Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          qLMvLP+eHysXek/c6qlB9Xl/5OwmCmo7T9LoG8MOqO0=
Subject key identifier:   22:04:FC:5C:97:E8:5B:A5:AF:B0:41:42:D3:BD:4F:A0:BC:CB:02:13
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       01987306DD3750BB3900824FAA6724CB865F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          15A9
Signing time:             Mon 04 Aug 2025 03:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:26 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: +aT1c3Dd0ZGhxqbGKFzXCDS560ewCTWPXV9w/HPbXPg=)
                          2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:dd:37:50:bb:39:00:82:4f:aa:67:24:cb:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Aug  4 03:01:26 2025 GMT
            Not After : Aug  5 03:01:26 2025 GMT
        Subject: CN=2204fc5c97e85ba5afb04142d3bd4fa0bccb0213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:f1:4e:4b:fa:81:b4:02:fc:f1:9a:ef:fd:
                    96:df:9f:d2:65:b4:ca:a6:0b:e1:28:96:0a:d3:09:
                    96:64:a0:1f:4e:2a:77:17:1d:16:d5:e4:5f:e7:d8:
                    2c:38:2a:fb:4b:56:0d:cb:e1:04:30:98:5b:c0:ea:
                    f6:f6:3d:21:4a:f5:2e:8e:71:c5:96:e8:b8:19:cc:
                    60:1b:0d:f3:67:09:8e:3f:28:58:56:16:69:52:f2:
                    78:c3:f4:56:54:a4:18:b3:ac:2d:af:db:d6:81:fb:
                    d0:ba:8c:d9:26:fe:fa:b2:96:34:3a:a9:b2:b0:c5:
                    f9:04:4f:6e:b5:b9:9c:86:2b:ad:51:ec:94:7e:d3:
                    98:5f:86:d5:c4:b6:4d:8c:c3:09:89:ff:ee:be:dd:
                    73:80:90:f6:fd:2f:dd:c3:b1:70:18:53:fa:e4:a6:
                    81:cf:c5:83:61:ec:c6:b3:6e:c7:e0:f1:e0:f2:f0:
                    8a:7e:a9:3d:78:88:f5:b8:ec:8c:e8:fe:b8:03:8f:
                    79:d6:45:78:31:bd:41:e0:92:48:1d:99:d3:5e:75:
                    b7:04:7e:fb:d4:6c:29:9a:ae:3a:5a:91:cd:6e:8d:
                    6a:f6:96:39:c1:f5:19:39:0e:88:44:3e:d3:b6:6e:
                    2b:1c:95:3d:0c:51:0c:e2:3a:15:ae:c9:d8:f5:ee:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:04:FC:5C:97:E8:5B:A5:AF:B0:41:42:D3:BD:4F:A0:BC:CB:02:13
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:eb:f2:79:a5:4a:19:84:29:48:37:71:4f:ec:79:25:a3:49:
         90:c0:e6:ab:8e:a1:ec:39:58:4c:26:c4:5e:6e:6d:2d:39:3c:
         40:f2:05:67:7f:59:89:5b:eb:a5:16:dd:64:9d:2a:96:8d:ea:
         dd:a2:eb:30:46:50:6e:93:40:7b:0a:c3:0a:bc:ed:47:a1:4c:
         94:4f:d8:65:9c:1b:bf:ca:02:78:1d:66:29:95:7c:bd:99:0a:
         2f:37:eb:42:a7:93:6e:aa:a8:14:d3:e5:31:89:c3:bc:d3:05:
         17:19:19:66:99:80:94:61:05:d7:2d:8d:47:b5:a6:b5:21:5e:
         2b:f4:13:0f:85:c9:f4:f2:10:57:72:8c:09:ca:75:01:07:fe:
         e3:a2:87:6c:7b:f8:da:55:81:16:19:38:f3:ee:fd:22:f9:93:
         6d:9c:b0:16:d7:50:e0:f1:d3:a6:29:00:f4:19:12:6a:6d:0c:
         fa:90:55:fa:4a:c2:06:0b:ad:e6:4a:91:68:85:a3:3b:b4:2b:
         0f:4e:6b:e8:3e:a4:34:53:06:45:c6:04:04:e6:bc:c5:03:62:
         06:79:4c:22:93:e3:f5:e7:ce:13:1f:c5:8e:df:10:51:6c:36:
         97:2d:64:02:f8:b8:37:af:a3:93:4b:0d:ce:c6:45:03:12:23:
         3f:3f:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:14 2025 by rpki-client