Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
File:                     E07-fFQfVAbcfg_yaNBVgrrvyZY.mft (raw, json)
Hash identifier:          uz0IMjitOBTzjn6uwt8+MYUcr7if6zlmaD6+l43rzzM=
Subject key identifier:   F6:67:D0:48:B2:BF:E8:EE:5B:AE:D6:D8:24:51:15:C7:C1:B5:51:87
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Certificate issuer:       /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial:       019900DD1FFB9EAC947FEE6ADCF7178AA5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
Manifest number:          0EC5
Signing time:             Sun 31 Aug 2025 16:01:55 +0000
Manifest this update:     Sun 31 Aug 2025 16:01:55 +0000
Manifest next update:     Mon 01 Sep 2025 16:01:55 +0000
Files and hashes:         1: E07-fFQfVAbcfg_yaNBVgrrvyZY.crl (hash: iqS9Pr/IcUDtu4cq2vc1VHDHXanWHmbEqnm4pbUmjVs=)
                          2: biqyFypLLQNkv7SioX50S6Sicvg.roa (hash: LF7o3l8/q2c8dQh0AVrayQ/2mZza3ObHjFmvPVVd/nE=)
                          3: jw4-wajYBcUB_lE5D20b-DOh7uo.roa (hash: Kv0+iJW442oWteIb5Sw1ZuADeKbhpqDku8dGA7+CQdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Sep 2025 13:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:00:dd:1f:fb:9e:ac:94:7f:ee:6a:dc:f7:17:8a:a5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
        Validity
            Not Before: Aug 31 16:01:55 2025 GMT
            Not After : Sep  1 16:01:55 2025 GMT
        Subject: CN=f667d048b2bfe8ee5baed6d8245115c7c1b55187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:e1:86:b9:02:68:f9:6b:c8:8e:6d:66:26:
                    87:60:ca:66:f8:b4:f1:51:85:ee:8f:b2:c2:09:f1:
                    ce:8f:96:07:49:64:59:27:94:70:ce:97:3b:bb:92:
                    19:51:a0:72:6d:29:7f:04:47:d0:46:0c:9d:77:fd:
                    1a:d7:75:fa:15:50:0c:da:7d:c1:ec:93:3d:2d:4b:
                    21:39:e0:c8:4f:89:09:9e:94:d2:69:98:f6:f4:51:
                    1b:6e:f5:7f:e3:f1:7f:18:36:df:07:ca:d1:98:d0:
                    a6:0f:1b:7a:21:83:71:1f:27:16:df:56:e4:e2:0f:
                    35:e2:fa:12:d9:da:2c:31:9f:f4:55:ad:62:ed:d5:
                    5c:c7:1d:48:90:09:f9:65:b7:6d:68:63:e1:d3:e4:
                    a9:4a:83:0f:57:23:63:0d:8f:77:8f:0d:75:b4:de:
                    4b:84:f3:56:83:a8:51:6e:76:9b:b1:10:0d:9f:ac:
                    8d:2b:aa:eb:e2:1e:33:04:06:41:13:8c:41:1a:2a:
                    f5:d5:a0:4c:4f:bf:4f:d4:d3:af:99:33:66:bb:ca:
                    2c:57:e6:67:08:7a:8b:58:01:db:b5:1f:66:f9:5f:
                    9a:9d:ff:8e:17:d3:d5:83:a7:95:5f:6b:5c:4f:a5:
                    08:63:a9:59:08:c0:8c:f3:18:c2:8c:46:13:da:ed:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:67:D0:48:B2:BF:E8:EE:5B:AE:D6:D8:24:51:15:C7:C1:B5:51:87
            X509v3 Authority Key Identifier:
                keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e0:74:18:2f:e7:5f:2d:c2:bc:ef:28:de:b8:6f:b5:79:7b:
         12:e1:72:cb:91:2a:2f:ce:22:f5:b4:2f:0e:8e:83:72:61:3c:
         99:47:a1:5b:96:48:67:0b:ae:ef:bb:53:49:d2:57:f1:de:26:
         75:c3:a8:68:b2:93:27:6d:8d:19:a9:24:87:13:c6:90:9d:e2:
         b4:24:e0:fa:db:56:2f:4f:ec:fb:24:cb:91:87:8f:87:2d:b7:
         7c:50:55:44:9f:1c:31:bd:0b:f9:ec:27:25:61:19:b2:00:00:
         87:e5:96:4d:a5:78:8c:8f:32:38:dc:fe:92:34:f9:19:0f:40:
         25:4f:db:e5:06:ed:c2:7e:a9:ce:2e:d0:5f:56:f9:c4:50:e2:
         c6:f0:b5:58:6b:18:05:72:24:18:0e:2a:89:48:8d:24:74:71:
         20:63:db:22:9b:18:08:b2:51:61:1a:6c:ec:ff:0a:75:ee:73:
         fb:0e:5d:42:12:43:ff:1a:12:4c:fd:c1:5f:02:d8:1f:0e:39:
         76:ea:59:24:9a:1e:2c:07:08:6b:be:10:47:44:1d:c6:cb:b0:
         3d:17:a3:7a:42:de:d1:f4:01:66:3a:75:94:a3:af:5f:60:c9:
         07:3e:ff:2a:dc:b2:ee:df:1d:f8:6f:52:98:fc:b9:ea:c8:cd:
         62:bc:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 31 18:11:48 2025 by rpki-client