Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File:                     7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier:          E+aK1bAqoQc0TRz/cYkzB3Hwe3MWt54Qyp48ICpdzWw=
Subject key identifier:   CD:1E:CD:2A:C0:50:FA:15:1E:18:C2:B1:F3:08:56:DB:3C:1E:AE:3A
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer:       /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial:       01984B540A5AA18BA19A48A0388D465E71D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number:          0FCA
Signing time:             Sun 27 Jul 2025 10:00:55 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:55 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:55 +0000
Files and hashes:         1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: 3Tj8S/kSQrkEu1Pvh6cO3NOHbfIIoiK7znMnS7VtW64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:0a:5a:a1:8b:a1:9a:48:a0:38:8d:46:5e:71:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
        Validity
            Not Before: Jul 27 10:00:55 2025 GMT
            Not After : Jul 28 10:00:55 2025 GMT
        Subject: CN=cd1ecd2ac050fa151e18c2b1f30856db3c1eae3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:ea:70:8f:aa:17:c6:39:9d:a4:95:cb:39:
                    7b:2b:01:f0:dc:da:81:4a:1f:30:5c:29:d5:a6:cf:
                    fd:9f:ea:73:c7:10:e0:81:28:f8:8d:a5:6e:2f:bf:
                    7c:dc:8c:16:2d:68:93:76:01:d6:7b:a4:88:3f:82:
                    e0:81:84:67:91:62:0f:f6:ce:6e:b9:27:75:5d:71:
                    47:9f:e4:80:4a:0e:bf:5a:d7:96:5e:22:f3:ae:c1:
                    eb:1f:b7:f0:09:ca:90:11:21:0d:c1:06:06:f6:2e:
                    d3:5d:2b:1b:15:18:25:5a:7b:36:17:8e:4b:f3:d1:
                    a4:89:5b:31:97:4b:5d:fd:d6:81:ba:59:97:94:c2:
                    e8:29:97:9b:69:54:2b:a8:f4:e4:64:36:b1:d8:7e:
                    e1:9c:41:40:bc:4f:d5:27:43:c2:ed:fa:7b:58:e9:
                    c3:e9:c1:4a:74:17:3b:70:62:24:f5:c5:7b:74:1e:
                    b3:ff:44:43:4a:99:03:67:e9:85:72:b0:ed:6a:3a:
                    22:7b:6f:b3:c4:a9:4c:d7:44:5d:0f:48:00:21:c5:
                    cc:0d:a6:5b:4a:dc:48:37:0e:22:83:06:a4:a2:08:
                    35:fc:59:08:26:62:ac:43:49:93:7c:ad:48:07:fd:
                    13:31:35:ca:62:e7:fc:4e:94:16:d6:d0:56:4a:7d:
                    80:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1E:CD:2A:C0:50:FA:15:1E:18:C2:B1:F3:08:56:DB:3C:1E:AE:3A
            X509v3 Authority Key Identifier:
                keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:da:9e:b4:a8:19:18:e0:cc:51:b7:92:38:46:9e:ad:ac:af:
         ee:d4:c7:dc:09:37:ba:9c:53:d3:88:bf:4c:a6:95:b1:6a:5e:
         36:50:78:98:45:d2:97:8a:cb:33:f0:ae:7f:37:b7:41:dd:f3:
         fc:6a:ef:bd:01:9d:df:b1:39:8b:03:6b:00:cb:6f:38:44:d4:
         48:cc:8c:1e:41:43:70:00:65:e9:2b:b3:e8:8d:cb:38:dd:1c:
         96:62:b0:d2:4e:31:3d:1b:5d:73:36:3f:40:a6:0f:13:e2:ba:
         ca:b8:fc:39:c2:27:dd:b6:ed:5c:7c:a5:18:1d:94:e1:06:4e:
         e2:77:49:67:6f:1c:08:b1:59:23:dd:5f:43:a5:9e:4b:60:af:
         f8:8a:4d:b7:8f:78:cb:4b:91:29:13:b7:cd:a1:78:a4:49:db:
         2a:48:14:6d:c0:03:0b:7e:ce:4f:cf:ce:6d:cc:d3:e4:0a:05:
         09:9c:14:ec:b6:de:e1:c5:28:68:a4:8d:94:6c:28:7a:bb:67:
         6d:55:ba:69:1d:fc:97:17:5a:8b:b4:28:37:56:39:57:71:f5:
         60:9c:31:8b:9d:86:54:ea:25:50:3c:8b:9c:83:90:24:6b:8d:
         cf:2a:b0:9b:57:5e:8e:87:0b:db:13:32:68:5b:93:96:4d:de:
         41:8c:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:03:40 2025 by rpki-client