Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          tZ7Zo4NNRMqt4CodakiTbklfwgwvV/6OnPSiF4Z7CaM=
Subject key identifier:   8B:08:23:26:95:20:87:71:4C:B8:31:19:74:6E:C0:C5:25:6C:E0:8C
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       01984965CB9214185E1F251E6C54A0CFA638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0A84
Signing time:             Sun 27 Jul 2025 01:01:04 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:04 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:04 +0000
Files and hashes:         1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: uqSgeMthnfSMSoV7CTrkIdYVC5/eGjFw/fln0RMJlmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:cb:92:14:18:5e:1f:25:1e:6c:54:a0:cf:a6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Jul 27 01:01:04 2025 GMT
            Not After : Jul 28 01:01:04 2025 GMT
        Subject: CN=8b082326952087714cb83119746ec0c5256ce08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:07:02:74:93:7a:00:7c:03:3b:d5:76:72:9d:
                    fe:9e:43:d8:bd:28:19:83:f6:33:73:b8:36:5a:02:
                    93:55:18:50:88:f1:19:8c:32:83:6b:e0:57:ed:68:
                    6b:c5:e8:32:21:68:a5:9e:e9:af:80:92:55:47:d5:
                    33:3b:8f:b3:39:d8:3e:7e:1d:c6:47:c9:7b:a7:58:
                    86:b0:08:68:6c:ca:f4:50:35:a2:a0:f7:fd:f0:3b:
                    5c:51:7c:75:9f:6a:22:84:f4:88:5c:5a:9a:39:38:
                    42:f8:5f:44:e2:91:d8:92:99:97:7e:54:11:15:d6:
                    6c:c0:0f:66:35:93:7b:cf:19:c2:c6:c6:d6:76:25:
                    13:2c:70:64:82:7d:96:e4:58:20:95:55:6c:a0:d8:
                    42:61:42:52:b5:7d:60:d7:a6:4d:38:1a:4c:1e:21:
                    91:ab:52:89:11:e7:ad:5f:2d:25:db:66:f3:e3:78:
                    3e:17:81:49:8a:29:fc:bc:03:06:a3:c8:91:56:f5:
                    12:ab:c6:67:35:7e:41:bd:00:9e:39:8b:c7:80:42:
                    6b:81:44:40:43:9a:b5:03:ba:13:54:42:c8:9f:24:
                    49:2e:9e:91:22:0c:ab:64:c7:0c:08:fc:a6:14:e1:
                    65:53:78:73:c4:d4:42:ad:18:2f:05:f4:3c:d4:33:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:08:23:26:95:20:87:71:4C:B8:31:19:74:6E:C0:C5:25:6C:E0:8C
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:55:5c:87:f8:30:4b:fd:29:8d:df:82:bf:4d:5c:63:3e:
         00:fb:f5:39:19:4f:8f:e1:05:f2:cf:58:5e:df:58:d6:79:2d:
         87:f1:1c:3a:5c:b8:d8:ac:eb:c0:9e:02:31:5f:88:7e:f7:36:
         2f:c0:49:28:01:d2:9c:02:9a:8c:ba:a4:d0:4c:0c:ba:02:3f:
         42:07:0b:60:06:82:c5:c9:db:f6:33:43:1b:af:ac:59:03:1e:
         7e:5e:3e:22:f0:64:a5:b4:dc:3e:47:44:61:8b:06:a7:0a:fb:
         b9:db:e2:fe:5b:58:73:65:a6:f7:f0:c0:30:9a:bd:b1:44:f1:
         26:f7:4b:28:bf:08:6a:2e:0f:a4:aa:c2:36:bb:6c:e8:40:c7:
         cf:5d:ef:3f:76:3c:3b:88:83:10:55:87:2c:da:a2:f7:a6:67:
         50:ec:25:ca:ac:86:d2:4c:74:d9:03:6d:54:89:14:f1:43:e9:
         89:9a:29:82:2d:4a:3a:d4:2f:89:eb:58:c0:83:ad:b2:10:2f:
         e6:da:8f:27:b7:d3:50:41:41:34:65:20:fb:a1:e5:ac:83:0d:
         56:60:3c:c0:1b:7e:3a:5d:39:0a:69:71:18:e6:47:b5:97:17:
         51:b1:b0:cf:4d:cb:38:d3:74:f1:50:6d:c4:c8:20:45:72:eb:
         8f:29:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:35 2025 by rpki-client