Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File:                     SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier:          YT52sXbgEO1AKbZff5t3ROH05HzaEhcVbfGiQ6ITtRA=
Subject key identifier:   A8:9B:19:D0:A3:29:7E:59:D9:AD:B9:34:97:55:7E:49:62:D8:E7:88
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer:       /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial:       01989ECCCA13A638F1A6E5F788D97A913B9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number:          7E
Signing time:             Tue 12 Aug 2025 15:01:17 +0000
Manifest this update:     Tue 12 Aug 2025 15:01:17 +0000
Manifest next update:     Wed 13 Aug 2025 15:01:17 +0000
Files and hashes:         1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: FhDqZ/8kjnezauOe5q8768DEV9hHgnjzmLVzziUsrA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 15:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:cc:ca:13:a6:38:f1:a6:e5:f7:88:d9:7a:91:3b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4911c4809872294be5817b159e59f29e50609636
        Validity
            Not Before: Aug 12 15:01:17 2025 GMT
            Not After : Aug 13 15:01:17 2025 GMT
        Subject: CN=a89b19d0a3297e59d9adb93497557e4962d8e788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c3:2a:17:50:15:7a:c9:fb:12:c0:b7:d1:9e:
                    c5:d2:44:2a:de:6e:4d:fe:3d:b7:78:48:e0:e9:53:
                    6f:69:27:80:a9:90:93:74:c7:10:1c:16:73:94:06:
                    d9:26:73:77:ae:54:12:4b:c4:d8:8f:ba:cb:1c:23:
                    3b:de:b5:d7:ee:52:c5:ff:23:e9:ec:a4:fa:96:8d:
                    10:f4:fc:11:b7:e4:2d:c1:6d:b1:a3:7f:cf:c6:f2:
                    24:c4:37:d5:14:76:24:da:7c:d2:a9:7c:d7:b1:1a:
                    ba:9c:6f:48:40:93:cf:44:a0:1d:25:a4:ad:41:0e:
                    25:7b:57:eb:d6:e1:59:e9:65:7e:c4:49:4a:3d:73:
                    3b:1b:e1:15:50:e7:6e:9a:30:2b:de:90:5c:bf:3b:
                    de:74:44:c3:04:a3:43:9b:02:6a:74:28:4b:05:53:
                    d3:bb:81:94:81:3c:e2:72:af:5a:d5:0b:e5:83:e7:
                    25:51:ca:fd:81:b2:71:b4:b5:87:28:a0:37:c3:37:
                    17:5e:fb:04:ab:8b:25:6f:b9:57:63:61:0f:22:c3:
                    0c:69:17:b8:19:18:19:3c:9b:e6:62:7c:bd:53:9b:
                    71:35:71:0a:be:b5:2f:fe:13:fd:22:a3:1f:07:21:
                    2a:0d:4a:61:0c:f1:36:8b:05:6b:40:94:ac:44:b0:
                    7b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9B:19:D0:A3:29:7E:59:D9:AD:B9:34:97:55:7E:49:62:D8:E7:88
            X509v3 Authority Key Identifier:
                keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d6:e3:76:93:91:78:eb:8e:42:4a:eb:2f:ba:11:7c:15:32:
         ac:1a:7e:25:cb:e3:59:6d:bd:e8:2e:18:b8:9c:b3:e0:08:03:
         f7:3b:4e:bd:8a:5c:0d:6f:b3:e1:03:40:a9:ab:0b:29:5c:ca:
         52:80:e8:de:4d:d4:b9:98:c0:e0:9e:a6:e9:3d:53:48:e4:9a:
         50:ea:4e:35:55:40:67:1c:8d:25:6f:9a:cf:a6:ac:25:48:d3:
         ef:e2:32:88:fc:78:54:99:db:22:eb:58:0c:fb:a6:38:38:75:
         ca:21:74:67:e5:b5:25:3e:71:99:7c:8d:b7:49:30:c7:99:59:
         75:f6:4e:1f:67:71:bc:0f:be:cf:d7:81:77:8f:71:72:ef:c6:
         a9:50:18:88:04:85:95:d5:cb:eb:bc:61:aa:48:25:e4:5a:19:
         8a:79:7c:f5:3f:55:a5:06:a8:37:7d:46:d8:94:91:43:37:ab:
         03:6c:75:f6:78:e8:fc:28:59:ae:75:51:37:d0:22:85:05:f7:
         88:ce:84:f6:38:33:4e:1f:42:37:fe:08:75:11:4d:cc:4d:2e:
         cb:b7:22:f9:83:60:0f:f3:15:2c:2e:4c:23:e1:f8:6c:f0:f2:
         64:40:c7:6b:b0:86:6d:09:6e:98:1a:1b:a1:c6:12:1c:d2:f1:
         68:53:f6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:05 2025 by rpki-client