Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
File:                     EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json)
Hash identifier:          y3doqY00rCc+fFofUb0UzXGR3gVS+Id7gz4ZmFhpGAg=
Subject key identifier:   D9:ED:55:37:AD:21:A5:10:9A:67:33:1C:DD:74:86:89:C3:EA:36:F0
Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3
Certificate issuer:       /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
Certificate serial:       0198481B7ECADD48F1964B39EAD851237180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
Manifest number:          1196
Signing time:             Sat 26 Jul 2025 19:00:17 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:17 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:17 +0000
Files and hashes:         1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: EbgTTcKYyQcSS3FQGrL3KdJVrEck8saZ4R7zJisLuyw=)
                          2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:7e:ca:dd:48:f1:96:4b:39:ea:d8:51:23:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3
        Validity
            Not Before: Jul 26 19:00:17 2025 GMT
            Not After : Jul 27 19:00:17 2025 GMT
        Subject: CN=d9ed5537ad21a5109a67331cdd748689c3ea36f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:f8:f4:7a:71:c6:2d:e9:d8:17:d8:00:5b:
                    f9:1d:81:b3:b9:6a:83:ce:6e:e8:99:bb:73:73:89:
                    60:3b:b4:05:cb:68:42:6d:e0:47:9b:36:bb:28:c1:
                    50:ae:30:0c:e8:3e:af:f7:14:18:a1:fd:3f:55:74:
                    86:9f:4b:5a:a3:5d:18:22:ee:eb:63:00:1e:bc:1f:
                    15:e9:17:0b:4f:cb:d0:95:b5:c4:a6:5e:ad:cb:1d:
                    cc:2f:c0:56:c6:85:0b:10:99:07:a5:3f:92:b6:93:
                    bb:20:66:d4:27:cd:bc:ab:87:6d:dc:e2:d9:aa:1e:
                    6e:be:14:8a:dc:85:9b:0e:9a:69:c3:d2:ed:33:fe:
                    fa:9c:cb:da:95:b9:89:4f:fe:02:2e:4e:a5:70:85:
                    ae:1d:32:25:71:17:55:ce:e7:8e:80:26:13:40:91:
                    de:40:67:3c:dc:0c:70:ee:f5:82:e9:39:20:6b:e9:
                    fe:d5:a6:81:c7:c5:84:fc:ce:04:2d:c6:2a:1b:72:
                    79:8f:79:82:03:32:46:91:91:fc:76:33:04:9b:46:
                    40:9a:91:3d:6f:21:77:6e:58:2b:ab:88:49:af:c2:
                    c1:06:86:7e:25:22:d1:5f:bc:0f:ea:f7:29:5d:46:
                    fb:f1:3d:1e:b8:65:aa:ae:7c:e5:da:8a:6a:2f:d1:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:ED:55:37:AD:21:A5:10:9A:67:33:1C:DD:74:86:89:C3:EA:36:F0
            X509v3 Authority Key Identifier:
                keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:64:d0:48:61:56:63:7d:2a:f5:f7:e6:26:b8:9d:d3:ef:16:
         13:29:a8:2d:ff:58:2d:25:6b:e0:7c:6f:47:83:95:98:9f:cb:
         48:a0:3a:7d:e8:18:68:49:0c:28:78:33:a9:f6:4b:49:5b:fc:
         62:9b:b4:8b:90:d0:ff:e7:76:f7:a0:93:8a:cc:60:e5:a7:ce:
         b0:e3:ee:29:ef:2a:eb:2c:8c:90:8f:75:0c:13:ed:dc:6d:4b:
         6c:56:c6:4f:42:b1:d0:68:01:3a:f2:12:28:39:51:d9:51:b0:
         64:2e:f3:53:6c:99:fe:de:1d:b2:d0:03:a1:55:b8:6c:54:9f:
         56:64:ca:67:f6:7f:ea:75:64:fe:e5:67:cb:ca:0e:9e:df:81:
         25:96:8e:84:df:79:0d:fa:31:60:b0:ec:09:c4:a2:c1:f2:0e:
         a8:43:da:88:b2:65:db:4a:fc:c2:7e:e6:b9:f7:cc:ab:6a:8f:
         45:f5:ce:ab:52:39:5a:c3:29:03:d4:c4:9c:a0:e4:35:09:10:
         64:6c:a2:cf:54:d4:ae:3e:31:70:0d:00:8f:31:e8:76:11:2f:
         53:af:c5:16:b1:7f:0c:76:a9:90:35:55:aa:91:ff:b2:6f:7a:
         86:f0:17:cf:f1:fd:3b:d0:fb:e7:ef:de:d7:eb:91:57:a6:ef:
         2e:7f:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:21:15 2025 by rpki-client