Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          5+OIfERByr8ZSrU0/w7BOdyCdprBM2M5Rvto927faEg=
Subject key identifier:   EB:3C:72:81:5D:44:E7:94:41:D4:5E:2B:05:F0:2B:00:9F:E6:6B:3D
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       0198C949CCD68D23051E4B12CEDCF8A966BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          1641
Signing time:             Wed 20 Aug 2025 21:01:53 +0000
Manifest this update:     Wed 20 Aug 2025 21:01:53 +0000
Manifest next update:     Thu 21 Aug 2025 21:01:53 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: YZW+zELs7QLy6NCqk9ALFke72bp24d6hb7R4CshNaXA=)
                          2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 21:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:49:cc:d6:8d:23:05:1e:4b:12:ce:dc:f8:a9:66:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Aug 20 21:01:53 2025 GMT
            Not After : Aug 21 21:01:53 2025 GMT
        Subject: CN=eb3c72815d44e79441d45e2b05f02b009fe66b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:de:0f:20:63:1b:8a:dd:c6:7c:1c:b8:c0:89:
                    ac:db:fb:62:c1:17:2b:52:77:1e:9b:0b:f2:09:18:
                    51:08:ee:97:94:59:80:1f:88:1a:49:12:71:84:4c:
                    07:30:f7:ea:dc:97:82:6b:69:a6:94:f6:6a:05:2d:
                    c9:4c:20:3d:67:14:7c:bb:64:42:d3:69:9e:9e:9b:
                    80:88:0c:10:57:d2:68:28:3f:e5:1e:04:77:8b:d5:
                    3c:a8:15:5f:7a:70:4c:6a:79:ac:a1:dc:9c:25:35:
                    25:4c:05:b4:61:9d:1f:81:36:71:29:02:59:59:be:
                    b0:03:5f:91:a5:c0:08:ff:b9:c7:f3:48:6a:fc:8a:
                    2c:53:19:a4:6e:1d:b5:c6:6e:b4:7b:03:62:a3:0d:
                    80:3c:48:44:04:30:24:7d:14:46:0a:55:c1:7c:b1:
                    7b:50:9f:2d:d4:6f:21:53:b4:08:1d:eb:a0:0e:a7:
                    3f:19:4e:3c:ec:a0:50:7e:85:a6:e0:7b:07:22:3f:
                    15:1c:2d:00:14:aa:6d:77:27:c0:c4:68:ec:e5:e7:
                    88:2c:77:24:c0:d0:0e:ea:e8:a0:30:3b:c2:36:8d:
                    37:fc:8a:64:a0:e2:b9:48:89:ed:c7:a6:80:52:d2:
                    9f:35:0e:04:9f:ae:85:8b:d7:8d:52:b6:62:ec:5d:
                    06:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:72:81:5D:44:E7:94:41:D4:5E:2B:05:F0:2B:00:9F:E6:6B:3D
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:42:ae:40:d6:0e:d5:56:1e:51:64:b1:ee:00:24:b0:93:b9:
         34:75:24:5b:f2:1c:5c:37:b0:ad:0e:9e:03:e8:e2:78:47:13:
         aa:b7:be:7e:7d:00:bd:42:7f:ad:2f:2d:aa:b9:b3:c4:8e:c6:
         05:5d:69:71:0d:1b:c4:3e:82:8d:de:1e:9f:0b:02:04:44:8d:
         9a:82:66:91:41:f0:94:d7:d3:6e:e1:2a:f8:22:d9:5a:d2:31:
         b8:28:11:a9:52:23:8e:d6:14:2d:0e:0f:54:65:b2:d5:ac:01:
         55:d7:27:93:5f:af:d3:97:7e:42:a4:c7:f5:44:34:d5:58:f1:
         e0:e4:bb:27:a9:58:a1:59:35:a3:ec:bd:e7:82:80:24:e5:75:
         96:f6:3d:04:b3:5e:5d:93:37:fc:0c:a9:77:ae:fb:1f:86:1e:
         39:6c:af:c8:f9:2d:f7:e4:09:09:83:9f:2b:97:a7:88:63:da:
         d8:27:0b:59:1c:28:7a:76:49:be:34:61:46:7c:83:ba:55:ad:
         e6:09:d1:0c:57:74:98:7c:4b:08:1a:bb:59:18:a9:68:e4:33:
         e1:37:27:bd:43:f1:4c:e4:56:e0:19:d7:bd:a9:b8:93:44:14:
         f3:76:9e:d9:97:b2:ce:a6:53:b8:a8:ba:2c:d9:ad:c6:93:9d:
         27:2f:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 06:07:16 2025 by rpki-client