Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
File:                     gEbjOGAXHvbsYOvPxexayRwldXw.mft (raw, json)
Hash identifier:          WQtmaomVa4PHOtMy8xV7mxMpX6t8cakUbMNdPinhTLw=
Subject key identifier:   39:03:56:26:34:D9:B5:E0:F7:B2:73:C9:1D:94:8F:DD:4A:C8:32:E1
Authority key identifier: 80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C
Certificate issuer:       /CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
Certificate serial:       019847E4E60D5FD1CB26901843E10917DF71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
Manifest number:          0798
Signing time:             Sat 26 Jul 2025 18:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:40 +0000
Files and hashes:         1: gEbjOGAXHvbsYOvPxexayRwldXw.crl (hash: +9/1k2yF/PvfjzMVFCZxEivC2wngUCTmb3tdIcpRL1k=)
                          2: jXrYu6LJxwivjMZClD5ZjOpwIqA.roa (hash: ck7XGlXmTp2bXTd8xLW029LSmXtDoPF5+uZ9OUYHI7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:e6:0d:5f:d1:cb:26:90:18:43:e1:09:17:df:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8046e33860171ef6ec60ebcfc5ec5ac91c25757c
        Validity
            Not Before: Jul 26 18:00:40 2025 GMT
            Not After : Jul 27 18:00:40 2025 GMT
        Subject: CN=3903562634d9b5e0f7b273c91d948fdd4ac832e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:2e:2c:70:6f:bc:01:48:96:c2:10:60:f4:
                    ba:24:55:3d:1e:44:ac:1c:97:6d:4e:8c:7f:f5:f2:
                    ef:84:cf:ec:7a:6d:eb:39:a5:5f:6a:e0:c9:c3:ae:
                    97:a3:87:17:96:1a:1c:a6:94:9a:69:cb:a1:e1:ab:
                    ef:67:8f:4b:12:1a:d2:96:fb:48:91:d5:ed:51:9f:
                    0b:2a:fc:a2:29:31:14:d7:08:95:8c:3c:34:b5:0a:
                    83:00:9a:2f:d5:58:fd:23:2b:09:4f:ca:de:9d:ea:
                    3d:64:9a:26:e5:7f:2d:a0:d9:fa:8d:03:20:fa:b0:
                    89:93:f0:33:2e:9d:cb:a8:ba:6e:1c:f3:b0:50:6d:
                    74:6d:3b:cd:32:a4:61:5f:58:49:fe:ce:bc:08:31:
                    62:6b:80:c7:0e:97:36:f6:40:ad:4f:b4:1b:3e:6f:
                    20:24:67:7c:59:b2:89:b3:c8:3f:2f:cd:cc:7b:a5:
                    c2:f4:95:c9:79:83:bd:ac:28:a4:87:b8:84:5d:c8:
                    85:d4:85:f9:ed:4f:25:f1:32:d1:00:80:26:ce:96:
                    42:a3:a0:82:91:8e:02:ee:4a:f7:eb:fe:4f:5c:50:
                    a2:f6:18:aa:12:97:43:55:ca:74:95:6b:3b:95:7f:
                    bb:c4:7d:70:76:93:57:04:b1:10:d3:46:39:54:32:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:03:56:26:34:D9:B5:E0:F7:B2:73:C9:1D:94:8F:DD:4A:C8:32:E1
            X509v3 Authority Key Identifier:
                keyid:80:46:E3:38:60:17:1E:F6:EC:60:EB:CF:C5:EC:5A:C9:1C:25:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gEbjOGAXHvbsYOvPxexayRwldXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/788d10-e8df-4dac-aa8f-d39ffc16ef89/1/gEbjOGAXHvbsYOvPxexayRwldXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:b8:cc:27:e3:65:bb:06:e4:50:85:35:65:33:13:9b:15:8e:
         f8:0c:78:35:65:48:ca:5a:8b:42:f1:97:c3:8a:ef:41:41:a6:
         dc:26:2b:39:70:22:17:18:7b:e6:69:ee:85:8e:05:62:73:45:
         ff:a4:31:bf:79:59:40:0b:35:8b:ba:7d:b2:35:a2:d1:d7:75:
         d5:00:62:14:4e:24:a4:32:70:d6:bb:0e:0c:be:a8:1d:ab:dc:
         33:de:7f:8d:42:4d:9a:b3:84:82:85:cc:1c:5b:ec:73:f6:97:
         3d:b9:84:9a:1c:a5:5d:bd:32:ca:83:4f:f9:7c:1f:2e:0b:74:
         bc:66:43:9f:26:3a:f1:15:1d:08:32:52:a6:35:ff:60:ba:06:
         38:ba:71:86:a1:de:0a:8e:b9:ec:eb:3c:a2:00:c9:a9:7a:56:
         40:1a:db:21:9a:a5:84:73:04:59:c4:ab:89:94:f2:09:4f:1e:
         a4:17:a7:72:65:8b:05:03:6b:7f:a5:ca:e3:0c:aa:35:37:9d:
         d2:ad:9f:54:a5:79:14:46:85:9b:65:5c:49:1b:67:e8:97:56:
         d4:db:ff:e4:2f:7a:f7:8a:c0:6b:20:54:d4:17:0e:5b:88:aa:
         91:1f:c2:ae:bb:9f:ce:32:33:6b:06:26:a0:d8:32:27:ea:66:
         16:8c:dc:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:16:53 2025 by rpki-client