Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
File:                     7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft (raw, json)
Hash identifier:          E8lwx82WpT6k9rFN1LihQ0g6e9brIVe1H9+GGwhIL0c=
Subject key identifier:   AE:3D:FB:F1:3D:E4:9F:BC:6C:48:1A:21:4A:57:3D:0A:ED:ED:97:54
Authority key identifier: EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F
Certificate issuer:       /CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
Certificate serial:       0198A083A47F64D507473EA52BB7E54C3A86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
Manifest number:          030E
Signing time:             Tue 12 Aug 2025 23:00:38 +0000
Manifest this update:     Tue 12 Aug 2025 23:00:38 +0000
Manifest next update:     Wed 13 Aug 2025 23:00:38 +0000
Files and hashes:         1: 7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl (hash: Ch4L9AaobWMDN66M1G6QYnXi0iOsyjWHksn90LDUGKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:83:a4:7f:64:d5:07:47:3e:a5:2b:b7:e5:4c:3a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0fd13adcb9c55ed9ceefd0d0f6f9b41695723f
        Validity
            Not Before: Aug 12 23:00:38 2025 GMT
            Not After : Aug 13 23:00:38 2025 GMT
        Subject: CN=ae3dfbf13de49fbc6c481a214a573d0aeded9754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:10:02:3f:96:56:13:30:37:4c:37:d2:11:
                    78:69:15:73:f4:35:3a:af:b4:92:b5:a3:24:87:f5:
                    d8:51:57:4e:74:57:b8:39:4b:3f:f4:5a:58:f2:27:
                    1c:ee:d7:63:37:be:ce:dc:91:1c:22:b5:72:11:7d:
                    a7:20:82:68:b5:6d:39:c8:7b:8e:3e:e7:9e:84:25:
                    3c:82:fd:6e:28:d3:c9:2b:ec:47:eb:36:6b:6a:8c:
                    15:5c:10:8c:02:2e:52:19:6a:21:7b:e9:14:6e:cd:
                    44:8d:2b:ec:e2:c7:ec:bf:77:ea:69:bd:d4:87:a1:
                    c0:06:db:e1:2d:5e:5f:cc:b3:33:ed:29:27:98:fc:
                    c7:97:e3:d3:89:3e:dd:17:3b:df:23:fa:10:71:8a:
                    e8:d5:99:0f:53:1f:ba:55:00:a0:01:87:7f:7e:ba:
                    6d:6d:2c:a2:6e:2e:bb:61:bf:12:70:e0:12:5f:2d:
                    33:3d:3b:e2:a3:95:b5:0f:c4:32:30:62:42:a4:18:
                    e2:76:29:a8:cf:76:0c:47:ce:be:c9:f2:b7:1a:3e:
                    da:84:31:7f:de:59:f8:ac:30:9d:ea:7f:98:54:bc:
                    fd:2f:9c:ae:55:3e:a0:59:92:fc:c7:52:30:30:df:
                    a0:72:0e:af:e5:30:b8:be:b2:ce:b4:b4:bf:79:58:
                    88:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3D:FB:F1:3D:E4:9F:BC:6C:48:1A:21:4A:57:3D:0A:ED:ED:97:54
            X509v3 Authority Key Identifier:
                keyid:EF:0F:D1:3A:DC:B9:C5:5E:D9:CE:EF:D0:D0:F6:F9:B4:16:95:72:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9795cc-3700-4aa0-a1ed-a6d94bf244b4/1/7w_ROty5xV7Zzu_Q0Pb5tBaVcj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:53:87:d9:d8:02:94:d5:84:18:80:40:d9:69:ac:20:c7:
         35:2d:53:10:e3:68:78:d9:ce:89:36:bf:9f:08:cc:e9:f4:b5:
         fe:1d:8c:ad:0f:ca:fe:b0:03:80:27:91:19:b1:59:01:40:92:
         85:77:21:10:8f:23:d3:9e:62:c2:d1:47:db:dd:e0:f3:e8:d1:
         fa:30:32:65:8c:a9:d1:0b:90:a0:6f:4a:06:64:9f:a3:b3:b5:
         90:c2:90:a0:d5:d2:80:3f:c0:79:98:09:45:5f:a5:44:6f:b5:
         89:38:ac:c3:6e:61:3c:63:4e:a4:9d:c8:24:b9:10:40:ac:d6:
         c6:9e:4e:8a:ae:3f:04:8e:68:86:9b:4f:d3:6f:39:1d:4a:17:
         d2:88:51:a4:8b:32:8b:59:ff:ec:8f:b4:55:89:d8:c7:e4:32:
         80:05:2e:c1:2e:c4:c1:7d:a0:f2:5c:de:a7:75:51:d5:cd:3e:
         5c:e3:a9:22:94:61:0b:b9:e1:f0:dd:5d:e2:53:d1:21:ed:31:
         7a:72:e3:fc:4a:94:3b:06:3c:82:69:d3:91:0e:83:b3:c8:ca:
         d3:46:04:da:59:5c:a8:51:c8:b1:98:d8:ee:eb:61:0e:67:76:
         8b:09:48:31:bb:2d:6a:96:22:ba:89:34:24:28:ac:d8:a1:fc:
         3f:13:57:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigg6R/ZNUHRz6lK7flTDqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMGZkMTNhZGNiOWM1NWVkOWNlZWZkMGQwZjZmOWI0MTY5
NTcyM2YwHhcNMjUwODEyMjMwMDM4WhcNMjUwODEzMjMwMDM4WjAzMTEwLwYDVQQD
EyhhZTNkZmJmMTNkZTQ5ZmJjNmM0ODFhMjE0YTU3M2QwYWVkZWQ5NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx44QAj+WVhMwN0w30hF4aRVz9DU6
r7SStaMkh/XYUVdOdFe4OUs/9FpY8icc7tdjN77O3JEcIrVyEX2nIIJotW05yHuO
PueehCU8gv1uKNPJK+xH6zZraowVXBCMAi5SGWohe+kUbs1EjSvs4sfsv3fqab3U
h6HABtvhLV5fzLMz7SknmPzHl+PTiT7dFzvfI/oQcYro1ZkPUx+6VQCgAYd/frpt
bSyibi67Yb8ScOASXy0zPTvio5W1D8QyMGJCpBjidimoz3YMR86+yfK3Gj7ahDF/
3ln4rDCd6n+YVLz9L5yuVT6gWZL8x1IwMN+gcg6v5TC4vrLOtLS/eViImwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK49+/E95J+8bEgaIUpXPQrt7ZdUMB8GA1UdIwQY
MBaAFO8P0TrcucVe2c7v0ND2+bQWlXI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85Nzk1Y2MtMzcwMC00YWEwLWExZWQt
YTZkOTRiZjI0NGI0LzEvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS85Nzk1Y2MtMzcwMC00YWEwLWExZWQtYTZkOTRiZjI0NGI0
LzEvN3dfUk90eTV4VjdaenVfUTBQYjV0QmFWY2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9dTh9nY
ApTVhBiAQNlprCDHNS1TEONoeNnOiTa/nwjM6fS1/h2MrQ/K/rADgCeRGbFZAUCS
hXchEI8j055iwtFH293g8+jR+jAyZYyp0QuQoG9KBmSfo7O1kMKQoNXSgD/AeZgJ
RV+lRG+1iTisw25hPGNOpJ3IJLkQQKzWxp5Oiq4/BI5ohptP0285HUoX0ohRpIsy
i1n/7I+0VYnYx+QygAUuwS7EwX2g8lzep3VR1c0+XOOpIpRhC7nh8N1d4lPRIe0x
enLj/EqUOwY8gmnTkQ6Ds8jK00YE2llcqFHIsZjY7uthDmd2iwlIMbstapYiuok0
JCis2KH8PxNXlg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:08 2025 by rpki-client