Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File:                     7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier:          WNjxLV61fxyE35UdHSsN1a9Yu4xiTAeV5jh+nx5e4Ds=
Subject key identifier:   7A:DB:18:AA:9B:5E:6E:3D:DF:94:9C:E2:1D:55:E1:A7:51:FF:2A:73
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer:       /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial:       0199239F8CA59C7BCE97D10A45A8526016EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number:          08E5
Signing time:             Sun 07 Sep 2025 10:01:22 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:22 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:22 +0000
Files and hashes:         1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: +TrgGoI5GH3KiBlwkleq3sOPqM/De1V9yOd6GzoudD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:8c:a5:9c:7b:ce:97:d1:0a:45:a8:52:60:16:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
        Validity
            Not Before: Sep  7 10:01:22 2025 GMT
            Not After : Sep  8 10:01:22 2025 GMT
        Subject: CN=7adb18aa9b5e6e3ddf949ce21d55e1a751ff2a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:40:a1:84:c0:dc:45:69:2e:45:f6:c7:e2:41:
                    96:22:81:a2:04:8a:66:34:97:64:3a:dc:16:43:a2:
                    96:8e:df:c0:f3:67:7b:66:2c:9e:49:85:6d:2f:6b:
                    cf:8f:bd:00:ba:c5:18:42:c6:54:61:ba:28:2c:89:
                    84:07:ea:1b:33:85:63:6f:42:2b:b4:75:cb:32:50:
                    eb:9e:1a:32:83:5d:a6:40:ae:12:6a:cd:2c:e8:2f:
                    d1:3b:e9:e8:2b:5a:14:52:c0:af:12:b1:02:27:a3:
                    e3:9a:51:02:07:23:3d:c1:74:cd:91:58:f5:a2:52:
                    02:43:6e:67:cf:68:3d:fc:a4:ac:71:06:98:bc:f6:
                    f9:cf:58:46:ad:a0:42:a8:b4:9d:6b:9f:c2:52:e1:
                    a7:5f:a4:2f:62:01:d1:13:ec:80:e3:6f:b9:13:6e:
                    98:e5:9d:e4:07:6d:71:c6:ef:27:14:ce:2e:59:d0:
                    c3:68:37:02:4e:7f:66:b2:76:0e:51:58:78:8d:ad:
                    7b:89:bb:4a:3d:b5:ac:6d:6c:2e:10:5d:c4:9e:57:
                    ef:20:e2:39:66:0e:85:5a:6f:d5:b9:9b:46:08:8f:
                    0f:98:f7:c0:d7:7d:df:4b:0a:86:95:7d:55:82:0d:
                    06:22:37:4b:1c:12:28:c7:c7:5a:a1:3f:92:24:5b:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DB:18:AA:9B:5E:6E:3D:DF:94:9C:E2:1D:55:E1:A7:51:FF:2A:73
            X509v3 Authority Key Identifier:
                keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:f6:9e:ce:14:24:14:38:fd:67:21:0e:9c:c3:f9:b6:01:15:
         4c:c8:ef:47:c6:a6:42:ed:80:ae:a5:8e:80:b1:0e:1a:75:ac:
         c2:f0:0a:35:fa:a8:44:49:f4:36:46:12:c2:a8:56:bf:c3:0d:
         da:dc:c4:92:e4:f3:9a:bd:88:c0:03:8c:9c:63:b7:74:52:9c:
         23:9a:ae:46:aa:bf:1c:f8:55:fe:f2:05:6e:6e:f8:49:6f:c6:
         86:48:94:45:49:da:3e:ad:7b:df:6d:ff:55:fe:10:b1:86:2c:
         08:b4:e4:3b:99:cd:75:47:cc:4b:0c:43:3b:37:9c:4c:35:a4:
         1d:6b:c2:89:7e:a1:33:e0:85:2c:72:24:51:46:c2:86:f9:b5:
         a4:39:9c:d3:3e:9c:9b:93:59:99:2f:ec:ff:c1:aa:38:e1:b8:
         44:af:eb:c1:0e:f0:d3:f7:db:b9:31:80:11:58:e2:79:78:bd:
         8f:24:de:ed:2b:a0:b0:66:65:fb:41:53:8f:b6:18:b4:c3:1c:
         45:e9:1e:f4:78:5d:28:b0:3f:fb:39:5c:f1:28:72:fb:28:51:
         81:c9:18:13:66:1d:8a:42:f9:bf:0a:ed:26:e5:91:bf:67:ef:
         65:49:2a:0f:1a:88:64:55:5b:1f:14:6c:4d:88:14:fb:a4:74:
         30:dc:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:07 2025 by rpki-client