Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
File:                     7UHARIMai6EJ1CYpau5lONy1S2M.mft (raw, json)
Hash identifier:          3bCB/jFJ4FOsWIZGY60K+Uz3LTxP79LhLxJUryH5M8M=
Subject key identifier:   D8:4C:54:F7:63:00:F6:4A:99:80:D4:8B:F8:A8:E7:53:A6:3A:1E:7F
Authority key identifier: ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63
Certificate issuer:       /CN=ed41c044831a8ba109d426296aee6538dcb54b63
Certificate serial:       019896A5D09452ECA764F31944D57C1A4660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
Manifest number:          0727
Signing time:             Mon 11 Aug 2025 01:01:45 +0000
Manifest this update:     Mon 11 Aug 2025 01:01:45 +0000
Manifest next update:     Tue 12 Aug 2025 01:01:45 +0000
Files and hashes:         1: 7UHARIMai6EJ1CYpau5lONy1S2M.crl (hash: vAsStu+kXEn+j/Jf99uGtdlZPFLoQ44vaepefsBNyCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:d0:94:52:ec:a7:64:f3:19:44:d5:7c:1a:46:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed41c044831a8ba109d426296aee6538dcb54b63
        Validity
            Not Before: Aug 11 01:01:45 2025 GMT
            Not After : Aug 12 01:01:45 2025 GMT
        Subject: CN=d84c54f76300f64a9980d48bf8a8e753a63a1e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:90:9c:d0:53:d5:e2:d2:9a:79:45:61:79:90:
                    a4:7a:42:9b:95:04:28:d5:6d:ee:6a:23:d6:8f:e0:
                    6e:fc:dc:9d:4a:23:40:16:8d:bf:59:62:7d:e2:cd:
                    27:c4:79:4c:cc:a3:87:86:f2:99:b6:ce:6d:5a:8f:
                    52:9e:13:6f:be:90:48:c4:14:28:93:23:17:77:e9:
                    88:8a:ba:16:89:50:74:84:2f:80:71:a8:55:4c:d3:
                    d2:58:d6:40:50:fd:f6:15:24:65:ad:57:70:c9:10:
                    ee:ff:6d:b8:e1:c0:91:98:c0:f2:7f:71:40:86:cb:
                    b6:5c:78:7d:3b:63:91:87:43:ca:93:cb:b3:73:36:
                    37:7d:85:a9:08:0c:21:6f:9e:7f:0f:62:c0:6e:37:
                    23:5c:62:c6:ed:20:06:65:0f:02:ab:5b:17:c8:3e:
                    0e:56:1f:d6:e1:79:03:36:f3:d9:e6:e6:ef:77:dc:
                    b9:49:22:49:7d:38:d6:f5:04:4b:6e:9f:de:e7:20:
                    4e:c2:b1:39:1a:1e:73:d7:77:7f:6a:ef:20:06:d2:
                    56:00:1c:13:d8:2f:98:69:88:5b:ae:12:de:01:37:
                    5b:08:cd:72:6f:05:cf:62:33:2e:6a:83:30:73:fa:
                    2b:08:83:19:c1:da:5d:0b:89:25:ba:7e:28:fc:e2:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4C:54:F7:63:00:F6:4A:99:80:D4:8B:F8:A8:E7:53:A6:3A:1E:7F
            X509v3 Authority Key Identifier:
                keyid:ED:41:C0:44:83:1A:8B:A1:09:D4:26:29:6A:EE:65:38:DC:B5:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UHARIMai6EJ1CYpau5lONy1S2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/91f265-777b-43b8-a354-03a79d1cac56/1/7UHARIMai6EJ1CYpau5lONy1S2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:0c:1b:d9:0d:c4:88:f9:9f:77:e8:be:82:c4:0e:5a:e9:25:
         8c:aa:68:48:22:24:cd:ce:e9:13:b9:39:74:4a:24:7d:27:2e:
         1a:f1:c7:c6:3d:b9:69:22:87:60:32:78:57:d2:6c:a2:5d:fd:
         b0:64:e9:d7:5b:9c:ac:04:e4:42:9b:af:06:42:c8:68:62:6f:
         52:db:b1:85:18:32:7f:2a:5d:f3:bc:1d:84:57:91:3a:b5:8a:
         e8:92:c3:f0:95:5a:15:cc:3a:3e:93:2a:4c:04:a4:6f:15:f6:
         0e:fb:07:1e:e4:4c:ff:04:df:a3:80:cb:ea:fb:5b:7f:f8:9a:
         db:4e:81:d7:96:d3:27:89:5f:9c:5e:7c:1c:58:dd:9d:f7:69:
         e9:85:5a:bc:0d:70:3b:ef:1d:95:1f:79:38:dc:79:87:30:fb:
         e0:fb:e7:50:03:be:d1:c2:3f:5e:e9:d5:49:e3:0c:51:12:da:
         2e:6f:f4:36:4b:f6:81:c6:5b:11:21:90:e7:7b:d5:b5:bf:c0:
         91:be:7c:76:dd:84:08:53:03:07:fa:96:61:b1:8e:ee:13:e8:
         e3:12:1e:ab:2f:89:d9:9d:81:b1:66:c0:67:d2:e8:90:59:5d:
         c7:5d:13:35:c4:f6:85:8d:55:75:57:86:b7:7b:10:c1:ed:10:
         14:3c:19:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:46:44 2025 by rpki-client