Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File:                     7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier:          ODn4lViwfODVJ56ZemMsvZlaEDcJkESRV2+wke/gJgs=
Subject key identifier:   5D:BD:40:77:35:26:10:40:FC:73:2F:79:5F:01:AB:D5:E6:7C:8D:C7
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer:       /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial:       01988544581D83DA26E421459A1C99BEF6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number:          0F3E
Signing time:             Thu 07 Aug 2025 16:01:45 +0000
Manifest this update:     Thu 07 Aug 2025 16:01:45 +0000
Manifest next update:     Fri 08 Aug 2025 16:01:45 +0000
Files and hashes:         1: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (hash: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=)
                          2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: xKkvDgZcyvy0pM9d/Je6yE63gZ6Q0xRC5Qj0tfIf8qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:44:58:1d:83:da:26:e4:21:45:9a:1c:99:be:f6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
        Validity
            Not Before: Aug  7 16:01:45 2025 GMT
            Not After : Aug  8 16:01:45 2025 GMT
        Subject: CN=5dbd407735261040fc732f795f01abd5e67c8dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:03:d2:db:b2:ac:31:d3:f5:38:cf:ec:1a:
                    c9:c0:e8:39:e9:55:a0:68:d8:a8:f3:fb:98:5e:21:
                    8c:39:19:60:9e:df:e4:ba:cc:22:72:50:92:61:8e:
                    41:7f:1e:60:a8:88:ea:57:01:25:d2:37:5f:02:1e:
                    a8:b8:0a:c5:6b:3c:10:6c:28:4a:de:e0:bf:2c:c0:
                    2f:43:38:aa:10:d1:da:a1:e3:ef:82:b1:bc:72:5f:
                    ca:02:c2:f7:8e:70:10:0b:01:8f:ed:6b:dd:8a:36:
                    43:30:90:27:ff:67:91:1f:d0:f9:a3:c9:ef:d7:be:
                    77:e4:06:de:97:80:ee:44:fc:70:54:d7:64:1f:b7:
                    c4:88:e5:83:92:34:07:2d:80:73:5a:1e:b4:e2:c8:
                    57:74:32:33:ef:98:1b:90:0f:10:dc:83:81:f5:aa:
                    56:d8:ad:eb:d9:0b:ab:8f:a8:35:f8:59:34:30:30:
                    ec:4a:96:16:1f:a1:96:40:44:e7:a5:be:ad:1e:b3:
                    78:4f:f8:e4:a6:81:97:84:ef:87:47:df:81:db:42:
                    4b:7f:43:cf:cb:bb:ab:19:4d:a6:61:ff:54:7f:a4:
                    8e:c4:a5:e1:dc:90:68:53:97:be:60:17:f3:8e:91:
                    c9:e7:52:ed:0e:30:31:c7:0e:7a:8f:85:f2:8f:39:
                    72:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:BD:40:77:35:26:10:40:FC:73:2F:79:5F:01:AB:D5:E6:7C:8D:C7
            X509v3 Authority Key Identifier:
                keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ea:f6:49:26:7d:c4:fd:fd:d8:70:e2:6a:a0:d5:94:31:2e:
         ee:45:64:de:e5:19:18:fb:28:d4:22:db:a9:c0:10:d5:72:5b:
         9a:9b:bf:45:fd:00:ce:79:0c:28:dd:db:33:4d:e3:f8:61:1f:
         5c:73:82:0e:c1:8e:dd:c6:a2:76:de:79:79:36:b0:f6:bb:cc:
         9b:7b:ab:0e:71:8a:86:d4:ac:75:45:01:f8:96:72:f7:f8:8e:
         ce:4a:d7:15:52:e4:b0:ed:14:76:8f:d5:99:86:3c:46:28:60:
         c1:2f:75:4c:4e:b8:b2:9a:c3:55:71:97:60:1a:e6:da:ef:66:
         ea:7f:11:0f:9f:fc:86:d1:a3:22:e9:be:88:24:94:de:86:5a:
         be:43:b3:47:ad:9a:bc:83:8e:68:15:43:e0:4b:58:0b:13:1c:
         16:fc:dc:fa:ae:cf:17:fc:30:67:85:98:2f:54:2d:99:18:cb:
         1c:e0:a4:86:b0:af:64:10:f1:f4:0c:11:46:ac:32:8b:ff:27:
         19:49:bf:75:9e:06:59:e7:c5:27:73:0d:3e:7e:75:ee:75:b6:
         c5:27:37:3b:7d:0d:70:23:9e:ba:7d:84:ca:05:83:aa:80:ac:
         2d:04:bb:33:59:9f:1e:0b:ff:92:d3:c9:c9:98:58:f3:0e:e3:
         e0:2e:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:25 2025 by rpki-client