Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
File:                     7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft (raw, json)
Hash identifier:          5Z6HcYM2Ts3B1txOvZrsqIjIJoou7CTgPFd5Trgg/m0=
Subject key identifier:   DA:7C:41:90:E5:67:4F:A0:1D:9A:F3:5D:D9:0B:5B:6F:A5:52:AA:AB
Authority key identifier: ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8
Certificate issuer:       /CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
Certificate serial:       01988167715A7E07F74E0E2C717AE5B241C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
Manifest number:          02BD
Signing time:             Wed 06 Aug 2025 22:01:36 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:36 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:36 +0000
Files and hashes:         1: 7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl (hash: p5K/+CCLOdd5A3pd4TIerFt0bI/Mfb48ZBLM3vTAz1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:71:5a:7e:07:f7:4e:0e:2c:71:7a:e5:b2:41:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1b6adc99497fd1b30a0a482edc402b0c4f0cf8
        Validity
            Not Before: Aug  6 22:01:36 2025 GMT
            Not After : Aug  7 22:01:36 2025 GMT
        Subject: CN=da7c4190e5674fa01d9af35dd90b5b6fa552aaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:b3:e7:21:8f:b5:e3:c1:f2:5f:02:6e:07:
                    3f:99:2d:2e:fc:d6:7a:85:f1:cf:dd:07:c0:c2:d0:
                    da:51:45:f2:f9:0b:e1:be:79:d7:5c:17:9a:b3:67:
                    4c:43:01:2b:d3:8c:b4:b3:69:7c:25:ca:93:60:1e:
                    8d:68:54:ad:d2:5c:55:d4:dc:db:03:1e:38:61:1d:
                    58:91:7c:69:46:7c:b0:ec:f1:b2:0f:14:29:6a:12:
                    c5:6e:be:7e:4c:3f:b4:eb:d9:7e:15:8f:ad:e1:c8:
                    d2:bd:6c:23:a4:51:01:eb:89:46:ec:46:fc:f3:f8:
                    95:e4:15:6d:0c:4e:46:1f:2a:8a:41:c9:ec:59:bb:
                    05:32:e1:b3:43:f7:16:d9:d3:70:a0:99:b5:c2:99:
                    f5:2e:b6:c0:f3:5e:48:8c:ce:7a:2a:20:39:0b:5c:
                    b6:df:0e:4d:00:a5:f7:35:3d:61:9b:81:19:bb:c1:
                    cc:b2:b2:a8:4f:19:52:56:f0:d1:a3:a2:19:53:a7:
                    6f:22:59:0e:5d:f4:43:dc:16:1b:0c:0d:f2:30:76:
                    18:ec:99:b5:83:3a:db:e8:59:73:16:e2:5b:38:b7:
                    70:74:0e:ab:cb:12:78:70:d9:14:82:0d:f5:3f:db:
                    f2:e0:a5:e5:b9:75:fa:58:44:50:99:b7:13:c7:5c:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:41:90:E5:67:4F:A0:1D:9A:F3:5D:D9:0B:5B:6F:A5:52:AA:AB
            X509v3 Authority Key Identifier:
                keyid:ED:1B:6A:DC:99:49:7F:D1:B3:0A:0A:48:2E:DC:40:2B:0C:4F:0C:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rtq3JlJf9GzCgpILtxAKwxPDPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4692c3-a90d-41b8-aae8-2c96fb85557a/1/7Rtq3JlJf9GzCgpILtxAKwxPDPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:5d:f4:76:29:de:29:cd:ff:50:40:24:e0:c5:d4:9f:40:
         0c:5d:bb:6a:5d:81:21:dd:10:07:2f:cf:77:cf:c9:73:b3:cf:
         93:7d:7a:e6:ed:b3:5a:77:0c:69:8c:76:4e:79:06:f7:c9:d2:
         76:3b:ff:56:f4:e5:18:03:1c:8f:b8:2a:3c:ca:a0:de:3c:37:
         f2:b6:66:0d:d6:7f:19:be:93:fa:d5:d2:b0:a1:fb:dc:c3:d9:
         a2:ce:db:58:ec:80:23:91:d6:c5:b7:c0:ab:dd:7b:e7:96:2b:
         42:b5:5f:d1:96:f7:d5:ce:34:6b:7f:16:d2:d2:99:87:42:4d:
         9b:7e:e6:46:c1:92:7e:e8:05:a7:33:d4:47:dd:a5:78:23:80:
         d4:2c:7b:7c:70:89:ce:a2:dc:88:ad:5c:39:07:4b:fb:97:fd:
         19:d8:15:a5:b8:33:62:8e:c0:4d:e3:10:0c:58:81:08:d5:f2:
         95:d2:01:8b:d3:04:e2:35:e0:5c:be:c9:e4:dc:05:6f:59:33:
         b3:d2:e6:97:03:4c:d4:57:7c:45:1d:71:5a:c8:9f:c6:1a:35:
         1d:87:a9:35:99:ce:cd:54:cb:0c:a7:47:ab:92:bf:f7:bd:aa:
         b0:87:e2:10:f7:18:a6:ed:9d:78:b5:e9:57:29:40:5c:29:81:
         d2:8e:8d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:03:54 2025 by rpki-client