Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File:                     E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier:          iLqrjm8iWcBBATOEcxCvX0sPcIgRFXEIUYo3/PqWocw=
Subject key identifier:   84:3F:9D:FE:14:5F:FF:A9:3D:3A:2F:33:7E:AB:2B:7E:6D:D3:D6:EC
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer:       /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial:       019892FF1603F90CB971EA65364F4B0B3F5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number:          04F7
Signing time:             Sun 10 Aug 2025 08:00:47 +0000
Manifest this update:     Sun 10 Aug 2025 08:00:47 +0000
Manifest next update:     Mon 11 Aug 2025 08:00:47 +0000
Files and hashes:         1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: S/GvalvLJ4Q9o/CJqtW9uOoMHJu792xyk7jI2gHNJ50=)
                          2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:16:03:f9:0c:b9:71:ea:65:36:4f:4b:0b:3f:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
        Validity
            Not Before: Aug 10 08:00:47 2025 GMT
            Not After : Aug 11 08:00:47 2025 GMT
        Subject: CN=843f9dfe145fffa93d3a2f337eab2b7e6dd3d6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:f0:17:8e:fd:5e:df:a6:c4:80:35:82:73:
                    de:fc:28:8b:42:06:4b:af:4f:2d:d2:1b:b3:ea:43:
                    a3:2f:ea:4c:20:8d:01:4f:05:45:41:e5:fa:5f:7b:
                    03:86:1a:11:03:bf:c9:1f:a4:db:5c:31:29:18:be:
                    25:d0:81:8d:6a:18:cf:15:13:59:00:f7:16:89:70:
                    d3:ee:7d:f3:1a:dd:91:c6:14:e6:6c:0c:9d:67:3f:
                    39:4d:f3:5c:89:46:32:fc:ff:25:64:67:7a:54:17:
                    a8:07:c9:c4:e4:d3:62:98:e2:57:5d:b5:80:f7:27:
                    14:77:66:44:9b:be:71:14:7d:e8:8a:ee:8c:32:43:
                    85:5e:dd:7f:fb:54:88:c8:dc:ae:36:dd:ce:fd:95:
                    43:61:bc:85:ac:c6:1a:90:66:3b:88:71:cd:93:5a:
                    16:a5:28:a1:b6:74:41:0f:6f:e0:6a:d6:94:7a:2f:
                    73:5d:41:ab:99:f4:a6:7f:03:2c:c9:42:f6:0e:0d:
                    37:23:67:a4:2b:2c:3a:3f:d1:b2:11:54:23:32:5b:
                    8a:04:cd:91:60:0d:1e:f4:9f:b0:e8:2e:c8:fc:c9:
                    c6:5b:b8:da:d2:e9:2c:38:8b:77:4d:af:ba:c8:f8:
                    7c:ba:a8:92:0d:9e:f5:21:32:6a:00:4d:28:5d:78:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3F:9D:FE:14:5F:FF:A9:3D:3A:2F:33:7E:AB:2B:7E:6D:D3:D6:EC
            X509v3 Authority Key Identifier:
                keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:12:10:4b:44:b6:0a:51:a6:93:34:33:79:a6:de:b0:81:5e:
         c7:9a:e4:6d:87:fc:e0:68:aa:f2:55:f1:52:65:39:84:a4:49:
         94:22:fe:90:b8:53:69:a8:21:2d:34:f8:c9:db:c5:a2:36:c0:
         a8:b8:6d:0a:40:47:d1:28:70:32:58:e3:53:7d:dd:38:4d:ba:
         e6:bf:ed:a7:f6:8e:24:72:b2:7c:2b:07:f4:37:1a:00:c5:9d:
         80:d7:61:1f:bd:70:17:a9:5b:8b:5b:75:80:4c:0b:9e:f2:5e:
         61:b7:c4:4c:76:1b:91:f0:40:de:0b:b4:78:c8:53:68:e0:93:
         c9:92:55:61:8f:31:81:b8:22:b2:d6:66:45:75:02:fd:5b:0a:
         c0:19:cb:ed:04:a8:2d:43:3e:41:c7:3c:5f:0f:7c:b4:3c:97:
         12:51:e9:67:01:56:09:4c:bf:aa:4e:ba:b8:df:3f:df:7a:7c:
         28:d2:5f:9a:30:6f:8f:08:34:05:a0:45:7a:17:dd:d5:0f:b6:
         19:17:db:a7:12:71:88:c0:e2:93:cd:3f:aa:1c:f3:c4:aa:d0:
         a7:5c:4b:47:74:cd:82:f1:c5:af:f5:53:09:08:fe:5e:91:66:
         99:60:42:4b:f9:5f:c2:72:19:d2:b5:db:61:14:70:8a:51:5e:
         1a:b1:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:32 2025 by rpki-client