Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          lzAg4Jcro7J0Z8Faa784XOfMMg4i/eT3NrLBQ7c2zqQ=
Subject key identifier:   FD:40:0E:1C:6D:71:A1:5D:06:B4:72:AD:6E:0E:B4:17:10:A1:2A:71
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       0198820C0CC48C24DC1EC00755B3A3D26E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          161F
Signing time:             Thu 07 Aug 2025 01:01:24 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:24 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:24 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: JpQ2NDXM1sw721rYFS5AS9flzjH4jIgsMGArcfYrRf4=)
                          2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:0c:c4:8c:24:dc:1e:c0:07:55:b3:a3:d2:6e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Aug  7 01:01:24 2025 GMT
            Not After : Aug  8 01:01:24 2025 GMT
        Subject: CN=fd400e1c6d71a15d06b472ad6e0eb41710a12a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:c6:d2:13:62:d6:f2:18:73:82:0d:23:e3:
                    2e:3b:f6:2b:67:b0:6d:63:fd:ad:5a:12:80:6c:f4:
                    89:05:11:11:c5:00:39:61:9b:31:6f:c6:3f:6e:81:
                    ed:b3:84:20:90:5e:3c:d7:28:95:03:bb:07:6a:f1:
                    c7:40:82:2f:b8:83:29:5f:46:34:bf:07:00:fa:e0:
                    93:d6:8c:a2:4e:6a:e4:94:3f:bb:f6:dd:59:0b:2b:
                    d6:82:23:23:9a:ba:19:99:a1:22:eb:29:73:b2:f9:
                    24:c7:c2:73:81:f5:e6:3c:73:e5:2d:19:04:5b:c3:
                    bf:52:09:ca:d8:bf:fa:28:93:86:be:98:9f:eb:cc:
                    7e:65:db:1a:4a:12:1e:32:5f:86:f2:b4:36:9f:f7:
                    59:dd:36:86:ff:22:f5:38:75:f0:ab:21:6d:08:71:
                    4d:4b:c0:5d:20:9c:13:a5:4a:2c:f3:92:fe:4e:05:
                    56:0a:d8:d9:45:95:24:16:93:03:c8:ac:e2:1d:38:
                    ba:78:9b:c7:fe:5e:7a:f8:b5:4d:13:2a:4d:e3:a3:
                    81:08:05:3b:ab:97:ae:ad:4f:d6:3d:8d:f5:0f:09:
                    a6:3b:b2:6b:6d:b9:e2:6a:a4:45:63:12:01:fc:1f:
                    45:ae:aa:7b:67:73:70:68:5f:05:75:ea:7d:d6:ab:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:40:0E:1C:6D:71:A1:5D:06:B4:72:AD:6E:0E:B4:17:10:A1:2A:71
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:67:b0:be:79:4e:df:83:18:22:4d:34:a1:5c:3b:0c:56:06:
         44:a1:dc:e8:97:c6:72:48:37:f1:c1:cf:94:27:99:9c:73:fe:
         f0:8d:ad:45:f7:3a:9a:65:ec:ce:cf:46:72:e4:9e:59:96:1a:
         a1:0b:c1:cc:1d:cf:a8:cb:63:4d:98:92:b3:98:bb:ff:23:e7:
         c8:df:c1:b7:71:0c:e9:8b:5b:f0:b7:03:c1:08:05:31:b9:37:
         7e:7b:b3:a6:02:97:f1:a7:9b:fe:6f:d2:c5:fc:a3:71:a1:6f:
         88:7a:36:9c:b9:6f:78:12:d2:d9:a5:c6:16:29:38:c6:83:95:
         e1:64:51:82:f8:21:11:04:e3:81:1c:9b:22:36:7f:77:c7:24:
         c3:dd:db:21:af:62:73:8b:b2:0c:66:90:d0:a1:fb:f3:98:f9:
         c9:de:64:f8:b8:7b:02:8f:b3:42:42:74:3d:52:b5:7b:94:03:
         a9:a0:11:8a:67:a2:e6:37:72:66:54:88:04:a1:65:4b:43:15:
         7f:f3:f7:ad:ce:77:3f:ba:df:2a:da:fd:d5:d9:86:c8:76:57:
         55:0e:94:33:dc:d5:b8:f6:e3:25:bd:ea:75:c2:1d:3f:ed:49:
         9c:f5:cd:89:98:af:12:15:3e:e4:b7:8e:5c:1c:d6:67:82:2a:
         f7:6c:28:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:16:33 2025 by rpki-client