Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          dmszPoO/eqgEipevUvI6XsHG93lSYIEAGQbb3ytmik4=
Subject key identifier:   25:82:30:A6:D6:B7:36:61:CC:05:FE:8A:3F:2F:E8:F2:2A:BA:FC:8B
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       019848C093E2F4518344556BD50FD66ECF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          1606
Signing time:             Sat 26 Jul 2025 22:00:36 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:36 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:36 +0000
Files and hashes:         1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
                          2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
                          3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: zGYblv47tQNSWJuslnY8rNWgc4MpgSufZileS93uerc=)
                          4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
                          5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
                          6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
                          7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
                          8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:93:e2:f4:51:83:44:55:6b:d5:0f:d6:6e:cf:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Jul 26 22:00:36 2025 GMT
            Not After : Jul 27 22:00:36 2025 GMT
        Subject: CN=258230a6d6b73661cc05fe8a3f2fe8f22abafc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:95:66:ae:57:d7:ff:f6:40:c4:7d:1d:37:38:
                    91:cf:89:d4:80:a2:81:ea:0f:bd:54:cf:95:1c:da:
                    69:aa:91:46:35:1c:bb:d9:e9:c4:2d:16:dd:38:8a:
                    b3:38:f7:b9:ef:a4:9f:f7:12:da:03:84:d1:4c:2c:
                    34:2e:27:c6:f1:00:61:56:47:ec:02:81:79:ef:c0:
                    1b:93:3b:9c:55:85:90:2c:7d:09:a0:94:e8:ab:fc:
                    25:28:67:2e:51:f8:fe:11:f7:a2:5d:7b:f8:8e:8b:
                    b2:10:fb:0f:ad:83:42:60:8b:c6:00:5a:f5:c3:99:
                    82:03:f5:6f:98:3d:29:a4:4f:cc:dd:2f:b8:d2:93:
                    66:6a:75:03:13:43:bf:15:ed:7c:0e:69:f6:14:dd:
                    5e:e0:c8:dc:39:64:6b:ef:a9:3e:76:b6:d2:0c:c3:
                    c9:3f:5f:7d:22:47:97:de:7c:e5:20:5b:16:9c:07:
                    86:2e:35:68:3a:43:f2:88:2e:03:6b:0a:75:f2:c9:
                    0b:b6:25:4a:dd:80:db:88:b7:de:2d:44:2f:bf:90:
                    fa:59:27:11:e4:9a:8a:9c:32:d2:6a:b5:1b:17:f1:
                    77:0d:12:e9:06:44:94:55:44:f5:30:7b:88:3a:a7:
                    84:cd:26:14:b5:5b:48:e1:75:e8:f0:b2:25:fb:5f:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:82:30:A6:D6:B7:36:61:CC:05:FE:8A:3F:2F:E8:F2:2A:BA:FC:8B
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:2d:a3:82:c8:ea:b9:bb:c4:35:02:95:d3:b2:2d:51:b3:
         c8:33:bf:9f:92:d7:4a:a4:43:7c:ea:12:be:dc:31:75:ce:93:
         85:e9:74:ef:dd:4d:92:38:ba:c6:49:ea:4b:e6:cc:37:d0:c7:
         93:48:21:7a:4e:81:3a:86:04:a3:35:23:d7:9d:18:e1:4e:ba:
         7d:43:7a:b2:43:43:ec:8f:0c:c8:37:a9:3f:a2:9d:e7:5a:e4:
         c5:f5:de:b1:15:3d:34:9d:f5:20:65:bd:be:76:bd:01:32:79:
         e1:7e:ff:75:54:99:b8:6a:5f:70:ac:ef:e9:77:cf:54:e5:34:
         72:ec:70:e3:bf:e2:cd:c1:76:14:87:71:72:21:5b:73:d9:e9:
         c9:e7:3a:6d:02:91:e7:95:73:c0:a6:6e:47:b6:2f:98:24:5f:
         d4:19:e0:62:95:10:3c:94:7c:5a:29:5d:53:d7:db:ee:65:0d:
         30:dc:2a:98:68:12:5e:94:15:03:ae:b9:85:02:d9:9e:d6:ce:
         36:40:fa:33:9d:d9:4f:16:75:00:62:7a:b3:b1:c1:13:b6:dc:
         0a:a8:c4:c5:31:66:4f:2f:28:77:48:26:6e:d3:0c:be:c9:b6:
         be:4a:46:f9:b3:61:c5:14:b0:b8:86:ba:a1:1a:27:f2:2d:25:
         21:5e:4f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:07:20 2025 by rpki-client