Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          0KZ+Pqd/LsHkPXb/Y07e2hBLQaEj7fQ6S5xhxGN28q0=
Subject key identifier:   F2:08:48:D0:9D:71:F0:98:B1:1B:CD:88:F0:B9:17:0F:3E:7F:2E:9D
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       01989E5FF3E9C4D23370558DCC653685A58A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          0772
Signing time:             Tue 12 Aug 2025 13:02:25 +0000
Manifest this update:     Tue 12 Aug 2025 13:02:25 +0000
Manifest next update:     Wed 13 Aug 2025 13:02:25 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: C1USX4vA+Pnon0iB0cUikyMuK783FFUiIHDpIkdPkc4=)
                          2: kF-CXYhPs4TYflqMBcCGyzwLA7o.roa (hash: gnSWn3nUIqjsFFoH6d5rK0RwdbfhLh+8DTBzXarX5Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:5f:f3:e9:c4:d2:33:70:55:8d:cc:65:36:85:a5:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Aug 12 13:02:25 2025 GMT
            Not After : Aug 13 13:02:25 2025 GMT
        Subject: CN=f20848d09d71f098b11bcd88f0b9170f3e7f2e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:51:a9:c8:41:4f:6b:4e:a5:3b:27:9e:91:
                    c3:a4:30:93:ee:4e:71:66:9a:b2:b1:6c:a8:6e:49:
                    d0:e6:27:07:8f:a7:41:94:27:e5:61:36:97:d0:30:
                    33:46:7d:5c:12:09:7d:2f:7e:f9:52:79:18:9c:4f:
                    d2:6e:c4:69:6b:b7:10:e0:74:96:c1:73:25:e5:41:
                    b8:3a:0f:59:cb:ca:4b:57:37:a7:7f:da:a6:d2:07:
                    99:f9:84:a6:32:9b:53:e8:f9:5a:47:2a:cc:30:04:
                    4a:49:8c:bd:b9:7a:f2:ae:38:6a:41:d0:94:2d:d7:
                    d0:32:00:3a:be:dd:ca:6c:fa:39:b1:3a:f3:11:a3:
                    18:7a:9a:9e:88:3e:20:0a:3d:94:1c:0e:fb:c5:c6:
                    29:a2:3a:57:5e:53:88:8a:e8:f9:34:db:8a:77:19:
                    f4:d3:e3:af:db:6b:0f:16:24:01:9d:c2:03:f6:87:
                    b4:71:61:18:83:52:b5:8e:88:d2:0d:62:c6:c6:07:
                    3e:6f:e9:1b:1e:90:62:42:ac:3c:08:8f:6d:4c:e4:
                    60:ff:34:12:9e:1c:ec:5b:ce:3f:a6:c0:4d:86:2a:
                    05:ae:7a:4a:bd:af:dd:a2:ab:2d:a5:06:18:86:18:
                    ce:7e:12:f2:3e:0f:d3:01:ef:ca:98:97:72:cf:8b:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:08:48:D0:9D:71:F0:98:B1:1B:CD:88:F0:B9:17:0F:3E:7F:2E:9D
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:57:55:d8:1e:ff:5a:2d:7f:39:36:c3:3f:31:2b:04:f6:52:
         22:71:4b:af:8f:67:b5:d0:3d:c0:5f:59:5c:4c:3a:34:5b:b1:
         8d:76:ed:10:eb:28:b3:7f:9a:e3:61:bc:af:dc:3d:0f:24:f1:
         a0:b5:2a:41:27:5d:44:df:96:f2:12:cf:cf:73:0c:10:01:1d:
         0a:d2:c2:96:3b:05:61:09:26:bb:63:df:d7:ae:fe:68:21:b1:
         5b:d3:a6:75:66:ab:22:70:01:16:ef:6d:32:27:2a:05:30:1f:
         fe:d2:b9:6d:99:f4:6e:8f:5d:10:07:e8:b0:ce:57:aa:47:76:
         f3:21:38:83:45:a8:4f:2f:1a:1e:91:36:4a:a7:b7:7f:9b:f7:
         09:a0:09:42:43:63:59:97:e4:66:f4:f0:43:9b:5c:42:59:0c:
         bd:01:2d:63:c5:41:25:b2:8c:0d:f5:09:d1:81:46:2a:f3:39:
         c5:bc:4f:1c:4f:77:2d:08:29:41:6e:9a:60:c1:2b:e3:6b:8d:
         01:0e:78:4d:ca:64:d9:48:99:ce:62:7f:9e:1b:ef:b7:92:5d:
         a2:37:bb:e8:d5:df:40:f2:f7:38:9d:3a:e7:b5:be:d5:21:4a:
         87:d7:c6:40:1c:ee:33:52:bd:d3:97:de:f0:08:ab:46:b9:34:
         57:51:cb:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZieX/PpxNIzcFWNzGU2haWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZWI0NDI0YWJkODZkNmVmNDhkYjllNzY0NmY1MzljNmQx
MGM4ODYwHhcNMjUwODEyMTMwMjI1WhcNMjUwODEzMTMwMjI1WjAzMTEwLwYDVQQD
EyhmMjA4NDhkMDlkNzFmMDk4YjExYmNkODhmMGI5MTcwZjNlN2YyZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSZRqchBT2tOpTsnnpHDpDCT7k5x
ZpqysWyobknQ5icHj6dBlCflYTaX0DAzRn1cEgl9L375UnkYnE/SbsRpa7cQ4HSW
wXMl5UG4Og9Zy8pLVzenf9qm0geZ+YSmMptT6PlaRyrMMARKSYy9uXryrjhqQdCU
LdfQMgA6vt3KbPo5sTrzEaMYepqeiD4gCj2UHA77xcYpojpXXlOIiuj5NNuKdxn0
0+Ov22sPFiQBncID9oe0cWEYg1K1jojSDWLGxgc+b+kbHpBiQqw8CI9tTORg/zQS
nhzsW84/psBNhioFrnpKva/doqstpQYYhhjOfhLyPg/TAe/KmJdyz4ucBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIISNCdcfCYsRvNiPC5Fw8+fy6dMB8GA1UdIwQY
MBaAFO3rRCSr2G1u9I2552RvU5xtEMiGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjkt
MTZkM2EwZWE0OWFlLzEvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi81MWIzMWEtN2U1MC00YTFlLTlmNjktMTZkM2EwZWE0OWFl
LzEvN2V0RUpLdlliVzcwamJublpHOVRuRzBReUlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1dV2B7/
Wi1/OTbDPzErBPZSInFLr49ntdA9wF9ZXEw6NFuxjXbtEOsos3+a42G8r9w9DyTx
oLUqQSddRN+W8hLPz3MMEAEdCtLCljsFYQkmu2Pf167+aCGxW9OmdWarInABFu9t
MicqBTAf/tK5bZn0bo9dEAfosM5Xqkd28yE4g0WoTy8aHpE2Sqe3f5v3CaAJQkNj
WZfkZvTwQ5tcQlkMvQEtY8VBJbKMDfUJ0YFGKvM5xbxPHE93LQgpQW6aYMEr42uN
AQ54Tcpk2UiZzmJ/nhvvt5Jdoje76NXfQPL3OJ0657W+1SFKh9fGQBzuM1K905fe
8AirRrk0V1HLpQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:54:03 2025 by rpki-client