Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          Q0ds4dzsPD4xjzbYEPxJRMqjzLJEWRJNea3NESpm3DQ=
Subject key identifier:   FE:0C:B3:BC:01:00:AC:67:CC:C1:24:82:BF:FF:0F:CF:69:96:50:63
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       01984407D51ACCBAA6ECCC19020D73C48237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0ADD
Signing time:             Sat 26 Jul 2025 00:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 00:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 00:00:20 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: mAQLCk5uvFtuKJ3Ycq2sOtu24SUMWQ0zHC8v2plJxkU=)
                          2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:07:d5:1a:cc:ba:a6:ec:cc:19:02:0d:73:c4:82:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Jul 26 00:00:20 2025 GMT
            Not After : Jul 27 00:00:20 2025 GMT
        Subject: CN=fe0cb3bc0100ac67ccc12482bfff0fcf69965063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:75:c7:e7:47:31:14:ca:52:7e:c6:1a:f0:
                    b7:0e:7b:20:95:29:d6:2b:36:5a:0c:b6:b9:cf:82:
                    79:cf:c8:2c:41:7d:95:96:76:e2:3d:13:d6:38:29:
                    24:4f:c4:0a:79:f0:6f:07:3d:44:40:d6:9d:2d:83:
                    ff:de:3a:e9:9f:f2:26:ef:3f:05:04:91:9f:e7:3f:
                    fb:91:27:e6:75:ea:25:66:27:9f:fb:36:69:d7:d2:
                    14:5f:e3:fc:23:02:71:70:4b:70:c4:68:32:a6:bb:
                    3b:25:76:4d:27:86:04:f2:90:84:d7:d6:31:ea:84:
                    42:62:69:2b:d6:46:54:1e:8f:36:87:39:82:97:a3:
                    25:55:7a:3f:70:a9:64:4c:ba:ad:98:05:93:99:ad:
                    1d:f2:ee:02:b2:4d:ac:22:a7:b0:d0:cf:f8:cf:fd:
                    10:30:6f:cb:e3:a6:1a:c1:02:39:e3:8d:f9:56:04:
                    95:8b:72:33:33:3b:86:d0:aa:41:81:37:83:67:8a:
                    67:07:98:bc:9e:71:1f:6c:8a:27:11:ce:3d:10:cf:
                    f0:e7:27:53:c4:fc:c1:e7:69:a5:19:3d:b7:16:64:
                    45:0c:2d:ef:e3:df:72:7e:80:9e:ae:da:00:fb:d2:
                    6b:0d:6e:a1:37:89:1a:68:f2:b7:42:7c:06:48:76:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0C:B3:BC:01:00:AC:67:CC:C1:24:82:BF:FF:0F:CF:69:96:50:63
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:af:b6:c7:40:34:b6:a4:52:a4:17:2c:6e:eb:7f:e2:f4:05:
         ee:10:0c:90:36:aa:45:f4:7a:bd:99:07:68:42:5a:9e:9b:2e:
         bd:50:d0:85:52:ab:ec:44:bb:da:d7:0e:be:70:12:3a:b6:8c:
         02:e2:7c:ee:61:85:3a:3e:a8:2c:ab:c1:47:24:51:d6:1d:cf:
         d4:a9:5f:84:ff:aa:45:a7:50:50:02:64:af:e8:64:cf:3b:15:
         07:a3:1a:88:67:5e:d5:05:62:20:cd:d9:63:02:54:91:9b:00:
         53:82:6d:05:35:9d:70:c4:7f:d2:06:76:4e:29:0f:a8:ef:3a:
         82:bb:15:c3:5b:56:63:f7:ba:77:fb:5a:7e:3c:14:73:78:32:
         d0:45:83:3e:f9:a9:00:57:ec:8e:ff:27:c5:44:3e:91:d3:1c:
         3d:9b:0b:56:fd:3b:4c:de:d9:ed:9e:ed:4e:59:c1:93:76:a0:
         7b:6d:90:be:b3:0f:9f:04:5d:80:62:de:cd:b5:0c:df:66:c8:
         d8:30:bd:e3:48:34:f6:03:49:ef:36:63:4d:fd:a1:ac:d6:40:
         3b:7e:08:2b:0b:a0:a1:da:5e:7e:5f:f4:a6:02:55:00:12:4b:
         61:3b:f8:c6:81:b6:62:fe:bd:c4:60:b5:8a:69:22:da:c0:51:
         53:1b:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:12:09 2025 by rpki-client