Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File:                     7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier:          sbbxTm6Na3SBYi8MRZgKzs00YFYcfehhY91hsDHAa1s=
Subject key identifier:   06:A5:A2:9A:7A:6B:6A:EF:AE:FA:CF:23:95:5F:6C:7E:54:F2:B5:A7
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer:       /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial:       019922C37BDFD1247D3F88484D679498AC03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number:          15EC
Signing time:             Sun 07 Sep 2025 06:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:00 +0000
Files and hashes:         1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: dAh9S2SsIg2dTmnHL20hbMV4EG4nCxlQcnLRm0CgUYA=)
                          2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:7b:df:d1:24:7d:3f:88:48:4d:67:94:98:ac:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
        Validity
            Not Before: Sep  7 06:01:00 2025 GMT
            Not After : Sep  8 06:01:00 2025 GMT
        Subject: CN=06a5a29a7a6b6aefaefacf23955f6c7e54f2b5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a3:c0:94:51:20:d8:37:d9:26:88:9f:33:3b:
                    d6:de:1e:02:23:a6:1f:fd:73:ce:4e:3e:d7:0a:17:
                    6f:28:8b:25:9f:6a:e3:2d:c9:c6:ea:88:dd:3a:5e:
                    dd:4a:82:17:7a:9c:e9:59:ad:b6:3e:57:e6:0f:04:
                    1d:67:f4:fa:ec:17:67:d2:ca:61:c7:c1:ea:dd:b8:
                    b5:d3:ce:13:04:92:b3:4f:7b:92:7f:bb:d4:e7:b6:
                    48:05:40:ab:a5:e4:60:fc:58:b6:10:9c:f3:16:c7:
                    66:0a:74:86:5d:26:30:c1:94:a1:e6:d8:d2:b9:d6:
                    fc:d2:5f:3b:b8:a3:9a:eb:20:99:e1:79:d7:63:39:
                    6b:92:b1:fb:59:16:c4:0e:6b:02:4c:93:79:ec:9a:
                    c8:90:73:80:91:97:80:3b:32:fd:bc:81:48:0b:6a:
                    a2:fc:a3:7c:49:4b:bf:ba:95:a5:3f:e6:b7:1f:66:
                    3d:c1:11:a1:20:28:83:f5:c5:e5:50:58:4f:45:15:
                    4d:94:6d:98:cd:3f:ff:b3:77:3f:71:07:f3:58:d5:
                    5e:80:82:cf:77:41:3e:c4:b3:93:c2:80:be:8a:f4:
                    89:ff:a3:dd:75:4f:7e:75:13:18:86:a7:17:49:86:
                    50:65:e8:27:9d:80:cc:db:13:29:eb:89:20:fd:bf:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A5:A2:9A:7A:6B:6A:EF:AE:FA:CF:23:95:5F:6C:7E:54:F2:B5:A7
            X509v3 Authority Key Identifier:
                keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:e2:a4:f3:4d:d1:bb:82:0c:bc:fe:5b:69:d8:6a:ee:1c:82:
         87:2b:c5:bf:e4:fa:e1:3a:ed:7a:3c:5b:05:c2:8a:b9:f5:db:
         99:a0:82:40:90:8f:5a:ca:53:cb:22:d5:26:b1:ec:47:12:06:
         2a:22:c6:61:e5:1c:f1:b8:11:1b:a7:da:79:bf:dd:b3:d7:78:
         0a:97:b1:b4:ef:b7:7f:0d:5c:9a:45:8b:87:09:37:53:ce:48:
         b1:21:f7:6d:a7:d7:f5:02:d0:82:b9:74:e9:5d:e6:0e:b8:96:
         82:71:dc:be:c5:23:f8:a9:16:8a:3f:e9:9d:7a:06:c2:78:0f:
         c3:26:a4:62:9e:16:37:68:56:0f:f3:e4:c1:75:c0:5d:9a:45:
         13:c3:69:21:28:1f:b0:f1:1c:69:3d:77:15:a4:fd:69:9f:81:
         68:c7:09:bb:8f:6f:cc:33:18:0e:0f:6d:c1:8b:b6:36:a8:55:
         a5:1f:88:b1:e7:4b:8d:50:48:fc:2c:3f:db:d9:1e:57:f6:a4:
         9d:7e:ee:11:4b:56:bf:2a:7a:6f:25:d4:3c:a4:63:71:a0:c5:
         ff:81:b5:0a:f5:fa:52:6c:b4:e4:a7:3e:04:83:2d:2d:db:cb:
         f3:30:52:86:cb:56:05:22:80:fc:57:24:c0:06:58:a6:94:fd:
         ee:f9:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:37 2025 by rpki-client