Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File:                     R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier:          uARVT7BW2TmPTVRQrUWW4/M+YqmzjumrxMFEaT5KnXs=
Subject key identifier:   5A:48:A4:15:33:AD:26:2C:C2:EB:4F:DF:60:A5:7F:E5:03:2A:A8:C8
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer:       /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial:       019927B2DEAEFCFECBBC56299C945D7D58F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number:          0611
Signing time:             Mon 08 Sep 2025 05:00:57 +0000
Manifest this update:     Mon 08 Sep 2025 05:00:57 +0000
Manifest next update:     Tue 09 Sep 2025 05:00:57 +0000
Files and hashes:         1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: RYtGmbBOFKb33dZPVb+mVpBABRCvK7YV3catnmIVuoY=)
                          2: b0DuHL5Cx5oz0wmVPh9cLl0pYOs.roa (hash: 0vfXcmcuR2v9A+x1r5OGZhYbvc69ht+h4cnEKv+PZSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:27:b2:de:ae:fc:fe:cb:bc:56:29:9c:94:5d:7d:58:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
        Validity
            Not Before: Sep  8 05:00:57 2025 GMT
            Not After : Sep  9 05:00:57 2025 GMT
        Subject: CN=5a48a41533ad262cc2eb4fdf60a57fe5032aa8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:29:2f:dc:19:21:7c:3b:ab:93:f1:92:6f:65:
                    04:90:b9:62:91:6d:d1:30:73:2c:3b:4e:b5:83:73:
                    d4:e4:9d:48:89:a9:48:7e:46:5d:d6:c7:0a:4a:bd:
                    e1:c6:cd:48:2b:60:f9:a3:d4:22:e1:b9:17:de:1c:
                    b0:8b:e1:dc:c8:bd:31:0c:28:7b:2d:a2:7a:0b:88:
                    44:95:73:56:b7:58:89:6d:aa:c7:c7:3d:67:d1:e7:
                    70:5f:ea:bb:d6:f5:ff:03:cb:94:0f:d7:da:cb:46:
                    06:cd:b4:79:d7:fc:e0:3b:2c:c3:74:45:31:a3:6e:
                    79:35:6a:8f:71:06:05:5c:26:d0:e3:12:43:99:80:
                    f8:a7:c8:01:0e:2a:1a:25:ca:f2:7e:d0:b8:f9:ad:
                    80:1b:2e:c8:64:ef:fe:ba:cc:6e:ac:26:ac:32:61:
                    10:94:8b:9f:9f:65:27:d6:55:54:5c:cc:f7:21:ef:
                    a0:c4:61:38:a5:49:60:72:88:10:b5:42:b1:2e:37:
                    b6:2b:50:fb:e5:bd:77:b7:e2:ee:85:f8:fd:da:27:
                    1b:d0:87:38:20:b7:a4:46:e6:2c:14:e8:e0:8a:b3:
                    84:f4:99:41:fe:96:ab:4d:12:d6:51:0d:45:d9:f7:
                    88:37:2a:bf:c5:dd:56:89:17:19:90:91:3e:5d:1d:
                    32:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:48:A4:15:33:AD:26:2C:C2:EB:4F:DF:60:A5:7F:E5:03:2A:A8:C8
            X509v3 Authority Key Identifier:
                keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:e6:ea:2f:53:10:da:96:a0:3c:9f:d1:e5:37:15:9b:d3:
         d3:04:0e:5e:4e:68:0c:83:4e:2d:07:3e:15:5c:40:15:0a:69:
         f7:63:41:ce:78:2a:3f:fd:b8:33:86:9a:74:d0:c4:9e:bc:b3:
         44:6f:ac:f3:76:26:93:6a:2c:40:f8:e4:b7:d5:46:9f:cb:67:
         fc:d3:ba:37:bc:5f:e8:96:69:1a:63:46:a4:8d:ce:f2:61:32:
         f9:f6:ac:ad:eb:3c:a5:bc:57:8b:82:49:07:ee:72:4c:d5:36:
         e9:e3:94:ab:1c:64:05:a5:a5:f4:35:47:1c:a6:4b:fa:22:1b:
         28:18:37:5f:36:d9:78:8e:ff:d7:ec:96:91:01:33:ea:c1:c7:
         51:7d:6a:06:a8:37:de:15:da:09:76:b1:3e:bd:3b:56:41:22:
         a6:ff:7b:0f:49:a4:d3:f4:6d:1e:a2:f8:f0:46:6d:34:d9:74:
         89:5c:7c:4e:37:36:dd:29:ab:ae:39:d7:4e:3c:01:a0:a9:b3:
         d1:34:29:ad:bd:b1:05:5e:68:db:a5:38:4d:ba:36:c3:b5:62:
         c4:3c:fb:15:2e:ea:6f:3f:c2:e0:34:46:5c:e2:d7:82:73:b8:
         10:6c:e3:f6:9b:51:4a:80:bc:46:aa:b2:17:f8:1e:46:e8:94:
         98:69:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:31 2025 by rpki-client