Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File:                     7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier:          6Eun85dNwVu3gfHBSTYBvDNtY7+L9MhzEnxHzG4ezwo=
Subject key identifier:   90:C7:40:F7:9A:30:87:AA:20:98:67:48:40:03:49:74:D4:1F:77:04
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer:       /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial:       01992B58457E896A8AAC10B4D5366F160966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number:          052D
Signing time:             Mon 08 Sep 2025 22:00:29 +0000
Manifest this update:     Mon 08 Sep 2025 22:00:29 +0000
Manifest next update:     Tue 09 Sep 2025 22:00:29 +0000
Files and hashes:         1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: caTK/TVhtNsUQhUlIKEjDyZra0Q2D+RYCv8KY13WTlA=)
                          2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
                          3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:58:45:7e:89:6a:8a:ac:10:b4:d5:36:6f:16:09:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
        Validity
            Not Before: Sep  8 22:00:29 2025 GMT
            Not After : Sep  9 22:00:29 2025 GMT
        Subject: CN=90c740f79a3087aa2098674840034974d41f7704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:82:a6:ba:2a:2b:77:ce:31:bc:16:7e:9b:
                    87:ba:23:80:cd:26:df:15:8c:9e:8f:97:d3:86:e0:
                    3e:6d:70:c0:bd:f7:0c:44:e7:bd:73:af:17:2e:90:
                    f1:c4:ec:77:c5:96:7c:25:ee:3a:e9:51:30:ca:35:
                    0e:9c:da:9e:47:ec:ae:b8:db:22:73:03:1d:c1:67:
                    f4:8b:2e:95:11:cb:4e:c0:d1:7a:d6:39:d5:ff:c5:
                    2e:ec:6e:dc:cc:f1:e6:21:c8:97:d5:dd:0f:13:1c:
                    c7:0f:31:bf:d3:34:90:ea:14:a4:22:cd:23:64:76:
                    5a:ba:57:5f:21:cb:7f:ea:b4:26:ee:5c:bf:d2:4c:
                    53:47:54:77:85:ac:30:d2:14:8d:bc:25:69:91:5a:
                    75:45:2a:69:7a:c0:73:90:a3:03:9a:91:1d:11:db:
                    e2:3a:a4:dc:b6:bd:a0:5a:22:9d:ed:0d:8c:7d:31:
                    6b:f9:95:24:89:a2:bb:96:8b:5a:cb:cc:b2:81:a8:
                    31:d9:59:7d:9c:9e:9c:b5:84:4d:d6:0e:05:cb:85:
                    c1:dd:7e:61:77:a5:97:d6:9d:f2:7d:fd:3f:78:ea:
                    2b:e3:51:4a:e8:2f:46:75:7c:0b:9d:6a:c6:db:88:
                    25:d8:f9:6d:69:a6:4a:aa:24:bc:38:34:43:be:25:
                    2f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C7:40:F7:9A:30:87:AA:20:98:67:48:40:03:49:74:D4:1F:77:04
            X509v3 Authority Key Identifier:
                keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:09:90:27:a3:84:b6:92:a5:36:49:7a:e2:04:2b:44:92:01:
         1d:93:40:e5:a1:e0:78:00:b5:48:e5:86:68:30:ef:17:92:5a:
         23:fe:52:3f:8d:30:48:e9:12:2d:82:0d:b2:26:19:8a:0f:22:
         22:99:98:d9:fd:c1:68:16:f1:87:c3:54:b5:30:3c:ba:8f:f4:
         d5:71:bd:d0:e2:96:f9:8b:1d:21:2a:89:bf:d8:ac:eb:2b:62:
         f4:56:af:51:b8:7f:50:12:53:90:d3:ba:a7:b4:05:85:f1:5d:
         cf:1c:b4:d1:57:9f:71:50:a0:7e:9f:31:bc:49:1a:2e:e7:2e:
         01:6b:8e:08:ec:2b:a8:a5:f7:c3:45:f0:3e:eb:9e:93:b6:5f:
         fb:aa:ff:87:88:5a:80:3b:8e:b8:be:ab:9a:15:61:62:6f:4a:
         39:0f:38:71:52:63:68:9c:63:f2:bd:5c:31:fd:db:1a:15:de:
         81:8e:7f:3c:be:30:2f:35:fd:d5:c6:eb:16:c9:50:fc:fe:54:
         b2:9f:b1:d3:52:8e:aa:a4:47:ca:15:4b:b0:3e:e4:60:ef:27:
         73:b6:e4:df:ba:91:26:ae:d9:72:8f:d9:4e:96:25:b6:ae:6c:
         86:6f:9c:6e:6e:6a:a6:e6:21:8a:ff:d1:84:2f:0c:ca:f5:8b:
         e6:dd:b2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:18:51 2025 by rpki-client