Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
File:                     EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft (raw, json)
Hash identifier:          Q8tRP9YJcr2Y7KD+D5YykPgqT4ZmIqTyJLf+ckSf4dM=
Subject key identifier:   22:E6:41:60:EA:1B:D2:D4:CE:09:8F:90:99:91:10:9D:EB:12:D5:24
Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
Certificate issuer:       /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Certificate serial:       01984BC17B29BBBC977FA38C797239E0A4A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
Manifest number:          059C
Signing time:             Sun 27 Jul 2025 12:00:27 +0000
Manifest this update:     Sun 27 Jul 2025 12:00:27 +0000
Manifest next update:     Mon 28 Jul 2025 12:00:27 +0000
Files and hashes:         1: 9Z7pH5NPnAqikrLECUV4KgNs0A8.roa (hash: MDaAz2g07ukZgilrtHl7Gypl8ywa3pObRf5OUvVo4KA=)
                          2: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl (hash: uI4i2lk94objzyWEb0Yo52/EenbuAYMMl5oY3MMSbb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c1:7b:29:bb:bc:97:7f:a3:8c:79:72:39:e0:a4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
        Validity
            Not Before: Jul 27 12:00:27 2025 GMT
            Not After : Jul 28 12:00:27 2025 GMT
        Subject: CN=22e64160ea1bd2d4ce098f909991109deb12d524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:6a:1f:05:6e:88:35:38:52:13:be:a3:1e:
                    e7:ba:46:46:26:20:d2:4b:bf:e5:f1:10:0b:e4:85:
                    a3:43:96:f7:ae:46:04:33:fa:e5:94:6b:f9:d0:e2:
                    ab:55:85:d0:fb:bd:9e:38:ae:1a:4b:ee:78:c5:b4:
                    82:a4:a0:8c:bd:a1:b4:b0:e1:05:6e:85:0b:bc:18:
                    27:9d:9b:20:ce:c9:37:ec:c9:fd:45:bd:9d:3d:9c:
                    f7:73:6c:dc:6d:64:a3:cd:1d:b0:72:87:fe:39:d8:
                    b9:a6:8d:91:4f:8b:55:07:68:8a:c3:96:50:8d:b2:
                    8c:c6:02:b2:3d:29:65:13:96:51:c2:e5:69:fb:bf:
                    0c:a5:3a:04:32:2a:24:65:70:f1:73:dc:c2:92:09:
                    ab:30:09:66:9c:83:5b:c9:ba:f0:b2:cf:00:82:a8:
                    44:6d:c2:a0:90:e9:e3:77:fc:85:ba:2e:98:71:b1:
                    40:76:13:0e:89:00:fe:ae:f6:c0:1c:9b:2b:92:5a:
                    c0:4e:29:9e:f4:33:22:45:ac:77:4e:62:69:f0:ab:
                    bf:f1:a3:80:04:7d:cb:6a:29:7b:3a:46:57:b3:81:
                    87:04:1c:99:03:77:82:01:1f:da:4d:8c:46:38:ee:
                    51:d9:50:d2:80:84:18:5f:c7:78:15:93:97:7a:ce:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:41:60:EA:1B:D2:D4:CE:09:8F:90:99:91:10:9D:EB:12:D5:24
            X509v3 Authority Key Identifier:
                keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e2:54:ed:05:3d:7c:a1:59:65:d0:a3:5f:41:1c:d2:8d:49:
         3e:9d:ac:f1:83:5c:7c:de:0c:f8:2e:67:65:f5:6c:02:1e:4b:
         9b:00:b7:03:18:49:b7:d9:12:75:31:33:41:85:4a:3a:52:40:
         aa:4e:3f:65:9c:d3:d4:c7:a2:1c:53:94:6b:3a:29:9a:d9:3f:
         d7:86:c9:38:da:0d:72:a1:e6:a2:06:07:30:3b:76:20:e6:f9:
         9b:be:f5:58:1d:5b:00:8c:00:5d:55:0b:4a:3e:4b:17:20:6d:
         2b:bf:f6:16:57:38:bd:b2:04:f9:d4:cf:b2:60:10:03:65:c7:
         28:c9:d2:ff:5b:e7:87:8a:c0:ab:b9:17:a7:38:e2:f4:27:5b:
         44:b1:fa:05:59:ee:c1:0b:1a:0d:0c:9e:a1:dc:8e:44:22:13:
         ad:28:ed:c0:dd:4b:ce:7f:70:ae:2d:a8:51:0e:12:4a:4c:36:
         32:eb:13:80:4d:59:58:6d:4b:a8:f1:3a:b9:1c:f9:7f:a9:af:
         a8:ec:d5:c2:9d:94:85:e4:af:d5:f4:5d:76:d5:95:e0:f6:d0:
         fc:0f:01:4d:4b:8b:4b:b5:2a:f1:a1:b4:97:45:c8:eb:a8:93:
         8c:d0:62:1d:3d:56:aa:dc:b2:28:07:ca:0d:5e:71:68:fa:17:
         ce:ef:e8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:46:40 2025 by rpki-client