Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
File:                     u7MU1-NpAfbep8ApGlFTO7Ik87M.mft (raw, json)
Hash identifier:          358YatK0T0oNatO1Bd2M5tuPZCTqHSJA5Eklq8NYQ6c=
Subject key identifier:   F8:82:90:84:F1:B7:1B:BA:F9:1C:49:EF:0F:AD:1B:F9:B1:4E:A4:53
Authority key identifier: BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3
Certificate issuer:       /CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
Certificate serial:       01987DF85C7C66CE80C0F5736F5A2679E742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
Manifest number:          099C
Signing time:             Wed 06 Aug 2025 06:01:25 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:25 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:25 +0000
Files and hashes:         1: u7MU1-NpAfbep8ApGlFTO7Ik87M.crl (hash: i8jAk2dSm8z+6mOI10dHOA4NMoLXqsePzaC+WMFvayY=)
                          2: yfiu2M8plrtU3UaE1tSWQlOfqzM.roa (hash: LGvgYonneT46G/xf4FgiBrT7VrnKx0OUEEnLR8etqrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:5c:7c:66:ce:80:c0:f5:73:6f:5a:26:79:e7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbb314d7e36901f6dea7c0291a51533bb224f3b3
        Validity
            Not Before: Aug  6 06:01:25 2025 GMT
            Not After : Aug  7 06:01:25 2025 GMT
        Subject: CN=f8829084f1b71bbaf91c49ef0fad1bf9b14ea453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:52:62:dd:2e:6a:8b:8b:15:bb:b3:59:f9:57:
                    63:3f:80:91:21:9c:62:97:d1:eb:f3:64:df:77:82:
                    ab:6f:35:2f:81:cb:22:66:8b:c8:36:f6:c6:d6:10:
                    28:f6:e1:2b:66:31:3b:62:c8:a2:19:fe:9b:a0:c4:
                    3e:a7:1a:af:3f:86:4f:99:de:63:36:42:0e:eb:cf:
                    1d:f2:ea:76:23:d8:a5:ef:5e:8d:1a:cb:30:48:93:
                    70:a7:95:b6:46:95:fd:2e:49:23:95:e3:32:a3:f0:
                    91:77:b8:7e:06:63:e5:c1:88:e6:fb:19:96:38:5e:
                    cb:eb:b3:64:6a:12:bb:51:15:d6:69:59:a1:3f:f2:
                    5d:ca:05:e1:cf:55:90:78:c2:81:c7:75:10:ee:90:
                    40:9c:e6:23:6f:4e:dc:0f:68:6d:e4:79:0f:60:59:
                    d7:0f:95:d5:7a:99:35:17:2c:50:fb:ff:40:0e:58:
                    66:87:78:20:5f:81:51:cd:23:f4:e9:8f:ab:71:80:
                    b5:19:55:29:76:06:cf:43:04:c9:a6:3f:8f:94:0a:
                    35:6c:d5:0c:a3:1e:c8:b2:60:4f:73:55:06:47:66:
                    d2:fa:ad:ea:3e:ef:57:8c:d9:92:cd:7e:dc:00:e3:
                    9b:ed:30:00:d7:98:8c:28:c4:34:99:bd:a1:68:62:
                    0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:90:84:F1:B7:1B:BA:F9:1C:49:EF:0F:AD:1B:F9:B1:4E:A4:53
            X509v3 Authority Key Identifier:
                keyid:BB:B3:14:D7:E3:69:01:F6:DE:A7:C0:29:1A:51:53:3B:B2:24:F3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7MU1-NpAfbep8ApGlFTO7Ik87M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/7ac37b-020b-49ae-ac9b-f98ec74abfd5/1/u7MU1-NpAfbep8ApGlFTO7Ik87M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:ae:3e:07:9b:4b:5e:7e:56:ec:26:ab:2a:c4:86:c2:fc:
         83:d2:23:5d:5c:32:de:bb:8d:60:27:77:83:f5:3d:81:ca:32:
         74:36:58:d1:ab:8c:07:a6:88:29:9f:e7:3e:72:c8:da:e0:0c:
         39:f2:2b:f3:24:be:6c:35:a9:60:45:31:00:a5:6c:d2:1d:02:
         91:3f:da:0d:e7:52:32:88:7e:ae:bd:1c:d4:f1:b2:3e:b8:0e:
         d0:a3:2e:b7:a7:a6:8b:5a:9b:6e:7c:db:04:b6:a5:3e:cc:a7:
         4e:72:46:bd:13:03:5f:6d:e6:7c:60:2e:b8:4d:4e:52:ab:10:
         bc:8f:8b:6e:e2:82:79:fd:20:35:14:00:d4:39:3f:05:2e:c9:
         6b:cd:a6:83:2d:6b:31:7f:c3:2f:96:46:ef:64:a1:9c:38:37:
         a9:63:f4:a7:57:ba:76:33:ac:9c:f5:e5:76:28:e0:30:5d:81:
         88:68:67:14:3c:65:b9:ee:4b:b9:97:e1:76:c6:8f:cc:08:81:
         19:bf:53:ff:8b:75:87:1f:3d:7f:04:a7:6e:7e:59:2c:4f:3d:
         eb:90:09:e5:5e:c0:91:4a:e1:3f:ba:e1:f1:aa:a2:46:a7:eb:
         b5:a6:b9:7c:58:6b:4a:4f:95:8b:d2:42:31:30:42:26:9b:84:
         48:de:cc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:10:21 2025 by rpki-client