Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
File:                     rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft (raw, json)
Hash identifier:          N+jKjjqy77O/+nqnvCZQOOOkLKMgNw7pj36rlxUO2pg=
Subject key identifier:   73:26:09:BE:90:94:8C:FF:E1:8A:60:10:A0:3C:F7:51:97:35:47:1F
Authority key identifier: AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3
Certificate issuer:       /CN=ac08da139b56f998be24665db14ad1e156768fc3
Certificate serial:       019848533A3DDF4BDE1A461C8051B2418D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
Manifest number:          02EE
Signing time:             Sat 26 Jul 2025 20:01:10 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:10 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:10 +0000
Files and hashes:         1: YtEd8YCCc2z1I29jS88Pyzvdbak.roa (hash: evRpvoMqfORfl1HiyuiXKz+wbjxY32bzO48vEqf95co=)
                          2: rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl (hash: 5qWJ1WaudfYMtW+IRXT6+61pLZBW1ntgkJUlki8VY/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:3a:3d:df:4b:de:1a:46:1c:80:51:b2:41:8d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac08da139b56f998be24665db14ad1e156768fc3
        Validity
            Not Before: Jul 26 20:01:10 2025 GMT
            Not After : Jul 27 20:01:10 2025 GMT
        Subject: CN=732609be90948cffe18a6010a03cf7519735471f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:12:a6:ae:af:96:c6:5e:24:46:43:17:d6:
                    af:6d:e9:79:4e:3c:2f:83:bc:a9:ca:75:11:89:e4:
                    98:94:b5:be:ff:fd:61:27:54:75:e1:c3:53:18:94:
                    2c:c0:52:13:5b:65:58:37:ad:58:0d:f1:92:a8:e9:
                    e4:28:46:62:87:38:c7:c9:d5:78:92:b0:33:a7:21:
                    f7:2b:4b:01:9d:69:7d:cb:10:41:cc:05:67:ac:4d:
                    a9:8c:b6:93:08:7d:71:f2:3b:88:36:72:b9:14:93:
                    54:1e:fa:92:5f:f8:d2:65:9a:59:4d:27:04:01:af:
                    82:7a:0a:45:1c:fe:1d:d6:28:d8:65:f4:6d:aa:51:
                    18:59:84:09:0d:bf:0e:9f:53:f6:a5:44:fd:55:50:
                    c3:c5:a5:99:cc:a8:24:02:16:b7:55:94:7c:69:95:
                    a7:86:74:66:e3:86:9b:26:c4:c4:b7:59:a3:0a:58:
                    65:3a:ce:06:6d:db:ec:f2:8b:f9:59:85:b9:4a:78:
                    fa:c0:84:f4:80:fb:fd:20:6f:f6:18:72:de:dc:cd:
                    3b:ca:a7:bc:db:0e:3b:8f:03:ce:bc:6e:10:03:67:
                    26:e8:ed:5c:d6:48:ee:bc:d6:ca:07:73:d9:1f:6c:
                    09:e2:f6:6d:a6:af:40:c1:1e:18:e8:81:20:19:3f:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:26:09:BE:90:94:8C:FF:E1:8A:60:10:A0:3C:F7:51:97:35:47:1F
            X509v3 Authority Key Identifier:
                keyid:AC:08:DA:13:9B:56:F9:98:BE:24:66:5D:B1:4A:D1:E1:56:76:8F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3e35ee-d88f-4c1f-b437-699cf7b09590/1/rAjaE5tW-Zi-JGZdsUrR4VZ2j8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:82:e5:27:99:9c:34:04:a1:d7:b1:14:f5:56:2f:e2:0d:
         44:0f:3c:33:7c:bd:01:86:38:a0:b9:48:81:fc:53:02:f8:1b:
         25:d7:ba:50:89:f9:1e:a9:01:76:01:7f:75:69:e2:31:f4:c6:
         f2:ed:32:f0:6a:94:05:b1:98:bc:e0:0c:e7:2f:14:8b:7a:2e:
         bd:49:c6:d2:c4:27:2a:45:4f:34:74:01:3c:ee:86:d8:4b:62:
         69:46:80:3c:0a:3d:e3:fb:8f:4b:da:0e:8d:f5:18:37:ad:22:
         08:33:0b:a4:75:27:f0:db:38:cb:04:db:98:16:9f:12:be:cc:
         47:39:dd:21:6a:0f:52:59:b4:2d:d4:d9:eb:83:5b:69:0f:36:
         86:c8:11:09:b8:bc:0c:46:17:c2:d9:ca:35:2a:09:28:e4:e3:
         04:e9:ea:eb:28:a0:26:26:dc:9a:d6:75:20:5b:49:ea:cd:9d:
         76:4f:0f:0b:fc:9b:e3:8d:31:df:ef:71:06:d0:25:82:5f:19:
         78:b7:eb:2e:19:47:01:12:91:30:5c:9e:d6:92:8f:d8:f3:56:
         2c:76:2c:c6:39:db:99:44:23:a5:0a:04:e6:94:24:61:a0:0c:
         61:5d:02:95:eb:e8:10:aa:d5:84:9e:42:86:72:86:7d:ec:d7:
         9e:4a:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:24:53 2025 by rpki-client