Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          ro98itTGrPPRuyO0R+txCsdQZySTU9yn1ERtvtAz1ms=
Subject key identifier:   02:49:23:42:D4:4D:54:B3:90:1D:99:46:4C:09:03:66:F1:5A:55:FE
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       01988CFE765F27C6019EA11281519E7178A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          1335
Signing time:             Sat 09 Aug 2025 04:02:23 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:23 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:23 +0000
Files and hashes:         1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: UAwsthX0XKK3RrbVod8u0ZmbgQOXeDPv1CpJ4cXoe1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:76:5f:27:c6:01:9e:a1:12:81:51:9e:71:78:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Aug  9 04:02:23 2025 GMT
            Not After : Aug 10 04:02:23 2025 GMT
        Subject: CN=02492342d44d54b3901d99464c090366f15a55fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ac:15:c3:dd:b6:d2:e8:4c:a9:36:3f:d9:5f:
                    ae:82:7a:a0:20:25:86:90:8e:8f:2b:d9:02:51:3b:
                    4e:22:13:0e:40:30:aa:2c:1f:24:7e:a8:19:2e:c5:
                    fa:dd:51:f2:c0:c1:26:0f:a2:41:68:3c:ca:c3:43:
                    0c:30:89:af:43:a8:84:c6:ca:16:77:48:17:16:3a:
                    57:70:e0:53:fc:f5:5c:65:af:93:77:0f:52:00:05:
                    b3:8e:a9:65:e2:de:89:4a:63:f4:43:47:4b:87:de:
                    d3:ce:95:52:55:9b:7b:44:0f:e8:ec:7f:d5:55:88:
                    fe:a8:2a:ea:b5:af:13:38:c5:19:6b:53:fc:cb:6a:
                    84:d0:63:27:b8:ca:95:08:74:3e:6e:80:57:e8:58:
                    26:4c:d8:58:9b:87:50:e3:fe:85:f8:bd:00:fb:5c:
                    1e:d2:6b:14:3d:52:1f:87:7f:67:60:30:c5:72:27:
                    ed:1d:53:73:9e:0a:40:c2:12:6b:cf:47:f7:38:d1:
                    e8:a6:3e:38:4d:ca:27:be:c7:b3:0a:5d:f6:b4:55:
                    18:8a:95:8c:5d:5d:84:cd:39:67:36:eb:f2:d7:ea:
                    64:80:21:12:a3:91:c8:94:b4:75:e0:0f:3b:e7:48:
                    0d:8e:18:18:97:39:f7:ea:b9:c6:1d:33:1a:2c:a8:
                    62:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:49:23:42:D4:4D:54:B3:90:1D:99:46:4C:09:03:66:F1:5A:55:FE
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:11:32:f0:28:72:ef:5d:c3:59:58:76:06:c3:8e:12:1e:de:
         e8:2a:13:a7:09:b7:f2:01:1b:02:34:a3:c1:69:a2:bc:e0:69:
         12:4a:73:dd:7c:d8:c3:02:cd:1e:da:da:a2:86:6b:b2:e1:42:
         e4:b1:7c:75:a9:39:ca:6e:3f:40:b8:10:a3:7b:09:86:30:aa:
         c0:5d:93:be:a4:a2:75:06:8a:19:51:bc:a2:a5:c0:90:78:82:
         6f:9e:da:fe:3f:63:6d:db:97:42:1a:5c:df:85:a1:f6:1f:83:
         dc:f7:5e:0a:81:b2:81:95:3f:67:b4:e4:17:0c:df:52:ca:d4:
         14:42:cc:9b:fb:49:96:e5:cc:0f:25:18:f4:b4:ab:02:22:c2:
         8e:c7:38:eb:ed:c0:79:84:af:eb:74:e3:8b:74:ce:9a:e7:1c:
         d9:dd:c7:b7:b1:21:b2:7b:be:ea:90:31:77:4c:bd:f8:8d:ce:
         c6:85:6e:c6:7c:db:71:0e:57:d8:cd:a5:35:e4:ad:58:18:e7:
         4e:d9:60:c6:60:71:43:cd:1b:ff:c5:b3:af:8f:1c:ea:84:e4:
         79:14:2c:62:b0:8e:56:53:a5:40:87:2c:b1:0f:84:57:2c:62:
         8d:96:5e:86:f1:6d:3b:66:6b:7a:6c:c0:78:c5:94:f6:a1:cd:
         b9:bd:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:43:25 2025 by rpki-client