Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File:                     7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier:          LXAifqIOhF0Sx206zSq9QjL8YMoQN13vwPxXT3ANcZU=
Subject key identifier:   07:66:FA:D6:32:11:26:B3:81:21:4B:EE:AD:4B:0E:B4:A6:84:8A:A5
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer:       /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial:       019849D34DF408ECE2D0AD1ADEFB26EFEBFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number:          1146
Signing time:             Sun 27 Jul 2025 03:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:41 +0000
Files and hashes:         1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: oWG2F1btl9j25cMPQ94BO1FYvYlfnqknrV2h12lUWHY=)
                          2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:4d:f4:08:ec:e2:d0:ad:1a:de:fb:26:ef:eb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
        Validity
            Not Before: Jul 27 03:00:41 2025 GMT
            Not After : Jul 28 03:00:41 2025 GMT
        Subject: CN=0766fad6321126b381214beead4b0eb4a6848aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:d4:95:24:e4:d4:65:39:15:30:4a:f5:80:
                    e8:30:49:92:76:ef:f9:7f:95:3d:55:59:3e:61:52:
                    7d:56:f3:99:ed:aa:02:59:2b:da:1a:59:59:2f:6c:
                    fb:64:5f:db:37:55:41:66:17:53:8b:e9:29:72:92:
                    80:6f:5a:2c:5a:ae:ac:25:3d:ff:2a:63:f8:b6:89:
                    b7:4b:3f:e6:e3:46:dd:f8:29:15:2a:34:cf:82:6f:
                    c2:6d:47:ad:6a:ab:43:70:63:95:af:d6:3c:20:2a:
                    8a:e7:82:b1:ff:44:d5:96:fa:8a:79:8a:46:75:db:
                    59:bc:fb:7b:75:fb:6d:38:db:a2:d2:40:d5:7c:08:
                    69:c3:36:55:fd:cf:fc:37:8c:d2:dd:09:82:20:ce:
                    8a:d0:6c:53:fc:f8:5e:6a:3d:8f:4c:7d:78:00:64:
                    84:c3:0d:8e:8e:42:e5:f1:33:58:0a:b3:77:4e:b5:
                    8d:e7:f2:67:55:fc:5d:e6:64:6e:08:c5:03:d9:51:
                    14:51:d5:55:e3:64:86:84:51:03:62:01:78:da:2b:
                    d4:c6:aa:e3:bd:ac:87:83:d9:07:96:74:f0:0c:62:
                    26:d1:47:88:00:1c:f2:17:b1:a3:8e:66:e4:a1:5e:
                    50:08:74:1d:64:99:93:fd:02:5b:0e:af:21:fa:2d:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:66:FA:D6:32:11:26:B3:81:21:4B:EE:AD:4B:0E:B4:A6:84:8A:A5
            X509v3 Authority Key Identifier:
                keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e7:f9:21:25:fb:7a:42:51:60:cb:15:04:34:a2:1b:ee:2d:
         4a:4a:fa:85:af:8e:e0:86:45:97:db:a1:5f:22:b9:d7:9b:73:
         7e:ec:02:21:f3:93:55:ad:7d:78:9f:e7:95:a5:58:61:94:29:
         49:36:98:c6:93:0d:37:a8:d0:b4:54:49:e8:dc:b6:38:cd:63:
         4d:fe:54:78:53:2e:db:ee:4f:04:3f:36:11:05:bd:ef:df:f8:
         0a:79:90:fc:18:b4:d9:bf:44:b1:51:b7:6d:70:95:70:4b:6d:
         58:b4:77:7a:58:65:14:5b:99:3e:07:33:a4:e5:8a:d3:0e:df:
         fc:bb:6d:9b:d6:21:9a:49:5c:d1:8f:df:25:f3:3d:06:d9:35:
         9e:99:31:b8:c6:34:9a:b2:f7:8d:9d:fb:5a:88:1c:72:40:80:
         03:ba:1b:c7:ea:e9:47:8a:90:3f:51:cc:28:a4:e3:48:26:a2:
         7e:7a:09:5e:8e:4e:24:62:76:3c:db:63:da:5d:ca:5e:bb:52:
         34:da:ef:b5:74:d0:a8:8a:6f:53:33:8f:bc:44:e7:ce:dc:d3:
         1b:d6:05:9d:d2:b3:35:63:e4:f1:85:f9:c1:7f:3d:d5:3d:b6:
         2a:5c:c5:3f:1c:76:8b:e1:64:44:2a:63:83:56:48:c5:5f:17:
         30:f7:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:59 2025 by rpki-client