Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
File:                     e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft (raw, json)
Hash identifier:          onMOwslYkVqYbVbG5aIOeOyaS67k96JrS7H2GqQaP6U=
Subject key identifier:   53:8E:FC:F9:10:F9:85:BC:86:8F:6D:50:22:57:7B:E2:A8:A7:68:86
Authority key identifier: 7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74
Certificate issuer:       /CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
Certificate serial:       01988168D159A673E9CB66CDFB24B5A4881F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
Manifest number:          11DC
Signing time:             Wed 06 Aug 2025 22:03:06 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:06 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:06 +0000
Files and hashes:         1: 0m_FCYLNpCepQvgGxnt5Etr0-7E.roa (hash: KPGMzAKskMiHXfK0deJxIO7QjTi1yyfKU8relBE7uzY=)
                          2: e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl (hash: EntB1Plysyom9MS6P9Fj6w5+diKe4mvZzL2Gl57pzw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:d1:59:a6:73:e9:cb:66:cd:fb:24:b5:a4:88:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba7fda6a692236c223f74d63ea7bb9fef2f1274
        Validity
            Not Before: Aug  6 22:03:06 2025 GMT
            Not After : Aug  7 22:03:06 2025 GMT
        Subject: CN=538efcf910f985bc868f6d5022577be2a8a76886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:36:63:96:18:aa:be:51:0a:62:be:95:c0:fd:
                    bd:b9:ff:d9:28:de:88:ec:28:d1:9c:43:58:b3:05:
                    f6:45:c8:c9:2c:ee:24:45:02:ef:91:29:33:1b:69:
                    a4:4e:4b:ad:70:8a:1b:9b:46:a9:a2:31:ba:cf:cb:
                    36:9c:91:bf:e3:8a:5f:4f:e3:2a:a5:2b:44:37:2b:
                    e1:6c:9a:d8:68:b1:fd:42:88:c7:1b:aa:b6:cf:b9:
                    d3:ca:10:41:a2:8e:3a:8e:41:64:bc:df:8d:b7:f9:
                    36:b8:44:33:83:56:a7:77:3e:7b:e0:f6:27:f3:7d:
                    a1:6b:34:dd:62:eb:77:82:49:de:0b:26:9b:ad:85:
                    f8:7e:f3:71:10:5a:e5:31:07:d9:e0:92:ae:24:9b:
                    7e:b3:87:bc:76:34:d1:f1:4b:c8:1a:5b:0f:4f:e9:
                    5a:a7:a2:d2:5e:69:53:1b:7b:84:6a:05:7c:ef:49:
                    7a:13:de:a9:80:84:5a:9a:92:c8:ec:85:8d:6f:bd:
                    eb:a0:e1:66:68:b0:d3:a0:8c:21:48:87:5c:98:d2:
                    cc:4c:d8:ff:28:b9:20:09:2f:3d:ae:8e:f1:8b:04:
                    9b:e0:f7:0d:26:e5:a2:1f:0b:9c:52:32:61:72:c1:
                    29:4e:c5:d2:c2:aa:9e:bc:4a:fd:0a:a7:a6:2b:c4:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8E:FC:F9:10:F9:85:BC:86:8F:6D:50:22:57:7B:E2:A8:A7:68:86
            X509v3 Authority Key Identifier:
                keyid:7B:A7:FD:A6:A6:92:23:6C:22:3F:74:D6:3E:A7:BB:9F:EF:2F:12:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ae9cef-e937-4f80-9978-db4ad25d99a8/1/e6f9pqaSI2wiP3TWPqe7n-8vEnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3c:7c:26:d4:93:82:42:5c:6e:2d:7e:fe:6a:b4:f0:f3:be:
         4d:1e:bf:10:4f:0a:83:e1:97:16:49:6c:ae:1a:1e:ce:37:3f:
         ea:a0:5f:78:78:b5:9c:92:27:0c:ce:ce:b4:a0:bb:05:66:c3:
         91:7c:a7:80:5f:38:21:45:7b:83:c2:09:ef:26:91:f9:c8:ef:
         7b:c5:78:4f:76:00:18:71:14:c0:5f:86:b4:dc:42:dc:20:74:
         23:7e:0c:47:9d:44:d6:93:b6:7f:0f:61:40:81:70:2d:75:51:
         9a:a3:de:94:ea:66:54:92:c8:80:4d:d0:41:85:23:da:b0:3a:
         57:a5:d3:a7:34:09:79:97:ea:4f:a8:61:03:01:85:6f:a7:f9:
         4e:25:a1:97:4a:ae:de:f7:93:72:62:cd:ba:cd:fa:22:6f:62:
         c7:62:a3:e2:28:02:17:6f:2c:36:29:a0:78:68:bb:8c:e5:ac:
         01:e0:3b:2a:70:61:10:71:25:b1:ba:d2:c7:70:30:4f:bc:59:
         04:f2:5b:a9:8f:3a:cb:db:b8:d7:6b:a8:02:02:d4:f1:93:69:
         a9:c4:ce:60:12:01:07:9f:81:73:f6:be:a4:fe:6c:25:15:42:
         e6:a4:9a:a2:b6:9e:0b:65:92:9c:cd:dd:ab:4b:8b:5d:b2:18:
         68:27:34:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:02:33 2025 by rpki-client