Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File:                     72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier:          nyZP36qPgCb9rjxFKicRie9OyNvx8ZcbLmdgXDBjbWY=
Subject key identifier:   86:63:FF:CE:44:4C:CE:1D:AF:9A:1B:4A:01:53:D7:67:E5:7B:19:0E
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer:       /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial:       01984AAF01849DD5C604BC0CB551EDED5553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number:          116C
Signing time:             Sun 27 Jul 2025 07:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:39 +0000
Files and hashes:         1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=)
                          2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: xHzEkjS6hncD7EFQbomn4gBRNb5tbtVmEV7jz7RSf60=)
                          3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=)
                          4: r4atOptdC6a6FHG1kXkjFGQ5-EY.roa (hash: GbuO6d9xteQLfWqVWtWpVZS3uLnvkgQXk9dxLy6mvT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 07:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:af:01:84:9d:d5:c6:04:bc:0c:b5:51:ed:ed:55:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
        Validity
            Not Before: Jul 27 07:00:39 2025 GMT
            Not After : Jul 28 07:00:39 2025 GMT
        Subject: CN=8663ffce444cce1daf9a1b4a0153d767e57b190e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:46:72:d4:5d:23:7b:1e:d9:31:24:8b:6d:
                    aa:e7:05:7d:0c:6c:1d:7c:2f:df:ef:cb:f7:38:cf:
                    f1:51:b7:0c:57:4a:58:ae:d2:d5:64:0e:49:5b:82:
                    71:bc:5b:f9:ad:13:e9:67:9f:46:20:36:c5:1f:3f:
                    e8:57:dd:bf:68:49:67:bb:59:1b:e6:57:98:bd:19:
                    d3:7b:42:4c:61:21:e8:23:6d:b1:89:96:dc:02:d6:
                    74:d1:db:0d:07:71:7c:bb:f9:e3:41:ce:f4:72:f7:
                    8b:5e:b1:17:6e:dc:b9:00:dc:66:d0:e6:90:57:9a:
                    da:3e:53:c0:97:0e:75:b5:ce:04:5e:ac:ec:20:c7:
                    67:c4:03:68:96:46:5e:1a:5c:ce:fa:99:e8:3a:68:
                    1b:f8:38:01:bd:90:f0:49:4e:bd:15:18:cb:b5:be:
                    ac:e5:2a:9c:08:cc:bf:2b:a9:ee:25:2d:c1:ae:d1:
                    91:14:96:fe:03:7a:fb:5e:5b:92:68:7e:67:9d:8a:
                    83:1c:c2:e8:71:71:4e:10:c7:4e:90:da:da:e5:67:
                    c7:c2:05:65:79:b8:53:18:73:3c:49:a6:a0:5e:00:
                    47:85:1a:3d:fe:79:7e:a6:d7:d2:b8:65:d3:63:5e:
                    39:80:3e:c0:87:a6:5b:ca:09:5b:12:de:f3:89:b2:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:63:FF:CE:44:4C:CE:1D:AF:9A:1B:4A:01:53:D7:67:E5:7B:19:0E
            X509v3 Authority Key Identifier:
                keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:48:89:ce:a3:78:50:8b:23:54:94:98:d6:f5:04:8f:96:9d:
         d8:c9:cf:02:1c:2f:ba:4e:46:ef:62:9c:b1:1f:9f:4c:cb:d1:
         2a:99:3a:c1:b3:fc:d7:ad:75:c9:3a:f0:84:c7:7a:5d:97:e2:
         61:df:42:1d:29:e6:e6:f4:98:d5:10:dd:0f:03:f1:83:51:97:
         99:2c:e1:0a:8f:e2:70:54:98:09:52:c3:1b:4c:b8:6f:90:0e:
         2e:df:9e:25:ba:9d:f9:d1:da:f0:55:c9:a3:22:69:3d:66:10:
         55:0c:d4:e2:c5:c8:9c:5a:cd:a7:53:a9:15:ef:53:26:f0:b2:
         b6:3f:28:87:16:dd:08:ef:2c:95:b9:c9:26:f9:c7:97:ed:77:
         23:cd:e7:83:5b:61:bb:a6:0a:f9:25:11:ae:75:d8:55:b7:b6:
         ae:45:42:20:1b:9f:9d:7c:65:ae:b9:25:9f:fe:31:05:9e:3f:
         ca:05:6c:33:53:9a:af:47:39:38:e4:64:7c:7d:b5:57:4f:79:
         93:41:c4:48:a2:37:2a:f4:02:a2:4f:94:54:64:b3:4e:a1:8c:
         0d:4c:f2:a2:32:e8:38:44:fc:f7:08:0e:7b:02:48:db:8e:cc:
         ee:45:eb:c8:fc:fa:b3:c4:94:88:48:79:ef:3e:48:f5:b6:48:
         7c:0e:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:51:57 2025 by rpki-client