Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
File:                     ECWK4MJsZaamlm8_fmmGM7kUNCY.mft (raw, json)
Hash identifier:          BH6ayNDvyYy9iUIEF+6wUHRKImyB+WQ9O/7wL6YxC0Q=
Subject key identifier:   E5:77:CF:9F:7F:C0:5F:FA:A1:65:70:EE:5A:59:E2:E3:53:C7:14:6F
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Certificate issuer:       /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial:       01984B8AC093A3719EDCC2ACCD7FC124E781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
Manifest number:          0285
Signing time:             Sun 27 Jul 2025 11:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 11:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 11:00:41 +0000
Files and hashes:         1: ECWK4MJsZaamlm8_fmmGM7kUNCY.crl (hash: F468KwD5xUECaJQJtjO8bvNaxWVdbSXBDpD862hykRo=)
                          2: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (hash: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:8a:c0:93:a3:71:9e:dc:c2:ac:cd:7f:c1:24:e7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
        Validity
            Not Before: Jul 27 11:00:41 2025 GMT
            Not After : Jul 28 11:00:41 2025 GMT
        Subject: CN=e577cf9f7fc05ffaa16570ee5a59e2e353c7146f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:d7:08:f7:6e:dc:40:59:2a:35:a2:6c:88:
                    29:0a:3f:f3:2c:18:9a:01:69:57:c9:ae:30:0f:48:
                    a5:ab:87:2f:a6:2a:69:21:00:57:b9:3e:a3:86:58:
                    4e:80:aa:27:d3:51:c7:07:32:0d:64:79:b0:a4:20:
                    51:ec:9e:01:db:65:2c:6a:a8:35:75:fe:55:53:4b:
                    23:31:5d:76:c6:f5:60:c1:f0:0f:ea:82:95:6a:46:
                    23:66:e7:f3:5a:6d:9d:59:e3:ef:70:5c:16:e1:63:
                    14:b8:c8:a9:49:2d:14:49:c0:91:90:1e:5c:31:63:
                    1d:22:d3:96:10:24:69:c1:9d:20:b4:2c:12:8a:ec:
                    85:4f:2c:d4:33:f3:e0:83:c0:a1:b0:71:b6:cd:4e:
                    ae:3f:99:7c:67:bf:ce:9d:46:b7:73:ae:c3:7b:86:
                    e4:4f:65:2b:e4:99:15:c5:46:85:36:87:b2:83:81:
                    39:ad:c5:cb:47:9a:75:73:4e:52:2f:49:ed:90:cd:
                    c5:c6:35:70:86:46:d1:50:22:11:b1:37:a0:df:98:
                    4d:5d:22:f6:2f:8b:f8:b9:ca:49:b1:c2:a9:9b:1e:
                    5a:bf:fd:1a:68:75:0b:67:61:ca:8c:b8:1f:8f:e8:
                    08:62:c4:8f:4d:52:15:9f:6e:79:1a:87:fe:fe:bb:
                    9e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:77:CF:9F:7F:C0:5F:FA:A1:65:70:EE:5A:59:E2:E3:53:C7:14:6F
            X509v3 Authority Key Identifier:
                keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:14:29:c6:13:14:90:94:ad:e8:0d:73:a0:15:05:2b:0b:4b:
         b1:a5:bc:c7:f7:9e:0e:76:22:75:5b:a0:49:2d:fb:e2:82:cf:
         42:a6:ab:a3:6b:84:c8:9a:9b:70:55:a2:8d:34:94:8e:ed:b8:
         5e:b0:ae:21:e7:75:b7:59:69:5a:e9:8e:26:25:be:5a:32:28:
         f2:c2:b2:69:86:0d:1a:46:6f:15:6e:2a:ab:52:c2:e4:a3:00:
         fc:25:4a:1d:51:d8:3d:ff:0b:91:90:e0:ff:29:4d:fe:4b:96:
         8e:d0:00:77:eb:ac:af:38:a3:e3:dc:4a:75:5d:f6:2b:d7:89:
         81:63:61:f9:f2:02:94:c0:00:d2:95:b1:74:e9:d2:ae:5d:31:
         ea:3e:93:5e:c2:22:ee:c9:fd:af:19:8b:c4:4e:5c:f8:1a:78:
         85:d5:63:7f:46:18:c4:f1:5e:f2:9e:a4:20:82:36:a8:b5:0d:
         86:91:a5:62:b5:08:5b:db:f6:61:85:c0:14:35:28:03:af:49:
         a4:19:0d:e9:7c:d3:3d:37:7e:2b:aa:c3:3a:37:db:33:65:5f:
         36:25:3e:3c:67:8b:da:46:49:7e:a7:ac:f8:53:4a:f9:fe:fa:
         bc:d6:04:a0:c5:46:20:89:1c:a4:c4:07:f3:4c:62:31:37:cb:
         61:d0:ed:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:43:44 2025 by rpki-client