Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File:                     7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier:          dBuPy7oeDgwyEUxELXqsuPpD1NnkUFbnkmsOZWyksPI=
Subject key identifier:   09:43:B3:8B:E6:F0:A3:55:F3:B0:F7:2D:92:F3:08:F0:36:50:47:80
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer:       /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial:       019874868DB972136F8E5DAD737183BD587B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number:          13BA
Signing time:             Mon 04 Aug 2025 10:00:31 +0000
Manifest this update:     Mon 04 Aug 2025 10:00:31 +0000
Manifest next update:     Tue 05 Aug 2025 10:00:31 +0000
Files and hashes:         1: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: 7SuaV31iMZ5yWahwxZPn7FosaczoSDWSB/qx5EtL0Wo=)
                          2: sefujDMF5lf6VBPRf5yt9NZgCbo.roa (hash: zo4oUB09XXtgt5XFY9ZeQdpiK9/oMzcXXR9HJAvXlt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:86:8d:b9:72:13:6f:8e:5d:ad:73:71:83:bd:58:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
        Validity
            Not Before: Aug  4 10:00:31 2025 GMT
            Not After : Aug  5 10:00:31 2025 GMT
        Subject: CN=0943b38be6f0a355f3b0f72d92f308f036504780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:b5:5f:34:7d:19:c4:03:8c:9e:c4:94:07:
                    19:a3:aa:72:54:3f:87:22:92:cf:ba:40:97:a9:2e:
                    f2:ed:23:18:df:6b:fd:ac:5c:0d:90:ca:94:e6:b9:
                    17:a5:c9:07:be:7d:01:0f:c5:89:ed:07:d3:59:d0:
                    d7:0e:b4:9a:6d:df:04:e9:bc:f1:c1:96:7d:c0:c1:
                    d5:89:8d:a1:c3:7a:61:69:79:6c:a8:ba:43:a4:7d:
                    24:47:88:75:e3:eb:a3:75:67:b8:d7:70:f1:9e:0e:
                    dc:9a:9c:bf:bd:21:d8:db:3c:64:0d:be:56:ea:89:
                    ed:80:97:28:88:47:7c:f8:9f:3c:ab:48:fc:c0:04:
                    d4:c6:5f:27:49:1c:fb:ec:e2:7c:54:0d:0c:ff:da:
                    58:37:9c:5d:a5:e9:3a:52:cc:f9:0c:74:47:0c:10:
                    49:67:e8:06:22:c4:f2:87:5e:de:e0:b1:cb:33:32:
                    3f:49:f4:e3:82:85:51:b4:df:14:5b:3c:9b:f5:f7:
                    f3:b6:a8:87:15:b9:af:17:e5:ec:96:ef:a7:35:f0:
                    b1:6c:92:f8:8c:23:8a:a5:67:b7:0b:91:1c:57:b4:
                    eb:4c:19:91:3b:18:f2:98:a8:e7:b8:eb:e6:a8:e6:
                    68:59:98:d4:79:a2:56:42:da:67:07:c1:d7:e8:aa:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:43:B3:8B:E6:F0:A3:55:F3:B0:F7:2D:92:F3:08:F0:36:50:47:80
            X509v3 Authority Key Identifier:
                keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:aa:28:35:7b:3d:f3:a7:9c:bd:e4:3a:ff:24:fa:42:5a:96:
         36:f1:68:3e:6c:2d:38:79:a4:5a:f9:ea:5d:b5:1a:ca:96:30:
         00:21:1d:9c:b0:fc:f9:53:bd:ba:71:d7:56:f4:e9:b8:ca:86:
         0e:f1:ca:cd:cf:94:eb:3f:20:18:a3:27:8b:88:5e:94:6b:d5:
         51:ca:e7:ff:17:81:7a:57:1d:31:4f:94:b3:70:51:66:b5:b9:
         fd:b3:87:ca:fe:6d:79:47:5f:3c:66:16:34:4f:4e:d3:a1:99:
         a3:3a:7a:11:0d:58:a8:a6:15:42:c7:74:66:ff:37:9c:da:6c:
         52:30:e6:1a:b3:8e:01:b9:e0:00:fd:58:6a:e7:c0:40:b1:48:
         5e:54:ea:33:3c:0c:72:99:87:0e:08:ed:94:0b:ba:ad:2d:9a:
         c6:60:6f:cf:61:14:0b:b6:ba:2b:1a:2a:59:ae:fc:f1:0b:b5:
         da:95:f3:56:ed:45:1d:69:30:0b:eb:53:e2:74:6d:ff:3f:80:
         32:45:dd:9b:3f:73:7d:cd:93:b7:50:d6:93:64:00:db:a2:67:
         de:1d:79:28:c2:d8:7a:ff:08:ac:51:28:38:d1:ae:74:77:5d:
         68:c9:63:ea:09:3e:79:34:6e:ff:78:55:99:df:60:a1:4a:cc:
         a5:fe:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:12:36 2025 by rpki-client