Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
File:                     7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft (raw, json)
Hash identifier:          4vC/yyyJFrs8qZ2pAnx7/nshICgJrsXWb/3m/pElwdI=
Subject key identifier:   CF:39:EC:91:09:81:42:FC:8E:2D:BA:38:69:B2:5F:95:91:F4:1B:EA
Authority key identifier: EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA
Certificate issuer:       /CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
Certificate serial:       01987C0983020C69D32E03BFAE009ABFCB11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
Manifest number:          1617
Signing time:             Tue 05 Aug 2025 21:00:54 +0000
Manifest this update:     Tue 05 Aug 2025 21:00:54 +0000
Manifest next update:     Wed 06 Aug 2025 21:00:54 +0000
Files and hashes:         1: 7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl (hash: gLk5+cTlcnCtjYINZKrIm/VauV+muYqMc9UxImzhf4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:09:83:02:0c:69:d3:2e:03:bf:ae:00:9a:bf:cb:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecb11b54508a06289b0ed06b17188ad63f4fcfea
        Validity
            Not Before: Aug  5 21:00:54 2025 GMT
            Not After : Aug  6 21:00:54 2025 GMT
        Subject: CN=cf39ec91098142fc8e2dba3869b25f9591f41bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:16:d4:c0:b6:f1:f2:27:35:4e:9e:05:4c:
                    c3:c9:2c:e7:00:3c:ce:f8:5a:5b:54:bb:62:6e:f6:
                    68:f7:e9:72:a8:fb:de:e6:0e:4e:27:1b:d4:ab:9f:
                    48:e6:41:2e:c1:0b:5e:16:7a:ad:63:37:25:40:29:
                    aa:00:ef:f4:f5:af:cf:64:bd:f7:e5:9b:f0:d9:7f:
                    94:49:e3:99:ef:43:b4:58:5a:c1:0f:56:85:19:03:
                    0d:6f:7f:b1:e0:9d:df:fc:24:28:13:de:08:2f:24:
                    61:af:76:9f:44:c5:e1:7a:fb:ec:ac:2d:93:38:21:
                    86:33:17:4f:55:d1:34:18:3c:d1:ef:b4:4b:bc:ed:
                    70:4b:81:4a:81:d8:41:37:59:28:02:8e:e5:f5:46:
                    85:bf:ba:79:97:bf:03:4f:e5:4a:87:3f:51:80:a7:
                    dc:59:dd:82:e9:6b:dc:f9:f6:fb:b7:36:84:d0:b7:
                    64:0c:42:e1:9f:57:1b:32:59:e9:3f:af:9b:36:d6:
                    e3:89:6d:43:83:32:50:21:11:58:c1:b6:98:83:f6:
                    9a:14:b8:13:95:3a:43:05:c5:04:df:83:4c:8a:55:
                    8f:33:71:b7:43:4f:e2:d7:43:2c:50:64:70:fe:8e:
                    1b:08:28:13:f3:c8:ed:14:26:38:3a:3d:9e:b8:17:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:EC:91:09:81:42:FC:8E:2D:BA:38:69:B2:5F:95:91:F4:1B:EA
            X509v3 Authority Key Identifier:
                keyid:EC:B1:1B:54:50:8A:06:28:9B:0E:D0:6B:17:18:8A:D6:3F:4F:CF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LEbVFCKBiibDtBrFxiK1j9Pz-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/14d099-8e45-4479-847e-74126b5c3ab6/1/7LEbVFCKBiibDtBrFxiK1j9Pz-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:95:82:2f:09:76:6b:df:dd:d7:e7:71:61:91:38:14:1e:b5:
         b2:48:56:a4:af:5c:fa:e1:38:9b:14:63:b6:d7:14:ef:7d:8e:
         e0:5f:4c:60:46:50:0a:20:78:d1:d6:8f:bd:b2:47:ed:f2:d7:
         1b:ae:db:e4:d9:20:2f:c3:ce:48:fd:91:8d:cc:5a:ad:f3:4a:
         8c:53:e7:0e:bd:60:e2:6d:62:6d:fc:a8:80:2b:85:b1:63:df:
         48:a4:a8:6f:f1:88:6b:35:cf:a5:d8:29:a3:2a:e4:6a:a4:da:
         c0:73:55:f1:32:ab:75:5d:55:6c:b4:07:09:83:24:86:5d:97:
         44:54:0a:2c:d7:84:92:ef:d1:7a:b5:a8:6f:ae:14:fe:f6:15:
         f2:14:7f:c9:82:8d:60:f4:d5:ac:6d:62:8b:08:0f:7a:76:9f:
         6f:e8:aa:0a:7f:31:21:65:34:46:99:20:87:3c:da:98:d3:98:
         28:2e:79:5d:ba:fb:a4:5a:ab:41:28:33:ec:84:46:ae:e1:5d:
         44:2a:b8:0c:21:8c:09:71:84:cf:a7:a2:5d:7d:5b:1a:89:e9:
         8c:e8:e6:19:12:2e:ca:93:6d:63:ea:5e:2b:50:09:8f:b5:2c:
         1a:32:13:04:23:71:ae:9d:10:0c:2a:f2:f6:0a:ea:3e:b3:6c:
         80:6a:b6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:11:42 2025 by rpki-client