Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
File:                     7lsNNqN0qzXENu4Awuyu-7KjVEg.mft (raw, json)
Hash identifier:          3iFWWGAkKeLS8xjfAszmJmuCBH0DlXMfxOxKIcAMX7k=
Subject key identifier:   55:C5:B1:8F:3C:59:A2:68:70:1A:73:DA:86:16:5C:54:7E:E2:D2:A0
Authority key identifier: EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48
Certificate issuer:       /CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
Certificate serial:       019922FA478B23914276A471BE2A17379F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
Manifest number:          90
Signing time:             Sun 07 Sep 2025 07:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:51 +0000
Files and hashes:         1: 7lsNNqN0qzXENu4Awuyu-7KjVEg.crl (hash: eY91KdSFdizRXBbuj9jQ/JrKW1CsdYOOhASBYWfNJXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:47:8b:23:91:42:76:a4:71:be:2a:17:37:9f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee5b0d36a374ab35c436ee00c2ecaefbb2a35448
        Validity
            Not Before: Sep  7 07:00:51 2025 GMT
            Not After : Sep  8 07:00:51 2025 GMT
        Subject: CN=55c5b18f3c59a268701a73da86165c547ee2d2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:5c:cf:dc:1b:c7:db:e1:db:ef:60:db:23:
                    21:1b:a3:4d:3f:77:78:73:d1:97:b7:36:4c:ed:ac:
                    ce:8c:c7:3f:fe:3f:89:3c:26:14:b1:a6:4d:b0:b4:
                    d0:f8:7d:11:54:ed:48:74:42:10:7b:59:e0:aa:64:
                    96:63:08:08:02:a2:f1:a9:f9:b9:6f:fb:c3:3e:f8:
                    34:19:90:2a:81:50:c7:68:81:d3:df:f6:ee:08:fa:
                    7d:f9:e8:e4:1a:e3:26:a9:13:04:99:03:f8:4e:78:
                    0f:1c:65:e7:e0:4d:bf:3b:23:09:7a:9a:fa:0c:72:
                    82:a4:9c:f3:56:95:ef:2b:6f:e2:e5:87:26:3a:8e:
                    d9:ac:0d:d0:51:17:84:70:62:52:90:ad:9d:27:a2:
                    67:73:14:97:0b:f4:28:2b:b8:87:3a:74:83:2c:eb:
                    69:2e:1f:df:58:7c:29:02:25:ca:99:26:ee:bd:8f:
                    12:3f:e0:f6:dc:f2:fb:0c:20:50:9f:82:0e:5b:55:
                    a6:7e:75:c0:7d:f1:53:3f:a0:9c:46:ba:33:df:3b:
                    ea:2d:0c:59:1a:81:04:55:51:4e:4b:90:12:c2:1d:
                    be:a3:b3:5e:93:da:41:52:34:97:1d:2b:f0:76:aa:
                    5b:e3:af:03:15:bb:81:32:3a:ed:c5:44:7d:06:ec:
                    36:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C5:B1:8F:3C:59:A2:68:70:1A:73:DA:86:16:5C:54:7E:E2:D2:A0
            X509v3 Authority Key Identifier:
                keyid:EE:5B:0D:36:A3:74:AB:35:C4:36:EE:00:C2:EC:AE:FB:B2:A3:54:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7lsNNqN0qzXENu4Awuyu-7KjVEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2f15e-c89c-4352-8722-69a238f9889a/1/7lsNNqN0qzXENu4Awuyu-7KjVEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ef:ff:2d:0f:4f:1b:f1:7d:dd:82:bd:d5:a4:8f:a2:a7:96:
         cb:40:70:02:c7:e6:79:b3:5a:d0:23:4f:e3:14:85:76:86:6d:
         2a:e4:ee:88:be:65:52:a0:96:47:37:86:45:78:9b:be:cf:ba:
         0a:70:f8:10:53:01:a6:68:a5:9e:eb:fb:db:9f:1f:55:0f:98:
         55:c6:ad:fd:4d:ed:07:54:dd:20:02:a7:f3:30:fc:b1:fe:d0:
         52:29:c0:57:35:3e:da:a8:70:9c:99:1b:5f:0d:14:2e:25:6f:
         0c:7b:89:9d:32:6d:a1:23:3f:2c:9a:96:e6:e2:0c:25:88:9c:
         ac:60:c9:c9:44:a4:c3:c8:e3:f0:d8:06:4a:a8:3f:ad:1f:f0:
         76:c6:6a:61:17:03:65:6e:82:1d:a8:68:e9:d7:f5:fd:3b:14:
         09:0d:da:f1:bd:eb:fd:f7:f8:57:d2:7d:3c:72:5e:f3:be:26:
         31:32:ec:8b:17:1f:73:40:3a:8d:12:a1:bf:5f:87:d2:23:f9:
         c2:95:72:13:91:92:1d:43:f5:14:70:df:af:09:77:b7:f8:57:
         90:18:c3:22:95:8c:c9:8f:84:48:a6:8d:2d:c7:b8:d8:70:c0:
         d4:ab:4b:28:38:8e:35:0b:f9:e3:3b:7b:f5:7a:6b:18:e2:bf:
         a2:2b:40:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:38 2025 by rpki-client