Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
File:                     egtky28YoRQXQjEFCwF5kxteSG0.mft (raw, json)
Hash identifier:          6XbEXY5MSipRUMyjl6cxELFhqqJ2IEcmOmVEW63gyVc=
Subject key identifier:   65:08:4E:41:4A:06:FD:8C:7B:8A:8F:99:C2:37:0A:C8:8D:4E:00:B8
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Certificate issuer:       /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial:       01984965821A04AE81877A87891E439AE44C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
Manifest number:          030E
Signing time:             Sun 27 Jul 2025 01:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:45 +0000
Files and hashes:         1: cChdW9IKygfKR2rAFYsXhx5RqmU.roa (hash: TyxqseiqVgQ1lk5s+kcYQAHiXGFHWxgFXhhbbIVGfj4=)
                          2: egtky28YoRQXQjEFCwF5kxteSG0.crl (hash: LF+ux1ZwxUjuMqXXK3AB3lOLlINYIh+xCbVA0fXxmXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:82:1a:04:ae:81:87:7a:87:89:1e:43:9a:e4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
        Validity
            Not Before: Jul 27 01:00:45 2025 GMT
            Not After : Jul 28 01:00:45 2025 GMT
        Subject: CN=65084e414a06fd8c7b8a8f99c2370ac88d4e00b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:f1:f8:70:2d:9f:74:74:4a:95:82:7b:99:
                    a3:94:cd:e5:83:74:e2:42:23:54:ff:93:f9:ed:17:
                    e3:ef:3e:41:a4:b0:d0:b8:4b:f1:41:8c:56:aa:d0:
                    48:d1:c9:06:4e:ac:0b:24:64:37:14:e6:39:94:8b:
                    21:39:52:3c:ed:52:ab:dc:bd:8b:a0:50:1e:62:55:
                    69:53:f6:bb:20:16:a1:f3:52:9b:dc:c5:8e:f1:08:
                    14:f7:28:af:d7:94:cd:6d:41:b3:4b:1d:c4:79:a5:
                    5a:e4:d6:7a:12:f6:24:47:fc:ee:ed:ef:bc:7e:aa:
                    b5:7b:ba:1c:d6:07:44:97:a6:34:9b:fe:53:7b:cd:
                    8c:fe:42:b5:52:73:05:45:5c:0b:5c:18:b1:00:43:
                    85:f5:f7:34:b7:04:c7:ed:96:5b:c1:b1:45:24:5f:
                    bb:1d:27:52:b5:4a:5f:21:ff:26:0f:87:0b:5c:fc:
                    de:8d:69:97:b8:bc:4c:21:5f:65:6e:f5:c5:f6:78:
                    68:98:48:28:98:e6:f9:f4:25:39:95:81:c9:5f:44:
                    2b:2a:d0:fe:f8:a9:b1:63:3b:49:a9:c7:a0:60:3d:
                    bd:81:0b:e8:88:af:2a:59:06:e5:7b:bf:71:a6:2f:
                    05:ef:7a:07:ed:6b:10:ca:78:e1:96:e2:4b:96:d6:
                    a9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:08:4E:41:4A:06:FD:8C:7B:8A:8F:99:C2:37:0A:C8:8D:4E:00:B8
            X509v3 Authority Key Identifier:
                keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b4:bb:18:e4:6f:00:ba:bc:d2:c5:21:a2:c4:3e:51:80:6f:
         b6:6c:ad:0c:ac:e1:91:2d:f8:59:bc:71:25:19:bd:26:34:7f:
         f4:91:df:67:38:ee:cd:16:77:a5:b6:c6:c0:d2:d5:7f:fd:03:
         c5:a1:32:90:db:0c:41:19:86:5a:c3:d6:4e:2a:cd:cd:18:a7:
         41:26:bb:10:51:e3:e0:84:36:b1:94:57:75:74:0a:82:65:19:
         28:7c:33:48:b7:3b:7c:8a:f2:43:22:ba:ba:a9:28:3a:d1:7e:
         0c:a9:25:83:cc:50:38:bb:b8:24:8e:0a:10:41:9f:72:ee:8e:
         a8:f9:a8:cb:99:ca:18:18:ee:02:7b:1e:59:c3:37:6d:5b:57:
         84:2c:1e:24:ff:1a:96:3d:05:2b:35:88:0d:41:d8:72:be:a9:
         2e:45:ce:0f:02:60:d1:c9:e3:96:e1:76:73:55:aa:cb:68:55:
         d3:d8:1d:41:28:e6:5a:da:85:79:5f:35:25:18:9b:5a:85:21:
         0a:64:1c:95:eb:00:04:67:8d:ad:94:13:50:7c:c4:e6:5c:52:
         0d:9d:f4:1c:49:5b:9f:26:6a:36:52:ae:aa:55:19:bf:46:bc:
         70:ad:3b:fe:f8:61:61:7d:97:e3:b7:08:55:b3:d1:90:d1:d2:
         ae:97:b9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:56 2025 by rpki-client