Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
File:                     7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft (raw, json)
Hash identifier:          ki4Jpcka/88Py9SDQl2CkKQeiMT76NxMWd4IIWIIIwQ=
Subject key identifier:   85:BF:1D:D7:06:79:A2:37:76:0F:8D:B4:0C:DA:13:31:1F:03:20:3F
Authority key identifier: ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5
Certificate issuer:       /CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
Certificate serial:       0199228C739974FCA78546BDB039234BE871
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
Manifest number:          061B
Signing time:             Sun 07 Sep 2025 05:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:53 +0000
Files and hashes:         1: 7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl (hash: 45JfRZ8FTaywfg96bmyUywL4demAKUTXYXclfQOp8/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:73:99:74:fc:a7:85:46:bd:b0:39:23:4b:e8:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6f9c7906940e3d4437c6bdcde164d065a80ea5
        Validity
            Not Before: Sep  7 05:00:53 2025 GMT
            Not After : Sep  8 05:00:53 2025 GMT
        Subject: CN=85bf1dd70679a237760f8db40cda13311f03203f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:36:99:c4:00:34:e3:56:28:fd:45:25:42:
                    42:df:0a:d9:ae:92:ec:36:62:6e:84:d6:32:24:02:
                    3a:70:5f:6e:c3:db:ec:6c:cd:57:b6:f4:6f:dd:f0:
                    76:5b:48:f4:c1:ca:5c:f7:7d:63:7a:5b:3b:2a:b7:
                    8f:61:af:32:b5:d8:3c:5e:96:7b:81:96:84:5f:db:
                    06:61:57:fc:93:42:af:b6:06:03:d6:f9:7c:25:2a:
                    09:fb:53:32:9a:ad:cf:2e:19:d2:49:9e:cc:a3:15:
                    0b:23:d1:9d:eb:b3:e3:00:55:75:10:92:4f:f9:1b:
                    e2:9d:f9:4c:ad:20:cd:c2:60:89:45:d5:cb:3f:fa:
                    21:3b:f7:1b:59:f5:54:86:4e:3c:39:fb:c0:18:d1:
                    88:c6:da:4c:ee:6f:93:72:c6:96:21:20:38:78:e3:
                    13:81:78:7b:57:3c:7b:fa:27:54:26:73:aa:41:5a:
                    d6:c1:13:6b:b4:c5:8b:ed:f4:41:d7:bc:fe:24:7b:
                    c1:f5:71:ec:a1:75:b2:6f:7f:73:24:03:39:66:1e:
                    af:92:f9:c9:f2:ae:05:f5:cc:09:23:53:6f:c5:80:
                    30:0c:87:8f:dc:1c:bb:c2:b6:1a:d7:a1:18:8d:79:
                    97:6e:3f:55:d4:cd:73:b9:ee:38:e3:50:3b:3f:6d:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BF:1D:D7:06:79:A2:37:76:0F:8D:B4:0C:DA:13:31:1F:03:20:3F
            X509v3 Authority Key Identifier:
                keyid:ED:6F:9C:79:06:94:0E:3D:44:37:C6:BD:CD:E1:64:D0:65:A8:0E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W-ceQaUDj1EN8a9zeFk0GWoDqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/da50de-2569-4cbc-8043-665dafa3055b/1/7W-ceQaUDj1EN8a9zeFk0GWoDqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1f:5b:c6:d1:63:cd:3d:c9:95:c3:94:29:c6:8b:55:5d:5a:
         3a:b8:96:2d:ba:41:65:fb:54:b7:23:e0:57:30:a6:8e:92:e1:
         32:0d:07:65:4d:9c:cd:e6:94:48:a2:37:eb:d5:ea:22:af:ef:
         b3:d0:90:71:ed:96:cf:64:29:55:4a:94:a9:df:51:f3:b8:a5:
         c8:e1:c0:57:f5:45:c3:7a:4e:ad:07:8d:da:0e:ff:1e:91:00:
         b6:84:65:07:ec:f4:83:97:a1:b5:e1:29:78:54:01:82:37:ef:
         9f:1d:f4:4d:c4:44:e2:29:de:f1:d0:42:f9:f5:d5:a5:f3:ea:
         e2:e0:58:f1:aa:ba:e8:0e:95:64:ce:62:aa:d0:14:b5:9b:3d:
         63:90:ba:1b:97:34:f7:12:72:21:4e:88:f6:78:ad:e8:8d:d2:
         57:af:e3:4a:6e:f9:f2:34:b2:d7:5c:b7:6c:0d:47:86:59:65:
         57:19:f6:85:2a:34:8e:0b:3b:97:74:ae:7a:40:c3:c2:b2:1a:
         f3:b2:af:5f:13:dd:78:9e:86:65:a1:63:14:15:fc:53:29:5e:
         fe:12:7e:54:4c:5b:3b:ec:8d:ba:a0:b7:5a:e8:de:20:41:ef:
         c6:c4:a7:4a:38:6a:0d:0f:2e:ed:a5:9b:43:03:02:52:c0:79:
         8b:04:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:42 2025 by rpki-client