Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File:                     fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier:          EOtScVmAMTVOMOwTKTq3Wgv4HH85KvMAtSpCtzdxNvU=
Subject key identifier:   A9:3A:A4:80:69:A1:D0:7C:81:90:A8:36:1B:91:FA:24:E6:14:D8:2D
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer:       /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial:       0198726214694D92A419B54B7884CAE644EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number:          044B
Signing time:             Mon 04 Aug 2025 00:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 00:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 00:01:26 +0000
Files and hashes:         1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
                          2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: VTEfTNGQA9B0tAzguggdQQIadw0NuMxkSDDbfGOVN10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 00:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:62:14:69:4d:92:a4:19:b5:4b:78:84:ca:e6:44:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
        Validity
            Not Before: Aug  4 00:01:26 2025 GMT
            Not After : Aug  5 00:01:26 2025 GMT
        Subject: CN=a93aa48069a1d07c8190a8361b91fa24e614d82d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:21:d2:10:c0:24:2a:cd:0b:96:63:02:5d:
                    77:1f:75:35:98:df:31:2a:a7:8f:6c:b5:e1:4b:e4:
                    4c:03:90:47:04:f2:c4:76:68:02:2b:44:33:96:8a:
                    8d:8a:61:8e:f4:80:c0:4c:7c:c9:1e:29:45:9d:cb:
                    84:be:66:be:42:62:22:53:6e:f2:35:15:27:6a:c9:
                    d5:f6:6d:d2:68:e8:8c:03:76:88:f7:18:07:1c:76:
                    e6:15:3c:ac:28:7c:35:2d:d2:cb:b2:05:5b:46:57:
                    3b:b5:4a:92:cd:cb:ab:fa:14:73:12:fc:6e:3f:c6:
                    b5:a0:b5:52:6f:85:71:55:59:04:39:0e:c5:ff:54:
                    db:26:47:f2:c6:b2:78:e8:f4:7a:7d:13:b0:a3:c6:
                    44:84:e2:13:c0:33:3b:70:e5:6e:85:f0:96:da:2e:
                    16:70:3e:66:ea:71:a6:14:6a:f4:9c:fc:d2:e8:b3:
                    21:25:fc:bb:37:9d:86:de:82:7c:e0:f0:0f:fe:2a:
                    db:7a:c1:e7:e0:9f:04:87:2d:6a:57:a3:8a:37:e3:
                    a1:a1:29:9b:87:1e:6a:82:64:2a:6a:82:2c:18:8e:
                    dc:01:a4:20:16:7d:df:20:e0:41:67:77:8d:0b:b9:
                    9e:d6:dd:b5:34:ba:b5:05:bb:96:cc:60:28:d3:fd:
                    5c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3A:A4:80:69:A1:D0:7C:81:90:A8:36:1B:91:FA:24:E6:14:D8:2D
            X509v3 Authority Key Identifier:
                keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e7:fe:e3:a6:d2:9a:8d:17:b8:00:a7:71:ec:9d:9c:85:a9:
         20:8f:78:06:fb:60:7c:ca:37:4c:59:a9:b8:4d:0d:e8:c1:cd:
         f2:50:33:7d:55:f2:85:3e:cd:b4:5e:58:8f:b0:70:3d:f1:02:
         35:e0:2d:a3:b5:b6:df:16:79:8c:85:3c:fa:91:96:bb:7b:bb:
         4c:74:e8:bf:56:94:20:5c:a8:05:42:29:74:cb:6d:18:36:ff:
         fc:29:aa:71:d6:ef:a6:a8:f3:97:c9:fe:0a:2a:ed:0e:c0:d1:
         5d:1b:9a:f2:e4:80:3a:ca:46:0f:0a:ec:2f:57:fc:34:dc:7d:
         b8:11:89:4f:83:1a:e9:3e:da:c0:7a:c4:04:da:73:30:f2:47:
         55:17:fe:d3:bd:be:47:6f:66:e6:aa:35:27:66:e0:87:ac:b3:
         e6:cf:4d:6a:b6:d3:99:03:93:01:5f:1f:ef:b2:f4:31:b1:1d:
         ea:9e:19:14:9f:f6:63:6e:7f:85:cf:12:97:bb:47:02:67:46:
         b5:3e:d5:73:0a:0e:f7:ab:83:1a:79:28:21:fb:ed:70:bb:df:
         78:79:ef:a6:9e:80:ac:64:65:fa:94:ce:91:77:a2:83:49:d4:
         87:fd:81:27:78:e4:e3:c2:e7:b5:1e:87:4e:ad:8b:e3:ac:14:
         0a:4b:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:07 2025 by rpki-client