Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
File:                     2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft (raw, json)
Hash identifier:          X4vgd0+uU/D6fG+EKRaQv9VjGlukO77wshiKOkQry58=
Subject key identifier:   6F:84:91:15:5A:11:48:37:CF:80:6C:01:98:A8:9A:60:DC:84:B7:3D
Authority key identifier: DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73
Certificate issuer:       /CN=daaec597d1b379ea83236312c6f8b2bce7439773
Certificate serial:       0199221EA0C21DFF30F1BDC34F5C88022E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
Manifest number:          070C
Signing time:             Sun 07 Sep 2025 03:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:56 +0000
Files and hashes:         1: 2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl (hash: Ls8usfB+10gIsKzqQtMlsBeEVNAkaEYm8OQlaeHbEjs=)
                          2: g6X_lRYXDJRZnC8lMpbRmD7fpGU.roa (hash: hq/bivbA56Qmzu+4HRNaps/x/ti0y7YbNHmOsoCnEhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:a0:c2:1d:ff:30:f1:bd:c3:4f:5c:88:02:2e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daaec597d1b379ea83236312c6f8b2bce7439773
        Validity
            Not Before: Sep  7 03:00:56 2025 GMT
            Not After : Sep  8 03:00:56 2025 GMT
        Subject: CN=6f8491155a114837cf806c0198a89a60dc84b73d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9b:77:5a:c3:46:ae:a7:f2:f1:00:d3:7c:9a:
                    c2:ad:74:58:88:3c:2e:42:77:e1:46:ea:f6:7c:74:
                    e7:b6:64:d9:39:74:e4:5b:35:a1:58:cb:b6:24:9e:
                    4d:d0:14:75:c5:99:71:65:d7:54:92:7f:79:66:41:
                    67:a1:3a:74:3c:5b:a2:39:7f:35:0a:ed:87:49:ad:
                    bf:e7:00:bf:b2:0a:52:09:d2:de:e2:0b:1b:5f:c8:
                    ed:55:fc:94:a7:9f:d7:e3:bb:bc:5f:25:27:ce:51:
                    1c:05:f7:30:f5:01:52:12:2b:45:aa:da:7d:ce:e6:
                    65:3a:8f:15:38:fe:df:dc:98:58:c1:c2:88:33:ae:
                    73:9e:65:57:79:89:95:5a:1a:3d:01:61:ac:67:87:
                    a2:df:97:21:fd:f5:0c:25:c6:13:c3:9a:6b:f9:2f:
                    d2:ce:27:71:43:dc:5c:18:dc:fb:15:55:cf:22:f8:
                    c1:d0:62:40:fa:03:86:cf:c4:0d:15:20:5b:2a:c8:
                    5f:de:ec:da:e6:d1:53:79:89:15:3a:e8:48:39:e3:
                    c1:dc:0d:c8:d5:78:57:af:41:7d:fe:79:5e:9f:17:
                    19:f5:7d:f4:3b:b6:e1:50:ef:0b:47:db:9d:ad:59:
                    01:20:81:00:ba:00:a2:78:1d:42:76:e3:c3:e5:c4:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:84:91:15:5A:11:48:37:CF:80:6C:01:98:A8:9A:60:DC:84:B7:3D
            X509v3 Authority Key Identifier:
                keyid:DA:AE:C5:97:D1:B3:79:EA:83:23:63:12:C6:F8:B2:BC:E7:43:97:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q7Fl9GzeeqDI2MSxviyvOdDl3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2d8efc-b9fa-432c-9727-8b85b28fbb79/1/2q7Fl9GzeeqDI2MSxviyvOdDl3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f6:61:9a:f3:05:18:44:8f:7d:e9:ef:25:21:c0:48:dc:ad:
         f3:d7:c6:9f:64:4b:c4:50:5b:a3:70:5e:59:aa:a9:fd:5e:a4:
         61:e8:fd:b7:b6:fd:09:90:d6:16:f1:20:c2:29:70:70:46:6d:
         1c:86:9e:54:c4:b9:e0:57:ad:3c:53:ab:f6:7d:fe:34:57:37:
         f5:4c:32:00:97:17:d5:42:f9:91:05:9b:0b:c3:d9:ea:67:e9:
         4f:dd:7c:7c:49:1f:a0:ec:70:db:4b:e2:60:b1:f9:6a:4a:51:
         df:04:3c:ea:f3:78:0c:48:aa:ff:9d:e6:76:1c:c6:9d:7c:57:
         2a:f4:87:16:26:d4:2d:93:68:2e:c4:4c:55:47:f5:fb:79:93:
         cc:c2:9d:55:2a:df:66:98:fd:4f:79:f3:9b:47:b2:8c:a3:93:
         50:06:82:93:33:1d:5b:b0:de:70:7b:4b:70:2a:70:a7:89:09:
         cb:cd:5c:21:22:ae:c0:73:f1:af:88:8f:f3:c7:78:8c:30:7e:
         73:e8:29:c0:de:35:10:79:98:0f:d1:15:19:24:7f:06:75:26:
         59:e6:1d:4d:93:51:ff:bf:35:5a:49:53:96:df:0f:2e:6f:66:
         12:1f:6c:35:f5:36:6c:e8:ce:e3:2d:6d:62:c7:a9:0f:0d:84:
         3e:ee:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:03 2025 by rpki-client