Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
File:                     EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json)
Hash identifier:          DFX2q8SSvr2soY8ZDqIk4huBLB1NqeLSd0F9P1r+/LI=
Subject key identifier:   D8:32:26:04:D5:80:FE:99:73:9A:34:BE:5A:D9:44:AE:DB:76:A4:14
Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
Certificate issuer:       /CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Certificate serial:       0198439A94DDF6B00C6FA4CBEFF98958D368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
Manifest number:          117B
Signing time:             Fri 25 Jul 2025 22:01:00 +0000
Manifest this update:     Fri 25 Jul 2025 22:01:00 +0000
Manifest next update:     Sat 26 Jul 2025 22:01:00 +0000
Files and hashes:         1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: G0cqr8d6eL/Pps3gF3ftZh3Xwsl96/eOie80kKrolds=)
                          2: VxIYrmkfaudMi3uvOgmfLEYS9i4.roa (hash: HVOJKOfT05YM4fO+NpvciBLZRFLtFXYsLyo0g2RCD3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:9a:94:dd:f6:b0:0c:6f:a4:cb:ef:f9:89:58:d3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82
        Validity
            Not Before: Jul 25 22:01:00 2025 GMT
            Not After : Jul 26 22:01:00 2025 GMT
        Subject: CN=d8322604d580fe99739a34be5ad944aedb76a414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:87:34:49:f4:f5:f5:8e:c0:d7:18:1b:d4:
                    0c:09:2a:70:0c:31:f3:60:44:9e:39:3e:d9:8f:54:
                    b3:fc:a0:8c:89:55:a1:01:a4:8a:45:85:12:0d:ea:
                    7e:ad:cb:7e:d9:d2:99:18:79:e9:16:80:97:3b:da:
                    a7:1b:74:94:6c:ce:9e:d9:85:73:c6:28:76:27:15:
                    76:12:be:c1:7f:92:a2:9d:9d:96:f4:8e:2f:d7:65:
                    05:3d:38:7e:1b:03:6c:26:04:53:25:2f:79:0c:9c:
                    38:24:13:87:e4:17:65:bc:8a:85:22:e8:76:7f:b9:
                    44:17:b1:df:d1:6e:f7:1b:d0:5f:d6:9d:e4:92:4c:
                    65:e2:75:cb:3a:c3:74:15:fb:82:bf:e7:2f:d0:05:
                    cb:10:a1:78:3b:a1:6a:3a:15:28:ba:bc:3d:4f:c7:
                    92:b4:58:31:cb:40:96:b5:78:55:32:39:6e:03:0c:
                    63:12:12:fb:be:d5:09:d4:7e:ad:34:ef:27:4b:b7:
                    86:5a:ae:0a:74:c1:e2:45:c6:02:06:12:61:fb:b6:
                    bd:12:34:d5:7d:46:fc:70:a0:90:77:98:03:1b:40:
                    7c:f8:2c:e3:85:f2:c2:f4:bc:7f:44:69:e0:1b:bd:
                    6a:45:bc:de:87:41:63:ac:e8:2c:60:bc:06:d1:d7:
                    c6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:32:26:04:D5:80:FE:99:73:9A:34:BE:5A:D9:44:AE:DB:76:A4:14
            X509v3 Authority Key Identifier:
                keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:41:f7:55:67:5d:4b:74:28:5a:13:6e:7f:92:8a:11:12:86:
         84:5d:5e:36:51:42:ea:ff:a2:39:4d:3d:f3:01:89:f3:d6:78:
         9a:6a:83:0e:cb:65:e8:fa:bd:f4:6f:e8:0e:5e:e5:5a:51:88:
         e6:65:4b:b7:f6:d4:03:a5:40:de:80:5f:28:c5:8e:d1:9c:3e:
         ee:49:06:9e:dc:47:d8:09:d1:8a:fc:62:aa:d2:2a:1c:d9:c3:
         6b:24:62:85:96:92:64:78:f0:97:30:b8:96:d8:dc:71:f4:61:
         5b:ce:00:9c:ae:ea:b3:4e:bc:8d:aa:72:cd:25:36:6e:ea:65:
         cb:13:7b:fb:c1:aa:11:03:5f:eb:63:1e:f4:7c:b7:08:b0:13:
         60:80:46:93:ac:ae:1e:98:12:70:b7:b6:78:16:8f:49:51:62:
         4d:1b:93:ae:7d:a3:aa:80:a0:41:c3:01:a7:31:04:5c:59:49:
         71:17:3c:7a:32:d6:d4:99:ba:f2:cb:3e:a3:96:62:b8:a5:9b:
         ba:d1:e4:9f:d5:f9:5d:b6:6d:91:22:8b:7f:45:2f:db:3b:b6:
         6f:0b:f9:07:d0:21:b0:25:e8:1f:29:a4:12:e3:cd:53:2b:ac:
         93:eb:41:30:38:28:41:59:c3:94:fc:97:0c:a7:55:b6:86:81:
         8c:7b:4f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:29:10 2025 by rpki-client