Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File:                     EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier:          OWitSx802hUWES2S9lvgKYvzDzLYhewygDSV6MPaBoA=
Subject key identifier:   A8:8D:3D:D6:1D:6C:61:44:A7:96:C4:70:1D:4B:11:FA:CB:1E:78:51
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer:       /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial:       01987E9CBB0F4F3362F67E30AEA5DDF5924A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number:          14EE
Signing time:             Wed 06 Aug 2025 09:00:57 +0000
Manifest this update:     Wed 06 Aug 2025 09:00:57 +0000
Manifest next update:     Thu 07 Aug 2025 09:00:57 +0000
Files and hashes:         1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: 88kXp7AIs68kqrOS0TgqQ5E9TJpjm3DupfVDuNMWmNc=)
                          2: kJ6ZzA1fcsMngPwnFcWmPQ2TpJY.roa (hash: spn1/mEz9B8AiCWdxXSLx/VFzig4ReQEdpbCrXX5I3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 09:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:9c:bb:0f:4f:33:62:f6:7e:30:ae:a5:dd:f5:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
        Validity
            Not Before: Aug  6 09:00:57 2025 GMT
            Not After : Aug  7 09:00:57 2025 GMT
        Subject: CN=a88d3dd61d6c6144a796c4701d4b11facb1e7851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5c:90:82:1a:2d:bc:cd:46:12:91:ed:60:15:
                    c8:ac:dd:22:42:d5:d2:fb:b1:11:84:71:5c:f9:e8:
                    9c:f2:13:89:a7:80:de:fe:4b:d7:8a:b1:f5:ea:4a:
                    87:87:bf:be:f7:c6:32:81:02:3d:b5:82:34:69:e6:
                    15:da:b1:ac:41:5b:78:76:8a:51:3c:f5:8b:f9:23:
                    ea:00:9d:ba:9b:4a:29:2e:83:48:d0:5f:70:74:23:
                    1a:9f:98:b2:65:49:e4:03:cd:d5:a7:4c:15:ee:cb:
                    62:4b:5a:bf:99:68:f6:39:07:9e:49:33:28:69:80:
                    56:3d:14:9a:77:22:21:e6:bc:ca:d9:76:9b:7b:c0:
                    1c:24:51:83:84:ac:80:84:40:f9:65:7a:33:28:12:
                    d6:18:db:6b:eb:c8:c0:0a:63:a5:13:d9:00:2b:39:
                    f2:37:12:13:1c:fc:4b:d8:c2:ff:bd:23:9b:8a:89:
                    ae:10:88:4e:8d:41:28:04:0d:57:6c:70:72:8e:0e:
                    fb:31:1c:eb:1d:85:b9:d3:4f:d9:42:83:8f:4a:3d:
                    6a:be:65:7d:da:73:10:ef:99:8a:88:6a:e7:08:44:
                    cb:f2:5a:ad:03:5f:ea:f4:96:d4:fe:28:a5:ec:4e:
                    22:af:dd:8e:ca:cb:05:ec:92:a3:06:e7:5e:3c:57:
                    c6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8D:3D:D6:1D:6C:61:44:A7:96:C4:70:1D:4B:11:FA:CB:1E:78:51
            X509v3 Authority Key Identifier:
                keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:36:1b:1f:ae:8b:3b:93:87:fe:d4:0a:df:2f:c6:32:d8:d3:
         ff:d8:2f:fc:46:31:83:73:e9:89:f5:66:5c:f8:4f:f4:8f:d3:
         c4:56:e4:e1:0d:9b:7b:6c:49:d1:8d:94:77:a0:73:b1:cd:5b:
         d4:00:d8:e2:68:6f:39:42:65:0e:f6:8d:16:c1:93:8e:a9:06:
         06:b7:85:9c:95:9f:d2:39:94:53:0e:de:0f:f7:a8:e8:45:46:
         de:40:6d:72:7b:ab:78:6e:02:86:86:1a:e9:07:aa:0e:af:1b:
         fd:1b:43:89:91:4c:14:5b:45:9d:f5:4a:17:4a:7f:97:3b:51:
         2f:10:55:71:06:e5:35:d4:c6:ca:dd:7d:c9:e3:da:48:ab:b2:
         ac:31:e9:cb:ea:db:71:d9:ec:39:da:b0:a9:c9:81:b4:30:a5:
         69:14:90:72:ba:10:04:61:8b:17:dd:44:01:aa:bb:a2:65:5a:
         56:73:04:a6:74:6a:ad:1e:8d:0a:ed:50:c1:d2:ae:cf:c2:f5:
         85:7b:73:28:03:36:5a:28:85:4a:46:6b:16:5e:34:bb:21:dc:
         77:03:9e:3b:6f:29:1b:0c:45:f0:78:62:6c:3d:22:fb:4b:a9:
         ae:7a:a0:1b:a9:40:75:73:99:1b:b9:93:93:55:52:d3:19:cd:
         9b:4b:7e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:43:54 2025 by rpki-client