Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
File:                     7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft (raw, json)
Hash identifier:          h1A2r35o8+pS9dQ4F3bfEgmxGtpLG6WFF2zH7MjVVYM=
Subject key identifier:   13:21:BF:35:AA:41:C4:74:8A:6D:27:0A:79:60:9F:F8:27:24:18:A3
Authority key identifier: EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2
Certificate issuer:       /CN=ec2408f545242558c1103c0194b4f561eb9a23a2
Certificate serial:       019921B101FB8F9313B69F0817C5439A44F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
Manifest number:          0D2A
Signing time:             Sun 07 Sep 2025 01:01:12 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:12 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:12 +0000
Files and hashes:         1: 7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl (hash: Hb8T2XLDePgV5qQO2IzsMm/YnfvqtSpz16qWshtyPAU=)
                          2: W3UE20l_8Px6YA0EYO3_NVSjfaA.roa (hash: SmuzL3cKoEYF8dbOh8LZGbcugb4WzfvFlt+ZhSQ+t5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:01:fb:8f:93:13:b6:9f:08:17:c5:43:9a:44:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2408f545242558c1103c0194b4f561eb9a23a2
        Validity
            Not Before: Sep  7 01:01:12 2025 GMT
            Not After : Sep  8 01:01:12 2025 GMT
        Subject: CN=1321bf35aa41c4748a6d270a79609ff8272418a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:5e:23:8a:5a:e0:be:07:bf:a0:83:84:e8:
                    0d:10:3c:92:8f:1f:77:47:f6:78:ee:ab:4c:16:d6:
                    bb:92:bc:bc:48:9f:e9:a2:d0:48:b4:4b:0f:c0:01:
                    3e:9f:14:06:90:b9:90:ae:31:25:d3:da:cd:fb:87:
                    a5:ec:ee:e0:a0:1f:fb:28:99:b6:e8:29:af:99:99:
                    5e:c6:83:02:ff:91:42:83:38:7d:ff:59:00:98:39:
                    c7:11:e8:fc:15:3a:25:72:93:1d:cf:fa:07:7e:ec:
                    ba:d6:51:b2:24:6b:bf:01:49:db:c5:9d:c4:98:2c:
                    72:87:7c:e5:9b:16:d7:a8:af:52:2d:de:2d:26:da:
                    ac:6a:bd:11:db:cf:96:c8:ed:23:b1:78:d8:01:cc:
                    8d:9c:57:fe:4b:5a:32:f9:99:88:d4:3b:aa:26:2f:
                    49:6b:32:cd:34:47:fa:a6:a6:69:86:8b:28:64:29:
                    3b:16:76:f7:3a:9b:bb:d6:94:fe:69:85:b5:64:dd:
                    fd:f2:41:b0:21:ff:d4:11:3c:98:08:34:e2:85:27:
                    54:a5:d3:52:e9:4f:dc:2e:01:83:32:f8:bc:f4:58:
                    24:81:c8:91:f5:ef:73:e3:ee:b8:ee:27:f7:84:1d:
                    a8:49:ea:9b:53:d1:21:00:9b:3b:95:4e:b0:00:42:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:21:BF:35:AA:41:C4:74:8A:6D:27:0A:79:60:9F:F8:27:24:18:A3
            X509v3 Authority Key Identifier:
                keyid:EC:24:08:F5:45:24:25:58:C1:10:3C:01:94:B4:F5:61:EB:9A:23:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CQI9UUkJVjBEDwBlLT1YeuaI6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4b66ea-ff52-4fbb-874a-e842680ba1a7/1/7CQI9UUkJVjBEDwBlLT1YeuaI6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:8a:a9:85:89:69:39:cb:b2:c8:24:7a:4c:8a:c0:c9:b6:
         40:48:12:58:42:59:7e:51:f9:44:1d:39:0d:96:6e:13:99:1e:
         7e:64:64:7f:2c:64:78:b7:b7:7b:b8:a5:ef:8c:b6:95:76:a9:
         c3:67:89:d3:2d:33:5b:da:1d:5d:69:c3:14:39:32:27:b9:9e:
         4b:fa:03:d2:38:fe:46:ff:61:15:1d:86:16:c9:b7:ac:c5:4f:
         9a:f5:c7:67:c5:33:ca:34:98:1b:e4:0f:bb:b5:06:fd:4c:cd:
         15:77:5d:77:c6:b9:76:17:98:45:20:83:df:95:d0:a1:4f:0c:
         c5:a2:f0:e2:b9:c2:1f:bb:3e:2a:da:5c:92:91:58:de:98:fb:
         58:87:f4:e1:81:d1:93:fc:ac:ff:2e:c5:ac:7b:3d:55:2b:10:
         2e:6e:a6:80:6d:2e:88:57:c1:20:0d:67:d0:8a:dc:2c:1e:03:
         03:fc:cc:d3:7a:1e:12:d5:99:06:07:6e:d2:e2:a7:98:ad:9c:
         19:51:74:34:8f:62:2e:3c:65:3c:46:26:8c:73:21:b3:a4:4a:
         8c:d7:19:4b:17:01:71:d3:51:cf:b9:a5:2d:5a:2f:0f:25:08:
         bb:5b:e4:18:34:ba:0b:8c:75:00:2d:fa:d1:da:21:a4:24:cf:
         ce:e6:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:24 2025 by rpki-client