Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
File:                     Ez7rn3q6GeA7E2basIg_NlP8A74.mft (raw, json)
Hash identifier:          gzDb9M35pwIRAZtu/fGE5fywjAaGaOaAHj0u6ik07GQ=
Subject key identifier:   F0:29:70:52:47:7C:2E:6A:60:76:FC:10:49:A0:A0:7F:B0:CA:87:27
Authority key identifier: 13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE
Certificate issuer:       /CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
Certificate serial:       0198496539B44FABBB4BDE738EC4EF25DA57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
Manifest number:          1351
Signing time:             Sun 27 Jul 2025 01:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:27 +0000
Files and hashes:         1: Ez7rn3q6GeA7E2basIg_NlP8A74.crl (hash: MvVnxH+HhQUVmmOVmrIwwrg0/d6v7L0BEKVN+jxVfds=)
                          2: T2nJ8YsYUulSZb9GUXFmz8VHViw.roa (hash: 5XjZ7sWfLWF9S9IVh/StOJhbx3B86TdyvGGrjN3b+RI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:39:b4:4f:ab:bb:4b:de:73:8e:c4:ef:25:da:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133eeb9f7aba19e03b1366dab0883f3653fc03be
        Validity
            Not Before: Jul 27 01:00:27 2025 GMT
            Not After : Jul 28 01:00:27 2025 GMT
        Subject: CN=f0297052477c2e6a6076fc1049a0a07fb0ca8727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:07:4e:c5:f4:d0:d4:b4:93:82:de:9d:67:
                    5c:47:02:da:53:27:b3:75:e5:0f:6e:d8:6b:a8:8a:
                    6a:0a:4d:c3:3d:4d:13:ae:8b:66:4d:e1:32:ce:0a:
                    77:46:24:a1:c5:34:8a:5f:89:73:b6:bb:fd:26:5f:
                    81:f5:39:45:41:9d:62:bd:96:4c:ea:34:9d:aa:90:
                    bc:75:21:39:5a:9d:83:47:2a:e1:5f:50:64:4c:0b:
                    36:14:d8:91:39:80:ef:f7:ac:b8:a1:b3:54:fa:76:
                    6b:8c:41:3e:49:e9:b8:cb:41:12:9f:39:7d:b9:7d:
                    e7:c5:dc:59:2b:b5:70:37:13:7f:23:a8:12:94:b3:
                    09:31:cd:60:47:37:67:ea:0a:d5:10:e8:2f:09:00:
                    24:0d:00:a4:41:a2:38:8b:1e:b8:37:13:de:c7:79:
                    a9:60:e0:3d:62:b7:92:e0:52:ca:66:e6:b1:8e:22:
                    8e:0c:69:ed:2b:83:17:64:e3:d3:e1:f2:4b:c7:b3:
                    25:98:46:c3:58:01:73:ed:2e:14:ad:ab:38:47:16:
                    64:aa:a7:c0:a8:04:e5:f2:64:8f:40:a3:a8:dc:8c:
                    89:be:a7:7d:7b:cd:10:98:6f:77:4c:8a:3a:33:0a:
                    bc:e5:19:15:36:73:0f:1f:69:51:ae:5f:b7:a6:34:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:29:70:52:47:7C:2E:6A:60:76:FC:10:49:A0:A0:7F:B0:CA:87:27
            X509v3 Authority Key Identifier:
                keyid:13:3E:EB:9F:7A:BA:19:E0:3B:13:66:DA:B0:88:3F:36:53:FC:03:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ez7rn3q6GeA7E2basIg_NlP8A74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5ef9e0-7a00-4fca-beaa-66b624eae78c/1/Ez7rn3q6GeA7E2basIg_NlP8A74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:c7:a4:f5:8f:ef:59:10:a3:f1:2f:93:2c:a4:20:8f:71:
         4c:48:5f:01:de:df:8a:aa:f9:98:dc:5a:12:c8:fa:7a:52:9e:
         bf:f8:d3:21:eb:0c:df:b6:0e:a4:1f:66:a5:0b:12:d8:d0:0d:
         f0:da:22:04:d5:42:ec:28:99:d2:49:fa:a3:5a:cf:83:c3:6f:
         75:7a:fc:f7:8c:a0:f2:3c:86:ba:a9:5b:01:4a:36:04:91:aa:
         b5:1b:fd:a7:d8:0e:fa:30:d4:0e:5f:ad:a8:08:76:4e:37:df:
         a1:58:b0:b7:9a:6d:e6:ab:fb:8d:a3:9b:ac:dd:ea:97:cc:b8:
         8b:98:d1:73:4c:03:dc:fe:1a:8e:4a:e6:26:d5:0c:54:17:5d:
         3e:e0:51:f6:90:77:a0:1d:c9:4b:06:50:b7:a6:e2:de:e6:3e:
         26:8a:71:17:2b:de:58:d2:49:00:76:c8:9d:2f:41:7b:c6:98:
         13:f1:80:40:76:61:df:fa:fd:43:42:c7:94:77:e2:43:bc:2b:
         44:9d:84:a0:a9:aa:42:93:cb:c8:af:4e:82:86:a7:d8:d2:65:
         c4:3c:e8:24:52:82:fc:17:ae:ca:e0:1e:4c:ac:22:11:4e:60:
         a6:82:c3:cb:c2:6a:05:9f:82:c1:21:35:c7:e9:0e:b7:27:b4:
         e3:2c:79:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:29 2025 by rpki-client