Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File:                     7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier:          YM8xz84PMv+y4TbOouMo46ayc6Z86u3nccKfopFW3rM=
Subject key identifier:   20:39:EB:C8:1C:2C:6B:6C:CC:CD:5D:3B:0B:F5:6F:07:E0:05:59:4E
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer:       /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial:       019921B0BA3ABEB097F9C310A0293057C550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number:          04CC
Signing time:             Sun 07 Sep 2025 01:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:54 +0000
Files and hashes:         1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: +jgyqchVz43Bo3kta0Z6cDpQQIq5JK8x9mktoGBd1sc=)
                          2: kMswko4ElKY06SDhGpfueJq34D8.roa (hash: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:ba:3a:be:b0:97:f9:c3:10:a0:29:30:57:c5:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
        Validity
            Not Before: Sep  7 01:00:54 2025 GMT
            Not After : Sep  8 01:00:54 2025 GMT
        Subject: CN=2039ebc81c2c6b6ccccd5d3b0bf56f07e005594e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:6f:a3:0a:bd:94:36:e6:e9:58:53:e9:14:
                    5a:c5:96:e1:c3:e3:fb:69:f1:ce:09:38:63:0e:2c:
                    8c:81:9a:0d:ad:17:55:9e:35:ea:67:99:41:bf:c9:
                    c1:b3:06:28:06:eb:96:a6:80:2f:47:0f:51:55:57:
                    d6:70:72:4d:f1:a2:9b:bb:b0:af:22:44:7b:44:ff:
                    83:f1:ad:01:e4:7f:67:63:e7:f0:93:66:81:50:ac:
                    26:90:3b:00:f5:71:58:09:79:29:2d:d3:a3:f3:04:
                    9b:87:28:0a:c8:02:f9:e4:1a:4b:52:64:0a:83:88:
                    71:8e:02:4a:53:1b:32:af:55:9a:75:84:b1:d0:bb:
                    36:7f:07:9a:08:61:1e:8d:f3:b8:25:c9:a3:ee:16:
                    c4:72:a0:b9:34:7d:ec:75:4b:2b:47:7d:07:70:02:
                    1f:96:a3:06:0c:0d:bb:81:5a:c5:55:b2:43:5c:1b:
                    9c:b2:6f:2f:f8:43:fe:a8:5d:b6:b9:57:e4:38:a6:
                    22:cd:b1:44:cc:18:df:ff:99:18:ab:e7:06:73:bb:
                    a3:9b:e1:50:0f:02:70:c5:75:fd:4a:86:9e:23:a2:
                    f4:ad:69:66:34:a4:45:ff:98:7a:29:9a:75:60:a5:
                    48:a8:c0:1f:e5:6c:fb:a4:0e:4a:19:6c:59:43:ee:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:39:EB:C8:1C:2C:6B:6C:CC:CD:5D:3B:0B:F5:6F:07:E0:05:59:4E
            X509v3 Authority Key Identifier:
                keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:77:b6:c8:b3:e8:33:37:59:5a:2b:ee:f7:4e:64:42:cc:e7:
         5e:1c:2a:15:e1:95:d7:9e:4a:22:8b:94:86:15:b5:cf:21:cd:
         69:e1:50:21:0d:e2:4e:c5:01:62:2a:84:0c:4e:2b:95:40:af:
         81:8f:f7:eb:d9:9a:b9:27:ad:2e:ea:45:41:cd:ac:e8:12:d3:
         c5:2e:c1:38:ac:24:3f:c9:38:12:83:88:37:65:80:d5:f8:7e:
         4c:2c:0c:b6:fc:d0:4c:91:b4:7e:cd:a4:43:59:3a:e4:b8:0b:
         a6:bd:67:5f:6a:ed:e2:ab:ae:5d:c4:f8:d6:9f:58:d2:84:5f:
         de:c7:d5:fe:b9:30:69:4e:60:2a:de:3b:b0:01:1b:f9:1a:a0:
         a3:f2:2d:9d:85:dc:a2:b4:eb:59:82:db:4c:8e:a9:67:e4:54:
         e6:79:2a:de:25:0f:fe:6e:b9:0f:a2:b4:46:0b:e2:5d:d4:02:
         ef:d6:86:2d:8e:47:23:79:70:9b:07:e1:0d:98:a1:2e:9e:77:
         12:51:01:76:40:89:eb:57:cb:55:17:3f:93:4c:db:b3:a4:80:
         5e:13:b7:6e:3e:48:d2:c0:c7:92:f7:d6:c7:cd:e3:0f:d7:b2:
         36:bb:70:c8:d3:fd:7f:4a:74:a7:a0:ee:c2:4f:d0:b4:c9:62:
         e9:68:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:06 2025 by rpki-client