Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
File:                     7N86SgXzcFD3wDedNPT0gUvSCd8.mft (raw, json)
Hash identifier:          OqCq1hR/rDw4M47LEO40LcVx9NdmdbGVSojAhSLEcT8=
Subject key identifier:   80:82:C1:7D:93:69:FA:70:E4:36:31:7A:71:AB:FB:CE:42:74:E0:E9
Authority key identifier: EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF
Certificate issuer:       /CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
Certificate serial:       019874194ACB13A02A163051D49D8F8761D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
Manifest number:          0170
Signing time:             Mon 04 Aug 2025 08:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:11 +0000
Files and hashes:         1: 7N86SgXzcFD3wDedNPT0gUvSCd8.crl (hash: OoxN2YogxIZJLkP/ZvhPbWhiDqXDeIasXROQbsseZTg=)
                          2: J7ccboXG_UdW-dO_P9yIGyLOtpI.roa (hash: J3h8LzNUJs+ItWilJVyvNTPqs1kEml18D1KkQ0ZxkAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:4a:cb:13:a0:2a:16:30:51:d4:9d:8f:87:61:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecdf3a4a05f37050f7c0379d34f4f4814bd209df
        Validity
            Not Before: Aug  4 08:01:11 2025 GMT
            Not After : Aug  5 08:01:11 2025 GMT
        Subject: CN=8082c17d9369fa70e436317a71abfbce4274e0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:31:c3:5c:b1:bb:cf:ae:5f:0b:73:79:6b:
                    9f:dd:52:be:62:44:78:c8:e0:e5:34:a0:b3:c3:24:
                    e7:57:15:ae:7b:bb:22:1a:6b:12:d6:a0:b5:cd:15:
                    16:66:ef:3e:b0:1a:0e:3f:2d:4f:09:5d:01:02:44:
                    86:b9:87:b7:30:53:09:5d:c1:6e:d2:55:8a:be:a6:
                    2c:c6:73:e8:4b:7b:35:46:fc:64:ce:4d:1a:a0:4b:
                    c6:f1:26:5b:c3:c5:3f:f4:85:10:a8:0d:2a:de:c9:
                    e4:9f:50:1a:46:44:ac:f7:15:d2:e9:9d:0c:45:8e:
                    de:cf:90:46:29:55:c3:7c:6c:51:8d:5e:97:37:61:
                    a9:8c:ce:79:4d:6f:bc:cf:f0:d2:e8:6f:48:ff:c1:
                    c3:62:c4:42:63:c7:64:be:a6:78:a8:2d:c9:0e:77:
                    5f:ac:b3:e1:e2:c6:11:f8:09:e0:eb:05:28:02:6b:
                    db:96:99:27:fb:9d:6d:db:00:60:15:7a:4c:9b:1d:
                    2c:3c:d9:b0:f6:96:0a:0d:24:1c:14:11:9c:c2:ce:
                    70:d8:7c:1a:1a:a2:26:ee:78:f3:c5:fb:1e:c0:8e:
                    ed:0a:4e:06:4f:c1:bd:e8:9f:1b:c5:6e:93:bd:b3:
                    4a:54:ca:57:d0:85:a7:7f:7f:6b:0a:89:39:45:24:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:82:C1:7D:93:69:FA:70:E4:36:31:7A:71:AB:FB:CE:42:74:E0:E9
            X509v3 Authority Key Identifier:
                keyid:EC:DF:3A:4A:05:F3:70:50:F7:C0:37:9D:34:F4:F4:81:4B:D2:09:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N86SgXzcFD3wDedNPT0gUvSCd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff09c1-7f45-400f-bd19-ef87405f9a11/1/7N86SgXzcFD3wDedNPT0gUvSCd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:08:e6:60:98:b0:fd:0c:a1:90:0b:5a:59:09:7b:08:b3:1e:
         65:6c:a4:e0:52:8d:74:42:63:6b:5c:05:45:02:87:94:fb:ee:
         89:87:88:96:69:fe:55:3f:be:a9:1e:17:d4:eb:57:e2:8d:7c:
         63:46:c6:a6:aa:e8:3e:e8:92:db:dc:c3:41:50:71:8b:69:ac:
         87:81:75:a1:4e:58:7f:a3:00:4a:de:00:a4:d0:1b:8d:b6:c3:
         0c:88:9d:59:a2:b1:ff:5c:68:01:84:97:36:44:15:57:cd:2e:
         b5:79:f7:4c:eb:7f:44:bf:8f:7c:ef:b9:11:f7:ec:1c:8b:a7:
         68:e0:36:62:96:27:e8:cc:62:23:1b:c7:5d:82:1c:db:50:8c:
         1d:ef:f6:94:d2:db:0f:7d:d3:92:2a:70:bf:3c:ac:de:cb:e9:
         3d:37:a4:76:e4:ff:fc:e3:a7:d1:4e:d4:39:d2:69:20:bd:d0:
         3e:17:bd:9f:af:4a:17:31:02:bf:5d:8a:4b:9f:78:3a:a3:79:
         eb:96:cf:69:10:33:3e:d9:a7:d5:76:b8:33:31:bb:db:d4:4e:
         4c:c8:69:f6:05:47:d8:0e:f7:a0:8c:f9:fc:a6:db:3a:f9:38:
         eb:10:8d:ff:e8:75:86:ed:08:83:1b:48:02:93:4c:d4:77:dd:
         d5:53:99:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:19 2025 by rpki-client