38:D8:06:08:52:E1:F9:B1:45:58:0A:21:96
            X509v3 Authority Key Identifier:
                keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:bc:12:09:1f:41:02:af:a1:5c:52:c0:5b:64:b9:8c:31:f7:
         35:95:77:89:ae:cc:05:10:6f:0b:c2:4c:5e:11:47:61:9e:cf:
         a1:b3:12:45:c4:a2:bd:13:e1:c6:9a:b6:42:0f:59:01:f2:00:
         90:7d:1d:d2:3e:a0:39:e3:62:8e:68:cf:f3:93:f4:f6:9d:19:
         a2:d7:49:64:68:80:95:18:0e:a6:ef:ae:dc:8a:d5:21:26:5e:
         f4:8d:59:c7:6b:11:c1:9e:de:65:4b:30:56:62:bb:20:99:91:
         b5:80:e1:35:76:c7:ec:10:95:5b:a7:94:41:f6:43:60:e3:30:
         e4:44:40:32:dc:df:69:9d:36:96:f8:5a:4a:8f:df:2c:31:81:
         07:20:28:fd:ff:c6:97:d0:e0:24:5f:7a:7d:2a:54:3a:92:46:
         38:bc:c3:4a:fb:1f:fa:59:78:73:b7:cc:13:d1:05:e4:09:9a:
         0a:d1:20:7d:b5:bd:d4:44:72:e6:e3:b9:59:d9:ac:e9:bd:61:
         cf:3b:f0:52:31:b7:7d:c1:bc:3d:67:00:63:a8:c4:94:4a:62:
         73:31:74:94:ae:90:3d:55:eb:07:87:d5:bc:d9:b6:c2:09:e4:
         25:d4:78:a7:eb:4b:25:14:b7:90:67:7f:22:91:3c:cf:4c:cc:
         8d:aa:22:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:33:43 2025 by rpki-client