Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
File:                     7oAELqPLNIc97Q6wZJWU4v8jkIE.mft (raw, json)
Hash identifier:          11f85yCj644DLuv3Z0Tr+Rc39mAWF5Da/Hu1teFZS7I=
Subject key identifier:   49:3F:DF:5B:53:34:8D:B9:48:D9:3C:C8:64:89:E8:BC:76:8E:30:6A
Authority key identifier: EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81
Certificate issuer:       /CN=ee80042ea3cb34873ded0eb0649594e2ff239081
Certificate serial:       0199239F02A08BE11BFCB932CE24E1E0F4A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
Manifest number:          0A7E
Signing time:             Sun 07 Sep 2025 10:00:47 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:47 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:47 +0000
Files and hashes:         1: 7oAELqPLNIc97Q6wZJWU4v8jkIE.crl (hash: V1S3LFa9xyXUTdkEYjr193CH/OhjOTqNakRt87h14Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:02:a0:8b:e1:1b:fc:b9:32:ce:24:e1:e0:f4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee80042ea3cb34873ded0eb0649594e2ff239081
        Validity
            Not Before: Sep  7 10:00:47 2025 GMT
            Not After : Sep  8 10:00:47 2025 GMT
        Subject: CN=493fdf5b53348db948d93cc86489e8bc768e306a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:09:8f:1f:be:09:67:ee:b3:15:e1:39:8e:c3:
                    76:cc:62:ae:87:0c:82:0e:94:58:68:8b:55:62:8e:
                    a7:c4:af:71:bc:15:6d:8d:58:fd:6f:88:8c:51:5d:
                    bb:f5:aa:3e:d9:d3:ae:67:78:3a:1c:b3:0e:88:74:
                    5e:99:fa:c6:00:0d:0b:c4:af:17:af:27:d6:a3:5a:
                    6c:0e:87:9b:32:7e:cf:38:25:6a:ba:80:09:9f:92:
                    de:e6:34:1a:2b:d3:aa:28:02:4a:f0:9b:24:ea:0f:
                    59:c1:82:15:c5:fc:35:a7:db:46:88:19:41:cb:18:
                    cb:e2:4a:be:bb:a1:bb:95:dd:6f:51:ec:5d:58:f4:
                    b6:62:82:25:73:32:21:3e:80:f9:be:8f:e0:44:e5:
                    30:85:71:b9:01:cc:57:a5:38:d4:d3:67:9a:ee:41:
                    70:db:6a:f6:2d:ce:4d:d4:5b:19:ed:98:7e:31:f7:
                    d5:04:de:7d:bc:d5:eb:8a:bc:21:20:11:95:8d:18:
                    1d:ad:a3:e0:3a:d0:c5:bd:b3:4c:74:4c:08:37:7f:
                    3d:f9:12:c5:e5:19:12:48:77:10:10:15:88:b5:43:
                    22:2b:8b:94:bc:36:95:f7:7b:01:7a:d0:7c:af:d6:
                    02:7d:fc:d4:7f:27:a4:cb:b0:9a:c5:81:ad:a1:29:
                    49:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:DF:5B:53:34:8D:B9:48:D9:3C:C8:64:89:E8:BC:76:8E:30:6A
            X509v3 Authority Key Identifier:
                keyid:EE:80:04:2E:A3:CB:34:87:3D:ED:0E:B0:64:95:94:E2:FF:23:90:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oAELqPLNIc97Q6wZJWU4v8jkIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f5e2a7-5dbb-4b36-9614-d51617e02983/1/7oAELqPLNIc97Q6wZJWU4v8jkIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:af:4c:f2:ed:5d:4b:37:bb:32:40:e0:a2:c5:a8:db:3b:
         b4:6f:b2:a4:e2:ed:a8:07:ff:fe:ab:0f:18:94:01:2f:8e:9f:
         1e:19:fa:81:e5:8a:0e:1b:4d:7c:23:38:28:c0:a0:2f:29:cf:
         30:64:1b:78:a2:f4:8e:57:ce:ce:b8:e1:52:ae:80:d8:c7:19:
         94:57:0a:d2:bc:13:bd:44:4c:a1:18:83:77:c2:a2:e8:22:07:
         e6:00:db:68:d5:9d:4e:de:a9:7c:64:03:e8:3c:96:c4:be:ad:
         83:df:7d:e4:c6:11:37:2c:c1:29:ff:e6:9a:d5:5e:83:d3:d2:
         3c:6a:a2:d3:8d:74:8a:9f:d3:3b:e1:39:52:ee:e7:a4:56:42:
         c8:82:c2:98:71:05:21:c9:e3:eb:8d:27:7f:43:fa:ce:1c:7b:
         60:ff:f1:dc:7d:6b:42:3d:02:2d:20:db:d5:e8:7a:ec:0c:90:
         a2:7d:e3:7c:36:65:f1:6c:e2:fd:fe:4b:77:84:ba:78:03:76:
         94:c0:00:ae:09:22:e2:2b:e5:7f:65:32:8a:b3:1a:be:db:f6:
         17:3d:28:8a:43:b5:75:06:5c:45:05:98:a2:7d:65:67:0e:26:
         24:4a:fb:3d:93:a4:93:27:a5:a4:37:91:7f:b6:8a:25:d3:6b:
         7a:a6:ee:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:53 2025 by rpki-client