Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File:                     7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier:          peCpSCHuRQNFxilGWScwghCc0No8NjNJWf9WsLrT+Hg=
Subject key identifier:   68:77:71:3C:B6:48:6D:79:59:18:D5:8B:46:01:AE:E4:D5:C3:B6:6D
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer:       /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial:       0199312498E83DABECE8DAAB635755EF3379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number:          050C
Signing time:             Wed 10 Sep 2025 01:01:45 +0000
Manifest this update:     Wed 10 Sep 2025 01:01:45 +0000
Manifest next update:     Thu 11 Sep 2025 01:01:45 +0000
Files and hashes:         1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: fVUtBk4zn3APivd9m4xkKQmMlRH0MzcQhqyixKt+dgk=)
                          2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:24:98:e8:3d:ab:ec:e8:da:ab:63:57:55:ef:33:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
        Validity
            Not Before: Sep 10 01:01:45 2025 GMT
            Not After : Sep 11 01:01:45 2025 GMT
        Subject: CN=6877713cb6486d795918d58b4601aee4d5c3b66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:3e:91:1c:e8:01:c0:78:0c:10:ed:fa:7b:
                    9c:8b:1b:59:96:66:db:0e:12:56:2c:55:8f:31:0b:
                    11:ed:20:28:41:00:c5:54:79:28:63:4b:77:a4:5e:
                    37:ab:20:aa:8f:ab:b7:76:f7:78:02:42:17:59:f5:
                    35:1e:8c:91:93:8c:58:9f:d3:57:e6:36:33:c6:e7:
                    ea:cf:f5:8e:4e:eb:bf:01:dc:98:c7:4d:d7:39:6c:
                    ef:fb:d9:22:d8:3b:7e:4f:49:bf:84:d6:9d:5e:47:
                    97:37:78:73:b3:28:05:60:43:23:0a:6d:f8:e1:73:
                    0a:45:ab:c4:d7:da:39:fa:a2:6f:50:68:c5:e5:5b:
                    b1:e5:63:ea:7d:bf:d1:7e:86:11:26:e3:1c:ed:0b:
                    e4:6f:38:a5:91:0f:81:67:ba:9f:03:00:26:83:cd:
                    89:fd:24:b7:d5:16:6d:95:1c:de:ba:ee:c1:68:98:
                    ad:88:a0:21:3b:0f:db:d9:85:07:82:ea:ae:6c:5e:
                    aa:4f:25:36:79:3f:98:8c:2b:7a:fe:54:6b:d0:0f:
                    34:eb:66:08:08:bb:9e:39:2d:eb:7e:c3:6f:b7:bc:
                    65:53:c6:09:44:fe:88:1e:64:7d:36:4a:f0:4b:ec:
                    5b:70:16:cc:d8:1d:2a:6b:22:75:6a:c3:0b:c6:ea:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:77:71:3C:B6:48:6D:79:59:18:D5:8B:46:01:AE:E4:D5:C3:B6:6D
            X509v3 Authority Key Identifier:
                keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:d3:69:f5:4c:f8:16:0c:64:e3:7d:4a:3b:e1:e0:88:45:
         36:64:ac:79:5e:95:4b:2f:ff:71:97:be:aa:1b:2f:dd:99:61:
         b0:73:04:1b:9b:59:5a:7c:86:90:33:88:56:b6:c8:83:11:4b:
         6a:c5:03:5a:c1:50:08:f8:4e:0a:95:ca:1f:d0:aa:ab:cd:02:
         1f:8f:69:12:cb:0c:d4:43:f5:6f:70:16:f9:3b:18:0c:9d:ae:
         cf:d2:5b:35:17:5d:f0:91:d0:45:cc:c2:93:9a:bb:1a:b7:d9:
         04:34:4f:aa:e7:03:98:03:3d:fb:02:3f:d9:d0:f7:69:a0:c9:
         ae:e6:a3:8b:80:85:52:9f:42:de:85:1d:0d:50:7a:38:80:80:
         d3:32:95:c3:64:c6:fb:96:e5:31:40:a7:a2:19:59:f7:d1:de:
         3f:d9:59:12:08:e7:ee:87:e4:e7:a2:e7:d8:a9:6b:b9:67:73:
         bf:9e:07:cd:c3:a3:03:36:0d:f2:bb:f7:ba:62:4a:06:f0:70:
         9f:25:99:d4:06:a2:c9:b3:d0:28:a8:95:fa:68:82:6b:d8:9d:
         c0:c5:65:35:d0:99:a3:6c:33:bd:8f:f9:21:87:54:25:cb:3c:
         40:4e:3c:d9:e7:96:ce:b9:28:16:f8:5f:95:3a:48:72:c9:05:
         d6:3e:40:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:15:49 2025 by rpki-client