Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          l2BFd/BCSvL90IFvzQdHQ+2fjotv0COzMbQHUeeBL9Y=
Subject key identifier:   6D:3C:5C:12:0D:30:8E:87:72:11:27:E8:33:FB:E6:A1:47:10:C6:36
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       01987C093D73E08BDD05E968FA1606DB6895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0AFA
Signing time:             Tue 05 Aug 2025 21:00:37 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:37 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:37 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: K6k6oY1LAkGZoWCqUUwTNwMiKIEuihbU62t7uMnUOE0=)
                          2: mv1MwE4getpiKJwrF8tobr9rXrs.roa (hash: QIccUqQB+Qm12TRlwd2LKOXzcj0t1dKqrfMEgV4h7VQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:3d:73:e0:8b:dd:05:e9:68:fa:16:06:db:68:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Aug  5 21:00:37 2025 GMT
            Not After : Aug  6 21:00:37 2025 GMT
        Subject: CN=6d3c5c120d308e87721127e833fbe6a14710c636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:ca:d0:29:cf:c2:df:07:84:b9:24:28:d0:
                    23:be:c4:1a:54:08:ce:f4:51:91:c2:78:a5:41:c7:
                    fa:e4:b3:4e:8a:f2:0b:87:e0:97:91:34:b2:b1:d3:
                    fc:1e:d2:25:01:d1:5e:10:4e:af:39:59:69:71:7b:
                    c2:c7:aa:4d:cf:0c:30:a6:fc:70:47:cf:59:dd:b8:
                    cd:0c:00:94:51:26:f0:92:ef:33:fb:da:45:b4:70:
                    8b:b4:48:11:b9:d8:55:e5:28:43:42:5a:14:2c:ab:
                    8b:84:d3:88:1e:30:ef:19:30:c0:ea:6d:ef:4a:58:
                    df:95:61:ff:4c:f9:01:db:27:ae:c6:23:96:3a:1d:
                    e5:07:29:d3:b3:5b:f8:30:0e:71:8a:f9:1e:a0:d1:
                    79:36:f8:f1:18:a7:62:6f:56:ab:be:76:d2:8f:82:
                    b8:e9:8c:22:97:f9:73:d1:38:52:84:bd:c4:6f:82:
                    6b:da:63:c8:9a:bf:84:b6:be:4b:2b:02:f0:ec:4e:
                    3a:59:d8:89:bf:ee:62:1d:bf:be:45:ac:e1:8e:72:
                    70:1c:c9:8a:39:e3:d2:a9:18:04:fe:9d:37:86:ac:
                    8a:76:4e:5d:4c:76:95:bf:0e:23:63:3d:92:e6:4f:
                    a3:48:5f:47:91:45:fb:50:80:db:cd:0b:7c:11:77:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3C:5C:12:0D:30:8E:87:72:11:27:E8:33:FB:E6:A1:47:10:C6:36
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:80:f7:59:88:d3:46:06:13:32:38:72:24:18:90:0f:85:fc:
         e4:75:be:45:cb:64:6a:98:b2:c8:0a:04:b7:d3:03:e0:3e:9e:
         07:a7:e4:4c:5e:28:52:70:91:be:33:a6:62:2a:50:04:00:6c:
         29:14:9b:e0:07:0b:43:2b:5e:44:fc:f5:12:d0:ea:7d:5d:28:
         0b:5d:a2:cd:4b:9b:a0:86:67:fe:81:47:97:e2:ee:d3:cc:7f:
         e6:15:0e:69:2d:ef:6b:7c:16:fc:d2:ba:c7:8a:95:93:3a:b3:
         ef:c3:d5:f1:b2:b0:1e:94:53:ba:59:ca:c1:00:e2:62:46:d1:
         cf:34:50:d6:61:33:60:2e:45:a6:d3:29:3a:fe:0a:6c:21:af:
         61:a7:9a:21:84:a3:59:52:d9:8b:3e:10:7c:16:f3:eb:ec:ca:
         ba:ce:8d:d9:0c:71:05:56:b1:d0:0e:35:e1:fc:3b:29:40:06:
         34:11:6f:5c:a9:79:58:ba:67:00:16:60:ac:2f:cb:79:13:80:
         9f:8e:6f:05:ac:e7:05:8e:d8:c6:76:51:cd:a5:b3:9e:3c:17:
         28:36:16:b1:99:19:20:6d:42:05:f9:35:67:c2:c7:4b:ee:aa:
         5c:fe:4f:f6:be:b4:ba:f0:85:59:e7:1f:65:c2:18:5e:b0:76:
         06:97:cf:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:18:33 2025 by rpki-client