Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          NwE+Ffmb4DL2k+w6H4dWybOFbJ40TZUwWctnRigSJFA=
Subject key identifier:   A7:8C:6D:CE:91:58:26:97:26:AD:1F:F8:4E:8F:5A:B0:E1:04:C4:11
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019933124F9E01B09D78BCDF49B0377AFD61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          09FD
Signing time:             Wed 10 Sep 2025 10:01:02 +0000
Manifest this update:     Wed 10 Sep 2025 10:01:02 +0000
Manifest next update:     Thu 11 Sep 2025 10:01:02 +0000
Files and hashes:         1: CL5GDI7AL5f3-MMAg1KGH-qZ_X4.roa (hash: 1+cCs2zFwxJkW1OoUx7Jz3Uxj06h6MGbFiXw6q5dy7M=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: wCFh6bd3SrbMmBOqHrf7C7Jjh21UirHT+49PyAmauQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:12:4f:9e:01:b0:9d:78:bc:df:49:b0:37:7a:fd:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Sep 10 10:01:02 2025 GMT
            Not After : Sep 11 10:01:02 2025 GMT
        Subject: CN=a78c6dce9158269726ad1ff84e8f5ab0e104c411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:bf:ae:e4:b8:81:60:0a:90:87:33:f9:f0:
                    01:6e:b4:89:81:7d:e8:55:a4:23:72:c3:f6:6e:4a:
                    17:61:e2:3a:e7:0a:7f:d7:ee:ae:f6:86:7c:4f:25:
                    75:02:6a:b3:49:71:c9:e2:bd:b1:10:f3:2e:92:d3:
                    cc:65:44:5f:b0:c8:99:8e:a5:d6:cb:2d:ef:df:1e:
                    ff:7a:9c:80:df:5e:54:6f:6e:61:3d:91:87:bf:e0:
                    b0:0b:a7:22:a1:b4:04:50:03:3d:81:e6:67:1e:b7:
                    35:2e:21:ca:a4:00:60:8a:84:8f:ed:1c:3d:3e:a9:
                    a3:20:94:cc:a3:a0:2f:7e:82:4c:27:b5:d2:40:1a:
                    98:d8:a2:28:ba:7a:93:f4:06:7f:97:44:5b:a1:7a:
                    19:69:82:b3:2d:96:6d:45:f0:03:ca:88:af:fe:31:
                    39:c1:50:60:5b:3f:e3:41:95:b6:9f:4e:6d:6e:7a:
                    78:a0:e3:15:39:28:3b:7f:cc:92:4e:93:7a:62:75:
                    15:ee:61:4e:2d:47:a1:2f:d0:e7:b9:94:50:f4:e0:
                    b7:b7:32:02:c4:91:d5:47:68:15:c8:fb:a2:55:d8:
                    d4:5a:e6:3a:2e:aa:69:c4:40:2a:94:3d:eb:a2:7b:
                    1c:ad:2e:7f:ca:e4:05:3e:19:9a:86:c3:28:d7:9d:
                    86:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8C:6D:CE:91:58:26:97:26:AD:1F:F8:4E:8F:5A:B0:E1:04:C4:11
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:ca:27:64:df:dd:ca:1e:ec:2d:04:85:29:89:4b:2d:b7:15:
         98:04:70:48:bf:40:e2:17:2c:a0:ab:58:12:1d:a9:3c:30:ff:
         38:f0:ab:b8:d2:cd:1e:69:fe:7f:c8:cf:66:5f:30:ca:a8:69:
         a9:a4:f3:c4:84:f5:aa:bb:99:29:f6:82:dc:86:fd:d2:38:ba:
         4b:b9:f7:cb:1b:9a:08:89:59:08:10:52:80:cf:51:05:c9:09:
         6f:eb:98:26:54:58:b2:22:21:6b:86:dc:ea:1d:93:64:15:0c:
         1d:1c:f2:5c:40:75:36:e7:82:89:f7:d6:2a:23:db:42:2a:68:
         58:34:b0:2c:fa:d2:57:1b:43:28:b2:8c:05:f0:5e:25:6b:11:
         91:c7:87:71:c0:c5:85:78:ab:5d:bb:5c:7c:f5:8d:ca:56:07:
         33:dc:65:54:c8:00:f1:ce:a2:a7:80:b2:27:88:3b:24:8d:ce:
         83:b2:71:91:c3:2f:78:05:da:32:2b:fd:12:61:32:eb:79:55:
         9c:00:f9:e7:73:ee:38:fb:88:cd:eb:52:c8:93:38:d7:2d:6c:
         8b:77:ff:de:73:bd:9d:c7:fb:39:74:13:d5:07:7b:ab:3c:83:
         16:11:09:a6:03:59:d3:6d:c1:a6:72:59:6e:99:d3:fe:ad:44:
         0f:85:fb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:28:07 2025 by rpki-client