Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
File:                     eUif00bnIUhmFZrC8OycmQxPFLk.mft (raw, json)
Hash identifier:          RKlGaYIQF7rDidecmLkMCQwfgQCOlhHqN3D/Q9NIdPE=
Subject key identifier:   A7:D6:B9:2F:3E:CD:94:DF:A0:64:7C:17:ED:3A:03:3D:4F:E4:FF:3C
Authority key identifier: 79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9
Certificate issuer:       /CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
Certificate serial:       0198469B50CE62337811561B7302C7B97D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
Manifest number:          045D
Signing time:             Sat 26 Jul 2025 12:00:40 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:40 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:40 +0000
Files and hashes:         1: YbVpJmm5d19rM-zYZeA0ZWdtDMg.roa (hash: l5rWO723DVA6iEz8C5Lvzh9vlRYqelqcHe5HXOP/cpM=)
                          2: eUif00bnIUhmFZrC8OycmQxPFLk.crl (hash: dCpYyXJl/TWO+1CE08FsNCJ/jloW5q9Ls/yODnzvgC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:50:ce:62:33:78:11:56:1b:73:02:c7:b9:7d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79489fd346e7214866159ac2f0ec9c990c4f14b9
        Validity
            Not Before: Jul 26 12:00:40 2025 GMT
            Not After : Jul 27 12:00:40 2025 GMT
        Subject: CN=a7d6b92f3ecd94dfa0647c17ed3a033d4fe4ff3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5f:e3:a5:26:9f:7b:01:6a:28:4d:b0:d7:c2:
                    d4:f9:5c:f3:a7:83:28:6b:12:54:b1:49:91:24:69:
                    4a:0a:4f:5a:60:ec:8d:4f:c3:00:6b:d7:f7:e9:50:
                    58:69:e2:9d:33:fc:a8:4a:56:35:28:5b:1b:79:0a:
                    b3:21:70:9c:c5:63:c3:c2:d2:c3:9c:dd:58:16:c4:
                    ee:9f:2f:10:10:45:ca:67:f5:21:e6:c3:3a:23:d6:
                    6d:c4:1d:06:b3:04:67:47:68:a8:a8:1e:75:d9:cd:
                    f9:b5:f4:a0:69:c0:57:d1:b7:ac:3c:8a:6a:b4:44:
                    38:f8:94:3e:d3:f5:bc:e0:09:db:ed:fc:41:31:61:
                    28:a5:69:a8:ea:ed:7c:1f:12:72:5b:8f:03:6c:a8:
                    06:a2:dc:7c:47:26:49:7f:35:ad:86:ec:21:a1:92:
                    bc:7e:aa:13:4b:a2:b8:87:69:8a:70:62:17:94:75:
                    76:41:e3:e2:84:90:cd:f1:a5:fb:e3:2b:78:7d:9f:
                    e2:9f:8f:30:c4:1b:7c:73:c0:0e:4f:ad:e6:af:31:
                    a8:79:c0:e1:be:8b:cb:f1:35:4f:ed:d4:eb:00:f0:
                    7e:4b:ce:37:2f:a0:7d:40:46:fd:d3:b0:a9:ae:9e:
                    46:0d:98:74:a0:33:01:dd:a8:44:6e:de:0b:f5:12:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D6:B9:2F:3E:CD:94:DF:A0:64:7C:17:ED:3A:03:3D:4F:E4:FF:3C
            X509v3 Authority Key Identifier:
                keyid:79:48:9F:D3:46:E7:21:48:66:15:9A:C2:F0:EC:9C:99:0C:4F:14:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUif00bnIUhmFZrC8OycmQxPFLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5e30f1-053d-4607-8c45-09ecc681a386/1/eUif00bnIUhmFZrC8OycmQxPFLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4b:6f:71:d0:a5:d6:74:09:af:50:59:ba:7c:48:c7:3f:a1:
         84:26:20:f6:41:c8:24:63:8a:df:70:13:a1:52:fc:79:e0:da:
         2d:ad:ac:e4:8a:09:5c:59:3b:1a:09:13:62:d2:ca:e3:1e:2a:
         a8:5c:dc:2e:89:4a:2f:e7:ff:f1:60:22:8c:73:e5:6f:50:22:
         f8:23:b1:da:c9:cb:41:ea:e1:13:75:64:28:b4:fd:f7:82:df:
         57:08:6c:d9:37:51:ec:00:1c:b5:88:75:91:56:5f:a4:d7:3b:
         27:b1:07:62:e7:68:66:ad:d3:75:42:2a:14:46:77:75:e9:7c:
         2f:2b:51:b2:2b:c0:1c:3f:cd:44:2d:90:4d:81:f9:71:af:d3:
         2b:3d:14:5e:30:cb:c1:e8:af:49:4d:6d:f9:ae:bd:cf:e5:2c:
         83:82:03:1f:99:7d:0d:55:aa:5f:1a:9e:8f:5b:e7:2f:bf:3c:
         22:46:40:e6:aa:30:90:a4:5d:f8:69:13:c3:fb:65:00:fc:d3:
         f5:2a:24:a3:39:82:cc:b3:b6:b1:4f:b5:23:97:15:5e:54:f0:
         31:20:cf:be:4a:6e:a5:24:13:c7:db:db:e4:e7:26:8d:ae:0c:
         e5:53:ee:3d:73:02:e5:d7:55:c5:1e:26:a3:81:c8:7b:1d:74:
         8c:31:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:41:06 2025 by rpki-client