Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File:                     7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier:          pKSYtTOz1UpFtzyTGuexzwrFMt/6c9Us2xRvMVKZ6tc=
Subject key identifier:   51:A3:A4:D5:25:03:61:47:69:6B:34:85:6F:45:AF:1E:0C:74:7A:64
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer:       /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial:       0199228CADB717B7798651BD603A373DE00A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number:          0ED7
Signing time:             Sun 07 Sep 2025 05:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:08 +0000
Files and hashes:         1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: ibbbURwXVdF7ftQbsURxhKpJxny2f5DTwrZAkN6jrbs=)
                          2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:ad:b7:17:b7:79:86:51:bd:60:3a:37:3d:e0:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
        Validity
            Not Before: Sep  7 05:01:08 2025 GMT
            Not After : Sep  8 05:01:08 2025 GMT
        Subject: CN=51a3a4d525036147696b34856f45af1e0c747a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:0d:cf:a7:bd:4a:94:68:a4:39:e1:d1:3e:
                    40:20:b5:39:bd:12:4c:64:ac:4d:70:f9:fd:a3:af:
                    1f:54:8a:d2:f7:9a:03:b5:22:c0:fc:86:d5:d1:c2:
                    19:43:fc:46:1f:ec:6b:a6:63:82:b1:0e:98:0a:03:
                    c0:3d:18:a6:dd:24:0a:25:71:13:71:d6:df:95:31:
                    fb:e9:0d:73:c0:8b:24:8d:cb:5d:10:37:72:4c:2d:
                    c0:b9:66:08:55:83:1e:d2:ab:63:ba:08:9e:51:7f:
                    16:fe:98:1e:1e:4b:6f:0e:8f:a0:4f:ba:74:40:f0:
                    8b:41:33:23:63:f0:68:f0:cb:40:83:cf:72:4d:63:
                    83:e2:eb:96:5d:77:72:f4:7b:9f:61:5b:b7:c3:1c:
                    68:49:99:28:c1:7b:ac:e1:04:88:28:ba:48:16:f9:
                    aa:50:79:59:3e:65:97:88:2a:34:39:e7:75:61:9f:
                    85:00:dd:21:40:76:44:cd:10:ae:7e:d1:c0:32:a8:
                    84:cd:3b:0d:3c:e8:c2:3a:02:64:b7:bf:94:89:62:
                    20:02:a0:0c:ed:ca:a9:1a:77:6e:ee:20:45:77:8e:
                    52:91:20:76:18:b3:36:50:e1:5b:af:71:41:93:70:
                    54:f9:38:75:ba:6d:81:c2:f1:36:65:6f:4c:60:19:
                    3f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A3:A4:D5:25:03:61:47:69:6B:34:85:6F:45:AF:1E:0C:74:7A:64
            X509v3 Authority Key Identifier:
                keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:71:55:4f:35:5d:8c:d3:7c:ac:e5:5c:49:c9:06:84:65:f0:
         08:48:62:8e:c5:cd:b8:db:03:c3:e2:d7:5f:2f:40:5c:13:96:
         53:b2:3e:80:c3:31:ad:f4:b3:65:ba:9d:da:0d:6a:0a:65:b1:
         4d:24:57:a1:09:78:6c:90:bf:4e:95:32:34:57:0d:2c:fb:1d:
         09:a0:fb:f3:8a:f2:0a:55:e3:78:ec:c9:dd:f3:a1:36:87:50:
         64:ea:0c:ac:b1:af:ce:94:5e:6b:a9:a2:32:23:70:1d:d6:80:
         10:fd:8d:c6:17:68:7e:53:06:b4:31:7c:4f:0c:91:fb:10:ea:
         85:fa:34:96:67:5c:f6:11:99:b9:a3:2d:9c:dc:e9:ea:33:da:
         4a:07:09:3c:2a:5e:cd:70:56:d8:78:14:13:89:02:a4:e8:e5:
         17:1c:60:eb:1a:ec:9e:b3:a8:40:79:1f:ce:f2:07:ff:4e:43:
         c5:ab:7d:be:44:a3:b2:2f:0d:c8:fd:8b:43:bb:a4:ec:c0:fe:
         b7:91:d5:0d:33:40:15:7b:7e:70:8c:4f:bf:34:17:5f:3a:4d:
         35:ca:c2:8b:e0:92:6c:af:b3:2a:16:12:a0:6a:e8:6d:be:f4:
         d2:92:d3:c7:5e:7e:e1:c7:f9:7a:d7:4e:01:b3:e0:1e:9c:78:
         4b:24:90:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:15 2025 by rpki-client