Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File:                     7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier:          F24rC+n4QF46uWHgP7Jy8vHf4jXsOAFq/XfVBpSkdB0=
Subject key identifier:   83:71:39:FB:CA:0F:B1:82:71:72:65:F8:B7:D1:60:84:5D:BE:6F:07
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer:       /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial:       019922FA6CC7A1B645E201D6CD640BB21861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number:          0EB4
Signing time:             Sun 07 Sep 2025 07:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:01 +0000
Files and hashes:         1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: EqVxr1HNfnBDBaC9GsBr7jfg58Ta+3PhCSEjQM17HX8=)
                          2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:6c:c7:a1:b6:45:e2:01:d6:cd:64:0b:b2:18:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
        Validity
            Not Before: Sep  7 07:01:01 2025 GMT
            Not After : Sep  8 07:01:01 2025 GMT
        Subject: CN=837139fbca0fb182717265f8b7d160845dbe6f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:f7:91:e1:ca:4d:b5:36:25:e3:ba:29:94:
                    25:43:74:4d:22:ef:2a:c6:63:78:1d:00:ae:d9:2f:
                    dd:18:5b:cd:11:bd:8b:e4:df:41:b8:86:50:12:b3:
                    17:27:b5:8d:4a:f4:2e:75:57:c6:f6:a5:5c:cf:c3:
                    34:82:c7:30:cc:64:a5:1b:c5:a1:38:55:7e:5d:ca:
                    ca:d8:4f:09:eb:e9:44:cf:ed:cd:4e:86:a9:43:7a:
                    52:62:d2:fc:2f:b1:ab:a6:d1:d3:91:c9:99:7d:0f:
                    b9:7c:b5:bc:72:06:02:04:4e:7b:df:c4:7f:f7:0d:
                    d1:41:b6:0c:e3:f3:ff:f4:bc:1e:f9:22:9c:48:16:
                    81:fc:f7:ee:c0:8f:fc:3c:1c:94:dc:e2:42:ec:74:
                    9c:a6:26:b3:ac:2d:6d:16:a0:9b:e0:67:11:86:1c:
                    cf:2b:30:1f:b7:76:6c:e6:25:65:8f:fb:dd:ea:be:
                    1a:c9:3e:94:3d:ab:e7:ec:39:da:ca:b5:96:52:0e:
                    fb:4c:32:7e:69:89:f2:7a:7d:3c:e2:b6:6d:93:bc:
                    6b:b4:c5:2a:f1:31:a5:f3:d1:01:4e:b3:39:39:5b:
                    36:1a:5e:17:50:65:a3:92:87:f1:01:41:79:0a:f4:
                    da:a7:91:76:a9:12:ef:48:c8:0e:17:5a:c9:66:cc:
                    c8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:71:39:FB:CA:0F:B1:82:71:72:65:F8:B7:D1:60:84:5D:BE:6F:07
            X509v3 Authority Key Identifier:
                keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:66:2a:a1:2a:3a:4f:bd:5a:55:08:8d:fc:45:93:8a:84:ff:
         2e:85:c0:18:e7:01:71:80:1a:72:88:d8:38:64:87:d8:f8:b1:
         ea:9d:d8:5d:d7:9a:66:95:12:c3:cc:96:84:54:c2:f9:09:22:
         96:7c:0a:fa:de:d3:12:f6:83:44:4c:0b:85:e9:f1:d0:a2:42:
         2c:43:fd:fd:64:e2:ff:f9:3f:e0:f5:cb:58:d2:b4:89:0b:db:
         2c:15:c3:53:7d:55:e6:82:5c:bd:c9:c4:b7:5c:01:c9:b1:61:
         80:c1:66:9f:88:e1:18:16:bc:c7:d0:3c:93:98:6c:ad:db:ab:
         61:64:94:7d:91:d0:0b:c3:c2:1b:f9:c2:0e:e9:8a:71:ee:38:
         4f:68:5b:c9:30:3f:48:8b:40:36:02:87:60:1a:75:fc:d5:ed:
         8a:7b:fb:64:a6:4d:fe:9c:f9:77:f9:21:e7:45:a0:d7:b4:01:
         db:96:78:ba:61:51:c1:82:bf:2d:1e:19:1a:12:d2:8c:2a:95:
         b4:bc:86:18:9d:09:0d:f4:20:72:8a:fe:6d:ed:0a:33:86:8b:
         47:56:43:e4:37:da:b4:57:ba:64:cc:69:81:85:f4:6a:bf:d5:
         4c:4e:46:c2:8a:3f:36:de:85:49:f1:63:86:54:67:de:fb:2d:
         04:a3:7e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+mzHobZF4gHWzWQLshhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjYzQ1ZmNhZGM0YzkzM2FjOGZmNGUwYjQzNGE1YmZiNTY3
YjY1YTEwHhcNMjUwOTA3MDcwMTAxWhcNMjUwOTA4MDcwMTAxWjAzMTEwLwYDVQQD
Eyg4MzcxMzlmYmNhMGZiMTgyNzE3MjY1ZjhiN2QxNjA4NDVkYmU2ZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBL3keHKTbU2JeO6KZQlQ3RNIu8q
xmN4HQCu2S/dGFvNEb2L5N9BuIZQErMXJ7WNSvQudVfG9qVcz8M0gscwzGSlG8Wh
OFV+XcrK2E8J6+lEz+3NToapQ3pSYtL8L7GrptHTkcmZfQ+5fLW8cgYCBE5738R/
9w3RQbYM4/P/9Lwe+SKcSBaB/PfuwI/8PByU3OJC7HScpiazrC1tFqCb4GcRhhzP
KzAft3Zs5iVlj/vd6r4ayT6UPavn7DnayrWWUg77TDJ+aYnyen084rZtk7xrtMUq
8TGl89EBTrM5OVs2Gl4XUGWjkofxAUF5CvTap5F2qRLvSMgOF1rJZszIfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINxOfvKD7GCcXJl+LfRYIRdvm8HMB8GA1UdIwQY
MBaAFOzEX8rcTJM6yP9OC0NKW/tWe2WhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQt
ZTA3NmY4Y2NiOGI5LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84YTQyODUtMTU3ZS00Yzc2LWJlZDQtZTA3NmY4Y2NiOGI5
LzEvN01SZnl0eE1renJJXzA0TFEwcGItMVo3WmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWYqoSo6
T71aVQiN/EWTioT/LoXAGOcBcYAacojYOGSH2Pix6p3YXdeaZpUSw8yWhFTC+Qki
lnwK+t7TEvaDREwLhenx0KJCLEP9/WTi//k/4PXLWNK0iQvbLBXDU31V5oJcvcnE
t1wBybFhgMFmn4jhGBa8x9A8k5hsrdurYWSUfZHQC8PCG/nCDumKce44T2hbyTA/
SItANgKHYBp1/NXtinv7ZKZN/pz5d/kh50Wg17QB25Z4umFRwYK/LR4ZGhLSjCqV
tLyGGJ0JDfQgcor+be0KM4aLR1ZD5DfatFe6ZMxpgYX0ar/VTE5Gwoo/Nt6FSfFj
hlRn3vstBKN+DQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:27 2025 by rpki-client