Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
File:                     eyIdrMbD43H18LsnbJ_liMXuX9w.mft (raw, json)
Hash identifier:          EGq5v5KLjpTWPYTtY3Ec3p+Qf+kuhS6fqzEg+VbsbWA=
Subject key identifier:   7A:BE:2F:DD:9C:D0:85:63:39:53:13:50:AC:0D:C1:95:CA:DF:64:CC
Authority key identifier: 7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
Certificate issuer:       /CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Certificate serial:       01992367C3D960C2F2C0743B6E09F1E87EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
Manifest number:          12D6
Signing time:             Sun 07 Sep 2025 09:00:26 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:26 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:26 +0000
Files and hashes:         1: eyIdrMbD43H18LsnbJ_liMXuX9w.crl (hash: 5cQPnRjb6lVYiUakMxDY2LL1o6fGRzrReoP3P7E8L/4=)
                          2: upNLPPnyM8FAT_qTlmPdt9MqY20.roa (hash: /StSFYsQBsgCjaa6Irv+9PecpIUgxU57V3vSxO+su8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:c3:d9:60:c2:f2:c0:74:3b:6e:09:f1:e8:7e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
        Validity
            Not Before: Sep  7 09:00:26 2025 GMT
            Not After : Sep  8 09:00:26 2025 GMT
        Subject: CN=7abe2fdd9cd0856339531350ac0dc195cadf64cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:d8:3a:89:79:c4:1a:c3:8e:e0:b3:53:90:
                    65:ed:b4:3f:5a:47:40:f0:37:b2:20:da:b3:f6:77:
                    aa:c1:47:72:3f:df:09:71:e0:26:5e:53:b2:a4:5b:
                    6b:6f:87:88:68:f4:b4:01:af:aa:1e:e0:27:65:23:
                    fd:aa:76:f0:35:ea:0e:a3:c3:6c:9a:16:be:10:4c:
                    f1:6d:50:8d:08:30:82:43:da:fe:a3:9c:18:ec:d7:
                    6b:bf:71:a1:10:b6:26:b2:0a:f7:59:aa:f1:51:db:
                    42:27:41:04:8d:24:85:31:99:23:19:85:01:af:0d:
                    7e:25:e0:54:b6:0a:71:b1:48:94:68:48:ba:2c:76:
                    a5:7c:d2:6e:7a:bf:53:61:92:92:83:1c:cf:b1:ec:
                    53:98:b2:12:ff:32:ef:4c:75:d2:d4:01:de:e8:17:
                    57:bd:cb:b9:44:6f:b7:ff:03:88:a3:9c:e3:16:79:
                    ab:52:d7:2c:c6:dc:1b:e7:5d:42:b7:5d:8f:51:ca:
                    24:70:62:a8:6d:6d:95:84:76:be:26:f2:cc:62:e2:
                    6d:25:30:ec:f8:af:4b:b4:3c:4d:02:0c:cc:77:39:
                    11:79:c9:5c:0c:95:2a:3b:d1:ee:c5:89:dc:7b:11:
                    15:c6:e1:f7:e0:bf:62:6f:8e:b9:09:53:f2:30:4c:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BE:2F:DD:9C:D0:85:63:39:53:13:50:AC:0D:C1:95:CA:DF:64:CC
            X509v3 Authority Key Identifier:
                keyid:7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:24:94:7b:5c:ad:36:19:ef:47:34:4b:37:52:05:8b:9e:6e:
         d0:d2:16:69:c8:74:96:ab:93:92:fd:c6:50:e8:7b:9b:c4:c2:
         7c:68:05:f7:f6:af:af:c8:71:e7:b3:c4:0a:1b:63:6b:23:6c:
         7f:21:a1:52:4b:a7:c3:28:f9:7d:5e:15:4e:bc:2f:47:ac:8a:
         af:3b:f7:5b:a1:6b:11:90:2f:54:bb:92:d1:18:db:60:9a:b0:
         1b:2c:a7:33:df:51:31:cc:5f:ee:96:d7:67:fd:7f:fb:dd:cf:
         b4:46:ed:80:a0:06:f3:ba:ee:53:2f:96:30:b0:c1:86:27:76:
         bd:f0:ea:3f:3f:86:12:e8:a0:2a:20:d0:da:5f:d6:fa:56:d0:
         a5:2b:35:4d:25:d2:b3:3d:eb:d3:c8:84:71:2d:0c:62:d8:6b:
         63:68:ca:6d:aa:96:e6:d2:73:8c:bb:44:8e:29:77:eb:63:e0:
         58:f3:07:ed:1e:cd:65:41:25:3d:e8:c8:19:5c:01:2d:d3:09:
         5f:d1:23:78:f7:bc:b1:ea:dc:32:e1:c1:2a:15:20:0d:47:a1:
         fb:f0:76:4e:32:73:89:bc:ee:08:c2:a7:6f:88:90:2e:d3:ad:
         e4:8e:33:62:7c:0b:15:a7:f7:f6:39:3e:58:2a:a0:9f:64:63:
         f8:44:e6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:18 2025 by rpki-client