Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
File:                     EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json)
Hash identifier:          DaSrxfsDFt8r1D/jeqpV6zFRG1yd2Z3C7AAqrwJvQFE=
Subject key identifier:   22:97:C5:62:CC:81:FC:8B:16:B4:A8:95:46:F4:76:F9:F6:12:F3:46
Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00
Certificate issuer:       /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
Certificate serial:       019849D39B0A6DDC5C29B26B8443B43AB039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
Manifest number:          083F
Signing time:             Sun 27 Jul 2025 03:01:01 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:01 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:01 +0000
Files and hashes:         1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: ea7+A+166rwxPzlpMdU+DyfJ/ZytL3ynXH0WkFrne/s=)
                          2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:9b:0a:6d:dc:5c:29:b2:6b:84:43:b4:3a:b0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600
        Validity
            Not Before: Jul 27 03:01:01 2025 GMT
            Not After : Jul 28 03:01:01 2025 GMT
        Subject: CN=2297c562cc81fc8b16b4a89546f476f9f612f346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:9b:c6:7a:9f:d7:83:f7:ad:ab:47:87:87:
                    b2:49:91:e6:04:8d:32:f4:d8:22:ab:1c:1a:1f:bb:
                    03:39:df:cc:f6:af:67:da:72:91:d7:bf:6d:17:a3:
                    86:2b:d8:0c:dc:d2:e2:91:f2:d8:3f:24:38:1f:a0:
                    c3:12:76:1f:4b:36:ec:d1:4e:33:f5:54:d0:2b:f9:
                    85:2e:71:33:56:c2:00:aa:4b:34:d4:c8:8e:a8:f3:
                    e3:ac:2c:9d:23:32:b1:d6:69:74:23:c2:53:29:b7:
                    83:28:0f:7e:98:28:e8:80:b4:cc:e9:d8:80:7d:8e:
                    ce:6a:1b:95:09:b9:f0:79:e9:44:80:ed:77:b7:a3:
                    53:e4:ee:b4:72:9d:f9:ee:04:ee:dd:b0:f7:88:9e:
                    22:1e:d9:18:c0:4b:53:b1:d8:a0:83:0b:87:bc:10:
                    a4:87:89:5d:a9:2b:20:9e:1e:1a:b9:ab:99:ba:82:
                    20:fc:b8:b6:f3:0c:f0:54:d2:c5:33:f3:0f:5c:0d:
                    90:14:7a:11:34:3f:ef:b3:1b:07:72:62:90:1e:b9:
                    d2:23:89:b5:53:48:fc:20:0a:0a:b2:9b:63:32:16:
                    38:dd:18:a9:6c:c5:86:de:b9:d1:91:97:89:99:76:
                    0b:4a:3a:19:b5:9e:9e:68:20:26:94:74:a6:5c:67:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:C5:62:CC:81:FC:8B:16:B4:A8:95:46:F4:76:F9:F6:12:F3:46
            X509v3 Authority Key Identifier:
                keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cb:eb:ba:45:c4:2d:71:1b:2d:05:95:ac:c1:3d:ea:83:0a:
         d1:e9:e7:7e:38:0d:d3:37:0f:3f:c4:d8:92:de:23:55:98:3f:
         ec:5c:40:af:c1:e7:e1:a1:9d:f0:b6:66:6c:23:e5:d6:49:ec:
         78:57:cb:fb:f9:05:98:59:be:aa:1e:ed:a0:32:4e:2e:6e:30:
         d3:46:e3:90:52:33:fa:3b:a7:51:f0:aa:69:c1:1e:f4:e7:51:
         20:46:c3:e2:dc:b7:98:2c:cf:37:32:01:9b:0d:41:67:be:8b:
         d7:68:6a:c2:c1:64:65:da:8e:86:43:1e:1c:8c:26:87:a0:50:
         aa:f1:de:37:22:fb:d6:a5:b7:4e:12:e0:62:af:54:3c:dd:66:
         b9:db:30:cd:23:43:d7:aa:ee:01:c1:c4:28:77:3f:6f:96:90:
         d4:54:15:cd:7a:b4:41:53:f1:ca:c8:cf:8b:81:3d:87:a6:7c:
         df:14:50:b2:33:10:ff:10:21:e1:6f:03:b6:82:1a:1c:23:89:
         77:1f:dc:54:ac:e0:0f:53:04:35:68:4c:57:1d:45:ac:6a:46:
         d8:a7:05:46:b4:7f:fb:2c:17:77:8c:44:c2:88:f7:02:7d:d1:
         df:56:d5:82:53:30:e8:ef:cd:da:85:e0:b4:93:b6:1d:ab:00:
         7d:3e:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:13 2025 by rpki-client