Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
File:                     x67yqz8unZrAH3J_cwr33x0EGA8.mft (raw, json)
Hash identifier:          JZfBkzmRraAN5hj8C+1OsQ+ojFYQkiKAyOWznRLu0m4=
Subject key identifier:   6B:7F:4E:B7:F3:00:F1:13:70:C8:F4:9A:8A:9A:1A:42:5B:06:F9:61
Authority key identifier: C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F
Certificate issuer:       /CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
Certificate serial:       01989524C56F4C5B8E6E9CCF5CDD4CB280D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
Manifest number:          153E
Signing time:             Sun 10 Aug 2025 18:01:11 +0000
Manifest this update:     Sun 10 Aug 2025 18:01:11 +0000
Manifest next update:     Mon 11 Aug 2025 18:01:11 +0000
Files and hashes:         1: DxifjliCAIMd-eDzduM7cNAzSqk.roa (hash: k6vDWiqYMoUqtaBDC4CmzDCftBkvIoXMd8Al1paV0vg=)
                          2: x67yqz8unZrAH3J_cwr33x0EGA8.crl (hash: M3GlrA6QuruyO3EzA81h7O21TUYR6m7xOp6HUGUtvI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:c5:6f:4c:5b:8e:6e:9c:cf:5c:dd:4c:b2:80:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7aef2ab3f2e9d9ac01f727f730af7df1d04180f
        Validity
            Not Before: Aug 10 18:01:11 2025 GMT
            Not After : Aug 11 18:01:11 2025 GMT
        Subject: CN=6b7f4eb7f300f11370c8f49a8a9a1a425b06f961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:00:f8:e1:a5:d9:d0:f2:be:1a:63:45:14:
                    63:19:10:5f:c9:c1:dd:93:cd:b4:5c:29:0f:a0:26:
                    c0:1f:29:d9:f5:07:8a:c0:c2:07:31:63:e7:cd:ef:
                    52:19:f5:80:90:1b:94:c7:2f:aa:ef:8b:e1:b5:05:
                    f0:ca:8a:6b:5f:28:6e:a8:4a:5f:2e:0c:cf:9c:96:
                    ef:17:5e:38:b4:26:7a:10:30:44:2a:ac:12:9c:55:
                    6b:f5:c9:00:24:14:f4:66:e3:04:b5:db:53:a1:67:
                    14:e1:9a:44:83:7d:6a:0d:bb:a1:45:aa:e7:73:be:
                    46:4a:8a:65:20:4c:3d:3f:88:8a:8e:71:1a:15:bc:
                    c0:68:89:b7:0d:49:3a:04:bb:a9:85:1d:5c:3f:4a:
                    84:7c:3a:8a:89:f5:5f:cf:2a:ea:59:a4:88:f5:8c:
                    4f:ae:36:78:e6:de:ea:28:ee:b1:c4:c2:80:ee:fc:
                    74:f0:8d:61:07:08:4e:c7:d9:7d:6a:95:4b:fc:35:
                    2d:1f:7c:08:1d:11:75:52:02:e4:8a:e2:b1:5a:e6:
                    58:4e:30:01:e9:c2:3a:59:8f:f4:b7:ee:2a:45:4b:
                    25:14:de:10:2b:96:45:14:2c:d2:3a:d0:bc:16:06:
                    a8:e8:5f:cd:81:d7:f1:ba:be:2d:3d:d4:0e:83:a7:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7F:4E:B7:F3:00:F1:13:70:C8:F4:9A:8A:9A:1A:42:5B:06:F9:61
            X509v3 Authority Key Identifier:
                keyid:C7:AE:F2:AB:3F:2E:9D:9A:C0:1F:72:7F:73:0A:F7:DF:1D:04:18:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x67yqz8unZrAH3J_cwr33x0EGA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f34f2b-3662-41c4-8270-92ed2a000f1f/1/x67yqz8unZrAH3J_cwr33x0EGA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:1e:e1:a0:af:7b:ca:18:40:00:c4:26:cc:a1:2a:fd:f7:
         e5:9e:00:e8:a8:62:fa:77:6f:69:39:78:2e:bc:34:b5:07:36:
         49:2e:06:4e:a3:b1:cd:16:5d:bf:8d:e8:ea:09:d7:a6:e6:e4:
         2d:56:14:dc:c7:63:60:9c:4d:b2:15:40:7c:83:0d:af:65:08:
         c2:5e:1e:46:9e:fb:66:88:51:11:85:9f:a8:f8:e6:62:21:cb:
         a7:d5:93:f7:8a:5a:a5:41:e7:67:96:c5:80:be:41:0b:4c:ab:
         ed:96:af:aa:32:97:56:bf:16:b6:c7:01:1c:ff:b7:4d:29:8a:
         b3:fc:f8:f3:d0:2d:a1:a3:83:a9:48:38:58:b2:94:68:a9:c5:
         3d:4f:85:b9:4a:69:5a:ec:01:28:f7:19:e8:ef:a7:6f:6a:e0:
         e6:8f:31:88:d5:e8:09:18:d5:b1:06:6b:2e:68:fa:5a:5c:eb:
         93:38:ba:1e:a2:0e:67:74:a3:0e:af:d0:40:84:d8:48:d8:a1:
         29:19:12:50:b6:49:dd:ae:47:05:b3:82:a3:f3:4f:f3:2c:20:
         cc:f2:6d:df:e2:d5:4a:bf:0e:35:0a:62:de:cb:90:db:61:7f:
         68:30:5e:79:ab:6d:dd:06:37:cb:d3:3e:d7:12:7b:2e:1d:fb:
         14:0d:15:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:30 2025 by rpki-client