Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
File:                     _Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft (raw, json)
Hash identifier:          W607LQE0mK1Ju6FT1msAf+VVI3assu8UGXVt0+mjfUY=
Subject key identifier:   2C:7D:A2:C7:5F:6C:9A:BF:5C:88:51:0E:D9:81:F1:92:15:30:CD:9E
Authority key identifier: FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35
Certificate issuer:       /CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
Certificate serial:       0199240D131DE78BDF1002C1C97DFC594FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 12:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 12:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 12:01:00 +0000
Files and hashes:         1: _Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl (hash: Yw6klAU2X2m+5f9nTVCSqaU2P363VYF0FpD6TI9T5J4=)
                          2: gj7G_bFbDmDYpYp6GKUqBVaPkf0.roa (hash: 636LllEYf1p/aMnvVspv63btZ6guwyZEmYUh7DiMd9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:13:1d:e7:8b:df:10:02:c1:c9:7d:fc:59:4f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7cfab24f15cd262176af0d1ccd88127dbf6335
        Validity
            Not Before: Sep  7 12:01:00 2025 GMT
            Not After : Sep  8 12:01:00 2025 GMT
        Subject: CN=2c7da2c75f6c9abf5c88510ed981f1921530cd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:df:a4:2c:1d:18:34:2a:0d:6b:d9:d8:2c:
                    04:26:23:55:2d:cb:54:5d:e6:d3:6d:bc:50:83:dc:
                    81:e2:46:36:78:cc:e5:d6:7a:db:7a:52:86:83:d5:
                    c6:ba:db:1a:b9:e4:3e:13:49:ba:8f:f5:0d:ee:a8:
                    d1:aa:5a:20:5d:88:3b:ee:ab:a6:d7:f1:86:6a:9a:
                    b6:ca:4f:4d:9a:9c:c1:33:32:9c:f2:16:98:84:b2:
                    c2:6d:a0:53:df:3e:cb:c4:9f:b9:b5:99:3a:57:92:
                    fc:71:5e:bc:47:d2:73:e9:c2:fd:e9:c2:00:6b:cb:
                    e5:ad:b7:b8:b1:70:7d:d5:9d:06:ac:4a:56:a8:76:
                    1a:f4:08:f4:b3:ba:4b:63:ad:c3:02:68:45:4c:c4:
                    01:ed:d2:f6:a2:be:41:4b:de:8e:38:48:32:ed:0b:
                    d2:b4:b2:d6:ff:05:4e:a1:07:a6:95:5f:2f:33:24:
                    b9:9f:78:ad:46:0a:c2:93:71:f4:03:a6:c0:51:84:
                    8e:9d:90:dd:e9:91:37:98:9c:85:d0:e0:36:c2:5a:
                    bc:6f:e8:75:75:7a:49:b6:7b:55:1e:24:f2:7f:cc:
                    70:ed:dd:bd:ec:ec:63:ec:00:56:cb:84:73:c3:39:
                    8b:c0:fd:23:d7:2e:4b:1d:ec:f3:13:05:91:75:a9:
                    3b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:A2:C7:5F:6C:9A:BF:5C:88:51:0E:D9:81:F1:92:15:30:CD:9E
            X509v3 Authority Key Identifier:
                keyid:FC:7C:FA:B2:4F:15:CD:26:21:76:AF:0D:1C:CD:88:12:7D:BF:63:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af2adb-ff69-4b04-a806-46dd1205dcff/1/_Hz6sk8VzSYhdq8NHM2IEn2_YzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:22:06:ae:3d:ae:fb:07:f2:e8:b0:0c:27:c4:4e:9b:5d:6e:
         de:34:cd:28:03:16:cb:6e:2b:65:ab:ea:e9:09:db:eb:95:52:
         cb:52:4f:7f:31:d6:f9:ad:29:c4:f0:fc:7a:84:fe:15:4f:cc:
         e5:04:eb:41:ab:4b:bd:d0:39:69:c8:42:f3:81:20:aa:58:f4:
         ac:aa:01:e8:fd:03:c5:27:41:82:12:95:d2:b1:96:e1:af:0f:
         6e:6a:14:0d:2a:d6:b4:9c:a4:ec:61:41:d9:22:c9:58:24:05:
         4d:f2:86:18:84:c9:27:4b:2c:c1:cc:84:bd:28:15:12:37:72:
         c9:0d:1e:69:c9:3a:9a:ad:e6:b6:8c:c3:cd:d2:46:de:15:fb:
         02:d7:a7:36:22:4a:38:a4:6c:7e:83:34:86:cc:be:7b:06:b3:
         4d:db:ab:35:a5:7d:8e:4b:e0:ca:c0:85:97:36:98:e2:9c:5d:
         39:3e:d6:22:67:89:fa:f6:39:2c:75:61:ba:30:e5:e4:eb:fb:
         9b:e7:a7:16:94:f8:68:f7:02:56:5b:45:e6:99:a8:b6:81:76:
         6f:68:a1:8d:37:95:af:39:49:2b:8a:d4:a5:8a:42:69:eb:a2:
         5f:fd:a9:f5:f9:ae:a3:18:6b:03:3f:6f:41:9c:c5:85:78:75:
         e3:a6:c1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:59:16 2025 by rpki-client