Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File:                     7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier:          OOZXGC9CJuWvXrgINiug1o6Ywy8MsdVyKZDpFooGUJg=
Subject key identifier:   E9:A2:03:78:5D:BC:8E:76:E5:49:96:02:EA:5E:AD:60:AC:8D:7A:A5
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer:       /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial:       01987D8A172FEECE614E4DC6AF5E9686A994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number:          0BB5
Signing time:             Wed 06 Aug 2025 04:00:58 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:58 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:58 +0000
Files and hashes:         1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: g3qhLW36jNJ5mif74rcy4OF3wzwZnHflou6rB+0bRQ0=)
                          2: Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa (hash: 5FSjbaTtR9k8SDOj/2LjE1uuErnl+zHIrGSKMQg96EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:17:2f:ee:ce:61:4e:4d:c6:af:5e:96:86:a9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
        Validity
            Not Before: Aug  6 04:00:58 2025 GMT
            Not After : Aug  7 04:00:58 2025 GMT
        Subject: CN=e9a203785dbc8e76e5499602ea5ead60ac8d7aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:22:eb:75:4a:aa:2d:c9:63:68:01:a3:51:
                    9a:74:bb:7f:07:ef:62:0b:8b:d8:38:1f:35:bb:3b:
                    5a:09:c3:a1:0f:71:2b:79:14:db:d8:ad:87:6d:a8:
                    ec:18:97:db:b9:3f:c2:55:c7:63:ad:38:36:ea:bb:
                    16:69:54:62:eb:c0:2d:f5:14:2c:39:6d:73:5d:50:
                    db:83:e8:8b:5c:f3:57:69:bb:da:b7:e5:be:90:b1:
                    82:14:99:d0:fb:63:28:e5:a7:3b:e4:b2:ca:04:15:
                    ec:fe:7b:53:e3:c6:78:cf:40:5f:8c:db:ff:7e:64:
                    54:50:4f:70:55:81:30:ff:dd:b9:90:2a:59:7c:12:
                    05:b7:ea:7e:38:72:7a:dd:3f:7e:7d:ae:60:5d:22:
                    84:47:f2:a8:a5:29:6e:3b:ee:05:e8:00:de:47:8b:
                    a5:fb:bf:92:67:b1:e1:84:e8:1f:b3:49:5b:73:8c:
                    7e:37:85:32:0c:55:b4:70:fc:cf:28:fd:82:6b:5d:
                    3b:6c:bc:96:89:1f:2d:fd:10:14:4b:34:82:ea:d9:
                    85:cc:bc:54:5e:5d:82:72:04:84:02:6b:e7:0c:49:
                    d5:17:db:b8:57:57:79:c5:21:5f:9f:64:5b:d2:5a:
                    4f:a9:92:40:ab:ef:71:63:db:e0:1b:48:d2:3a:40:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A2:03:78:5D:BC:8E:76:E5:49:96:02:EA:5E:AD:60:AC:8D:7A:A5
            X509v3 Authority Key Identifier:
                keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e9:ba:ea:f2:67:74:71:94:32:22:e2:e7:dc:d8:07:15:6e:
         65:1c:96:f5:80:ad:9f:cb:0f:81:70:00:b9:04:8c:04:4b:80:
         3a:9f:f5:db:ad:2e:ec:b6:76:08:6c:48:60:77:92:32:9b:77:
         15:79:40:0a:72:00:ea:24:83:2b:f1:69:5d:f0:5c:6e:81:c5:
         ee:c3:e3:e3:b3:a5:cf:f6:d5:92:d4:b8:05:39:40:9d:50:af:
         ef:f7:e0:78:70:a6:de:c7:eb:20:4b:69:49:1f:17:71:e6:05:
         cb:5f:f8:e7:73:06:4c:0c:96:2e:7b:15:92:8c:d6:10:83:b8:
         56:71:de:81:4f:0f:13:dc:1e:64:c9:58:d5:94:8e:11:ac:e3:
         7d:27:49:7f:27:2c:89:80:e7:7f:eb:a7:c5:48:30:f0:5e:c9:
         f9:53:6c:34:25:a4:5f:27:b2:91:b9:7b:9c:62:c7:db:de:ec:
         ff:bb:32:fd:70:a8:f5:42:e7:de:fa:ac:5b:df:44:e3:78:72:
         27:bc:d5:bb:b0:7e:61:6c:d5:72:69:8a:86:49:c9:8d:21:22:
         9f:fb:d0:e5:0f:47:9c:f9:35:d6:bf:10:73:0f:39:fc:62:2c:
         e7:9a:b8:87:a6:9f:54:06:7f:70:66:8b:59:9c:d5:09:a7:e7:
         32:e7:04:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:35:57 2025 by rpki-client