Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File:                     7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier:          N2Jua0aJaLGNntZqWtqJSyufM+e0Htv6ccijCHk9nuo=
Subject key identifier:   27:FC:71:B5:54:84:36:5A:DA:FC:AC:8C:6A:DD:00:04:18:97:3F:0A
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer:       /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial:       0198534486133D138BBBEAE8D3F52C542701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number:          1470
Signing time:             Mon 28 Jul 2025 23:00:56 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:56 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:56 +0000
Files and hashes:         1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: SpIvSVij+96+PaqQ6tjrHuqMOYghHEX8bfD6+LpWF2s=)
                          2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:86:13:3d:13:8b:bb:ea:e8:d3:f5:2c:54:27:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
        Validity
            Not Before: Jul 28 23:00:56 2025 GMT
            Not After : Jul 29 23:00:56 2025 GMT
        Subject: CN=27fc71b55484365adafcac8c6add000418973f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:01:e4:6e:a0:18:38:22:c1:60:89:42:38:
                    c3:38:76:d2:93:64:0b:3c:ca:f7:b2:80:a6:00:18:
                    3c:93:e8:62:45:82:49:b6:2b:d6:35:77:1c:df:76:
                    9b:86:ef:b0:8f:43:16:ae:47:d0:6a:21:fb:c2:25:
                    7f:d5:05:21:91:12:87:97:1d:67:dc:9a:2d:2f:3c:
                    e6:57:08:05:2c:d5:82:b2:a5:ea:6a:c9:df:7d:7c:
                    e9:78:21:1d:79:6d:5d:2b:bc:23:a5:3e:a8:66:15:
                    36:fb:bb:bc:90:47:2a:5f:0b:e7:cd:2b:0b:99:cf:
                    46:99:db:65:91:36:ee:a7:a5:bd:d4:e3:ef:f2:b8:
                    0b:4e:9e:d6:b0:92:d9:59:46:2a:2f:62:16:72:80:
                    1a:20:cd:bc:de:7a:d2:19:36:5e:00:62:ed:d1:ac:
                    89:4b:6c:04:16:22:fc:d2:ce:a3:ef:e6:4d:98:39:
                    6f:0f:1e:ca:e0:bc:1a:af:76:12:21:0e:72:f5:a4:
                    fd:18:ab:b7:1e:39:17:79:e5:a0:e0:82:92:ae:0d:
                    7d:d4:d5:e9:57:88:00:df:aa:a2:98:fe:7c:e4:a3:
                    b7:ba:c0:24:2f:81:d3:87:0a:29:3e:29:26:e9:57:
                    3c:c2:2f:24:e2:57:10:43:23:97:eb:78:2d:90:d7:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:71:B5:54:84:36:5A:DA:FC:AC:8C:6A:DD:00:04:18:97:3F:0A
            X509v3 Authority Key Identifier:
                keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:fb:ef:c4:33:b6:28:8e:21:5a:31:3c:64:78:e5:b3:7d:
         59:24:41:f6:bb:80:84:3c:e4:7b:cc:2e:6f:75:8e:db:a3:87:
         de:00:cb:ab:18:a7:b6:9f:74:8b:05:76:68:54:dc:95:a5:22:
         6e:1c:e7:9c:dd:72:52:19:60:1d:b7:4d:a0:a1:24:52:e6:4f:
         7b:6b:c5:f7:d1:27:74:24:8d:22:4b:bd:fc:f8:51:97:8f:2f:
         1f:44:9e:d3:ae:33:6b:4a:5a:f2:76:27:1f:16:c5:80:27:5c:
         91:ef:53:ea:89:6e:ae:4b:d3:82:20:60:04:71:3c:32:b1:d0:
         49:e9:59:9f:4b:b1:67:a0:77:7a:33:5a:1a:e7:7f:06:40:5f:
         a7:fa:6e:54:f9:ea:a7:20:63:52:b7:72:d6:43:3a:e6:85:f0:
         95:fc:d2:90:e3:a7:0a:78:bf:e4:f5:aa:32:46:57:d5:91:e2:
         a0:c3:81:ea:35:75:2b:85:0e:f7:92:e5:18:fe:53:ba:59:ac:
         6d:48:99:76:f5:26:38:a5:6e:5c:0c:48:93:12:b8:44:e5:25:
         93:fb:6e:5a:59:0a:61:ce:e1:58:a9:a9:27:c2:58:77:04:43:
         85:f3:f6:52:d4:e4:5d:00:f3:1e:0b:83:0f:10:12:ae:3a:a3:
         58:7a:0c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:36:53 2025 by rpki-client