Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
File:                     e-714WwUZ9p6AvGSN2U65CsQllI.mft (raw, json)
Hash identifier:          BlbVQUymD9+qJegMUkCoIDLVtVDh8/u+nuZZeuSBm9g=
Subject key identifier:   FB:C3:A8:88:22:AF:28:34:76:70:DE:07:1E:35:52:72:E6:94:A5:26
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Certificate issuer:       /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial:       019873E282C0EBF6EC2C4053EC75AE5EB2E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:21 +0000
Files and hashes:         1: TTLplKYMw3ALMHBQOquflMCv_74.roa (hash: xOzJXshEgFbL72SqfgJ9QFBYYI8Jm5YZHiKPrlqNSRU=)
                          2: e-714WwUZ9p6AvGSN2U65CsQllI.crl (hash: fFIu65y4PEeZwXFU/IoabFta+Fma7dKcIBIwpt82Q/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:82:c0:eb:f6:ec:2c:40:53:ec:75:ae:5e:b2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
        Validity
            Not Before: Aug  4 07:01:21 2025 GMT
            Not After : Aug  5 07:01:21 2025 GMT
        Subject: CN=fbc3a88822af28347670de071e355272e694a526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:b5:94:51:4b:db:84:fc:52:b6:6a:a8:b2:
                    73:13:21:35:46:e3:1f:f9:74:f9:c7:2c:e5:d2:50:
                    14:cf:76:6c:12:68:a7:f1:81:b9:e5:d0:98:29:1b:
                    79:e8:42:d5:35:7f:3e:54:5a:3b:ab:ea:d0:97:98:
                    08:18:ff:b5:58:dd:27:d6:d0:67:be:d7:c6:b7:19:
                    25:29:12:1b:ba:9d:9d:40:22:6a:a4:fa:87:45:be:
                    09:79:a1:e2:33:7a:c5:70:12:e2:9f:b2:e1:ea:9f:
                    35:05:d3:09:b8:e0:cc:fa:b1:b5:c7:36:7d:27:e9:
                    d8:36:c6:df:81:18:2b:0b:61:e1:77:9a:be:c0:12:
                    df:97:40:8d:3b:b2:59:80:c1:5c:a3:6e:70:82:e0:
                    5d:8d:9f:3c:91:0d:fe:47:62:94:94:ea:23:24:a3:
                    dc:af:9a:80:62:10:2e:0d:7f:97:5d:5e:f6:56:c1:
                    d6:47:7f:9b:f8:52:d0:5a:8f:b8:4f:63:2b:0d:a5:
                    00:8a:a4:15:1b:4a:5b:1f:98:7b:45:f7:6e:32:81:
                    a3:71:8e:69:d3:a1:1b:f7:61:46:e3:d2:f2:6b:b6:
                    b9:5a:c6:c3:6d:ba:2b:a7:a0:3b:64:8f:ac:3c:a5:
                    ff:03:9b:ba:6c:6e:d7:bd:89:1c:42:b3:2b:96:47:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C3:A8:88:22:AF:28:34:76:70:DE:07:1E:35:52:72:E6:94:A5:26
            X509v3 Authority Key Identifier:
                keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:25:ed:94:4f:14:d3:49:49:a5:a5:cf:1a:5e:0e:4b:74:54:
         af:f4:01:b2:35:80:0a:b4:74:01:d8:a1:61:7b:12:a5:93:06:
         06:60:f2:e3:0f:93:37:af:62:7d:de:68:30:5d:9d:97:62:21:
         ef:06:f3:22:df:3e:da:63:c9:0d:e9:1d:3e:ba:2e:a3:4a:eb:
         50:21:b9:43:32:cf:13:63:ba:0f:f9:c0:8a:b0:9e:61:b9:ee:
         0a:ab:32:a1:32:c4:c7:25:5c:d7:31:76:2b:ed:34:d6:b2:8b:
         20:2c:2f:ed:16:2a:b5:1a:5a:2c:7a:77:f7:ef:a9:05:bb:82:
         57:93:04:6c:16:11:52:5c:00:96:9c:fa:89:c4:7b:57:ac:28:
         97:d3:36:b2:de:c6:eb:89:21:c0:5b:af:c5:db:55:5d:81:a0:
         01:f6:02:f9:ff:2c:94:8f:4a:d6:49:2a:26:6a:85:31:fb:ef:
         a1:03:72:ff:31:9d:fc:ca:93:f6:33:b6:2a:40:86:99:26:44:
         93:b0:5d:a0:7b:88:37:63:7f:81:cc:03:3f:f3:48:ba:33:98:
         df:8d:c2:1b:b4:3b:2c:b5:9a:72:9a:0c:08:7d:50:4c:fa:b9:
         a3:d9:a7:d5:b3:ae:dd:6c:22:2d:0f:7b:9a:7e:75:63:22:90:
         76:45:27:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:49 2025 by rpki-client