Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
File:                     PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft (raw, json)
Hash identifier:          2I8JpMHlFP0dL02HQq5+5Pq+snFimEi3MdZMEiuynGY=
Subject key identifier:   90:F7:47:F6:15:5B:31:55:CE:9B:4A:C9:A2:A3:E5:79:F0:6B:4E:81
Authority key identifier: 3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7
Certificate issuer:       /CN=3d3ed8a62ee859bce68d4016319e082a204845a7
Certificate serial:       0198820BF112768CBF1CF56C6F54D1C93B8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
Manifest number:          E7
Signing time:             Thu 07 Aug 2025 01:01:17 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:17 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:17 +0000
Files and hashes:         1: H1o_SCjiFLHrkWrzG2YBUqyvibU.roa (hash: wUnzCOO08Zj5zj+Xms5OeZCPttJSOF6uH3iX57ElDhc=)
                          2: PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl (hash: ShjXIlS3M0CI5Rguwc3nXYYEdNwARtYK+rG/eIZhsQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:f1:12:76:8c:bf:1c:f5:6c:6f:54:d1:c9:3b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3ed8a62ee859bce68d4016319e082a204845a7
        Validity
            Not Before: Aug  7 01:01:17 2025 GMT
            Not After : Aug  8 01:01:17 2025 GMT
        Subject: CN=90f747f6155b3155ce9b4ac9a2a3e579f06b4e81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:d0:bd:9a:23:9c:19:34:37:ba:c7:86:1e:
                    db:2e:c8:65:41:41:8b:50:d3:9e:ba:d8:18:02:e9:
                    59:61:a2:b5:0b:d8:29:4c:0f:1f:bb:d1:4f:6e:81:
                    63:6f:69:0a:c7:3f:af:67:05:e8:16:b7:b4:ca:d8:
                    ab:cd:41:1d:a9:69:04:32:9d:67:c6:6e:9a:77:7d:
                    9a:91:63:25:9d:47:3f:ff:eb:47:1f:e8:be:e9:18:
                    ec:65:b0:9b:70:81:1e:6c:d5:10:b6:c5:35:e1:ff:
                    00:4a:8c:93:7e:84:f7:ea:e3:9c:83:f9:72:59:d8:
                    15:ee:13:d0:98:b5:5d:62:f9:03:1b:66:87:27:3e:
                    cb:c5:fc:74:6d:c5:49:f0:94:2d:fc:0c:fb:8c:48:
                    48:ed:f9:c3:72:91:02:c5:94:20:85:dc:c6:13:04:
                    09:f5:da:0e:de:0d:95:e6:ef:09:87:c8:4a:3b:f3:
                    0b:8a:d4:c7:9a:18:55:26:6d:db:8d:24:b7:1a:97:
                    44:0c:a6:c1:62:4a:13:a8:d9:9a:62:50:26:3f:07:
                    d8:1b:fa:45:27:af:c4:94:10:ea:5a:9a:6f:5b:95:
                    e9:c9:2b:6d:25:6c:b5:ee:db:92:28:c4:8d:da:55:
                    13:b8:a1:c6:81:df:bb:5c:50:6e:05:4c:61:3a:19:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F7:47:F6:15:5B:31:55:CE:9B:4A:C9:A2:A3:E5:79:F0:6B:4E:81
            X509v3 Authority Key Identifier:
                keyid:3D:3E:D8:A6:2E:E8:59:BC:E6:8D:40:16:31:9E:08:2A:20:48:45:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6a2919-e1cb-4e64-bf5d-68e1b173511e/1/PT7Ypi7oWbzmjUAWMZ4IKiBIRac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c6:0d:19:a6:5e:d7:26:80:d4:0e:b1:bb:c7:0c:2d:5d:7d:
         3a:d9:57:1d:e2:23:92:13:47:91:80:94:50:38:ea:4a:26:86:
         7c:6c:9e:f6:b9:f6:85:8c:fb:ac:98:25:9b:0d:bb:58:f5:f9:
         85:7c:6c:8c:ff:58:0a:e6:60:cd:ac:88:92:ec:4d:57:21:93:
         b9:3e:6d:6c:2c:de:76:97:de:db:24:ba:c8:9b:89:5e:54:c1:
         d8:56:fb:77:02:9d:cd:54:91:c4:8f:5e:56:1f:e5:5b:78:50:
         14:ea:1e:b0:83:06:c8:d0:b7:c6:35:81:9f:74:9c:b1:cf:f7:
         f0:bb:3f:78:38:0a:c6:58:2d:ce:23:93:25:9f:d8:f5:e0:a0:
         e8:ea:58:03:a2:86:d3:78:e0:1c:a8:87:e9:29:4d:f5:38:37:
         96:ae:fa:c8:16:a1:ed:9d:fb:f7:47:b5:5e:d5:6f:f8:a4:36:
         6d:69:c1:71:7e:4e:6a:65:ed:eb:c7:e6:bf:65:e6:1f:71:ae:
         17:4a:d6:82:fe:db:e4:13:e1:d4:6b:8e:9e:49:e6:4d:bd:16:
         17:cd:7f:6a:83:b1:53:30:39:0c:7c:7a:42:33:e5:5e:36:10:
         a8:60:99:ba:70:7a:a0:5e:a0:ea:9b:3e:d8:9c:0a:bc:99:5d:
         95:aa:71:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:17:22 2025 by rpki-client