Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
File:                     7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft (raw, json)
Hash identifier:          MdORMAbOmiMIdHGeL66toAiS8DH/fMk4WsD0eLS9ua0=
Subject key identifier:   B9:AA:A9:FE:07:63:92:3D:58:40:A6:AF:26:62:74:4F:D0:01:40:66
Authority key identifier: EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC
Certificate issuer:       /CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
Certificate serial:       01987CE5070962B195134B106D933349C04C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
Manifest number:          1619
Signing time:             Wed 06 Aug 2025 01:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:41 +0000
Files and hashes:         1: 7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl (hash: YM/cb23x7wLr2sx4pzF8D03bkpHH8TcXwKjsDTBTMFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:07:09:62:b1:95:13:4b:10:6d:93:33:49:c0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb0d26875665ec26b31a5c766e090fcfe90aeac
        Validity
            Not Before: Aug  6 01:00:41 2025 GMT
            Not After : Aug  7 01:00:41 2025 GMT
        Subject: CN=b9aaa9fe0763923d5840a6af2662744fd0014066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b3:50:29:7c:4e:b9:02:85:93:ad:e1:1c:44:
                    a6:43:6b:e4:ae:46:5a:76:cf:af:cf:3a:77:ac:2d:
                    e8:11:d3:c4:93:09:46:6f:5b:47:62:ae:93:40:61:
                    3d:12:41:63:83:16:ba:6d:31:df:b5:50:f6:32:e8:
                    13:af:86:a6:b8:50:a3:f9:ec:dd:71:4a:15:2f:bd:
                    be:74:db:72:1b:9a:9a:be:59:80:cb:23:6b:86:35:
                    e5:90:34:10:38:31:96:41:21:62:20:85:5a:78:22:
                    10:d0:fc:e3:80:97:5b:e7:ae:5f:44:e0:15:fe:de:
                    d6:a3:8d:95:0f:f5:eb:2c:33:43:df:0a:d6:e6:3f:
                    2a:76:37:c5:6e:6c:76:c7:32:7f:33:ef:86:cf:4f:
                    c8:e9:77:d4:3e:62:95:d0:55:5a:cb:a5:20:58:7b:
                    8b:dc:e5:0a:3b:84:56:60:f8:80:5a:40:23:fa:ca:
                    ee:ed:2a:7b:28:09:8b:39:dd:b6:85:73:21:3f:b7:
                    9b:fe:af:f7:91:ac:3d:1a:52:06:58:c6:88:b6:76:
                    da:54:b0:8d:dd:08:27:07:59:1b:b3:54:62:e0:31:
                    af:93:e7:b0:63:ff:2d:34:cd:f6:ce:ea:ca:66:ad:
                    c7:0e:ca:b8:ec:d4:40:a2:c5:58:6c:60:98:df:80:
                    0e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:A9:FE:07:63:92:3D:58:40:A6:AF:26:62:74:4F:D0:01:40:66
            X509v3 Authority Key Identifier:
                keyid:EC:B0:D2:68:75:66:5E:C2:6B:31:A5:C7:66:E0:90:FC:FE:90:AE:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/81f94f-955f-467b-9a36-2e1818a7de3e/1/7LDSaHVmXsJrMaXHZuCQ_P6Qrqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:c3:f8:3b:ce:d9:1e:f0:8b:4a:b2:f9:c4:cb:41:16:a8:
         2a:5c:82:61:0f:89:2d:03:53:f3:c3:a9:24:97:0b:32:87:ac:
         d1:e4:a1:95:01:f5:d3:a3:73:46:f1:0a:04:41:e1:ba:2e:7f:
         43:88:34:8e:d1:fb:f5:aa:dd:83:ff:e4:03:6f:f6:6c:3c:b8:
         74:8e:c1:a3:d2:d9:30:0d:a2:a1:50:23:05:a5:c7:db:13:7d:
         d4:1d:05:4c:e4:4a:1d:cb:05:78:64:44:40:8e:5d:73:f6:63:
         e9:09:6d:4f:4e:6e:4f:ae:4d:0f:53:6f:31:5d:ea:a4:74:fb:
         2f:06:5c:69:b3:7d:12:15:96:11:8d:d4:25:e1:f7:4f:8c:70:
         14:62:ca:fd:ba:28:78:e9:52:b6:ad:6e:12:09:01:5b:79:93:
         b9:8e:7e:e8:78:91:88:10:26:e2:9a:cb:3f:3d:19:86:b2:45:
         08:7c:33:b0:f1:76:8d:9d:9f:34:36:c0:17:a0:be:c7:32:fe:
         ea:cf:9b:e4:d1:9b:9d:32:df:59:93:f6:34:eb:4e:87:2d:db:
         fd:02:0a:63:38:43:62:f3:65:20:75:1c:18:f4:b6:ad:52:9a:
         3a:ee:ea:e6:94:fd:00:14:56:04:bd:47:e0:18:35:ec:9e:01:
         17:0d:9c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:59:44 2025 by rpki-client