Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
File:                     EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft (raw, json)
Hash identifier:          wOuhcbFnazxR9fbNdplHKKAOwovEjrR5QyAUx+eeI0c=
Subject key identifier:   AA:4E:13:28:AC:36:96:4C:C5:A5:0F:9F:9C:48:7C:D7:09:CC:FA:E2
Authority key identifier: 12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
Certificate issuer:       /CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
Certificate serial:       0198277E1332E8C58B73F62121501926A48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
Manifest number:          2C
Signing time:             Sun 20 Jul 2025 11:00:30 +0000
Manifest this update:     Sun 20 Jul 2025 11:00:30 +0000
Manifest next update:     Mon 21 Jul 2025 11:00:30 +0000
Files and hashes:         1: EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl (hash: jWErn3d1DwCl40os00grLghrzrWOg9Naa6mydMO8PVg=)
                          2: cJMqlk4t_npV762YA6G1Urn8YC8.roa (hash: +q/bgqa1jjCMji99qFxLyo61sIU915VzUhks1PlXN30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:7e:13:32:e8:c5:8b:73:f6:21:21:50:19:26:a4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
        Validity
            Not Before: Jul 20 11:00:30 2025 GMT
            Not After : Jul 21 11:00:30 2025 GMT
        Subject: CN=aa4e1328ac36964cc5a50f9f9c487cd709ccfae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:98:17:7e:75:b4:22:61:ff:fe:c6:69:e1:
                    ea:59:7a:28:3d:19:0e:7a:70:de:82:70:d0:db:5c:
                    bb:f0:7b:51:aa:71:80:4d:88:fb:36:86:f2:dd:0a:
                    4a:9c:75:74:fb:75:d5:70:82:78:a8:ee:4c:95:e8:
                    b0:fa:ef:d4:c1:40:01:f7:10:d0:bc:b9:43:11:4a:
                    69:bf:77:e8:57:34:34:33:d1:01:d3:6b:ea:bf:68:
                    eb:93:84:df:a7:6d:38:86:63:4e:82:41:14:cd:76:
                    72:90:d8:55:ab:e0:c5:d6:69:26:05:a9:30:4a:8f:
                    32:b1:64:1c:15:9e:56:0b:70:ed:3b:e5:a2:1d:62:
                    6a:10:b8:7a:c4:f3:7e:45:2d:0b:df:16:e7:dd:16:
                    d3:27:ad:09:e8:cf:b3:5d:6c:3a:e0:25:f2:4c:76:
                    cb:fb:b6:f7:0a:00:24:dd:1b:4f:7e:55:4b:03:15:
                    d6:4c:ab:c6:4b:e5:3a:9f:68:ad:91:0c:26:f7:e1:
                    4b:d3:dc:90:01:5f:cb:d0:c0:80:2a:eb:57:81:e8:
                    4b:c9:22:b5:e7:6d:9b:c6:e6:2f:a6:f9:4c:1a:14:
                    d7:d4:01:63:53:b4:b3:e4:03:f7:eb:67:f2:34:70:
                    ac:68:a5:d0:43:6b:c6:7f:90:06:ec:a5:5f:5a:e0:
                    4b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4E:13:28:AC:36:96:4C:C5:A5:0F:9F:9C:48:7C:D7:09:CC:FA:E2
            X509v3 Authority Key Identifier:
                keyid:12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:aa:75:76:e9:8b:6e:13:f7:d5:4e:af:e8:18:c9:89:9c:
         83:2f:aa:91:a6:1c:a6:30:2f:be:57:62:8d:6a:93:a4:b3:83:
         22:9c:f4:66:c1:ae:46:11:08:83:68:91:e4:02:bb:90:d5:0c:
         0a:7c:a2:12:b1:29:56:c6:bd:80:a8:37:0a:08:b1:45:7b:9d:
         bd:9f:d1:b8:5a:41:25:93:79:c1:12:c5:c8:31:8f:e7:59:51:
         2f:e8:04:ba:4b:2e:09:b0:79:8b:a5:cb:4b:c6:98:3a:e0:5f:
         48:14:72:e4:68:34:6d:5b:e8:2d:f6:85:99:51:5f:8a:10:94:
         f7:21:b0:e9:3c:0e:4c:82:ff:fd:86:38:37:c2:52:14:89:9f:
         11:79:32:eb:06:96:eb:3a:35:d0:16:e5:e6:93:7f:b5:89:e9:
         58:be:b4:2c:27:53:ad:9c:91:23:a5:15:86:66:8f:32:b8:09:
         21:87:6a:2c:04:f2:f0:17:b8:cf:d8:ec:6a:ae:a1:6a:d6:1b:
         bd:b1:c5:11:9e:79:d7:5a:76:d7:f3:15:39:6f:28:23:b1:5c:
         5c:06:cd:9f:15:5d:e3:ce:9a:ed:0a:f7:cc:43:d8:78:09:d5:
         58:3e:09:dd:7e:5f:e4:0d:d2:f4:4e:2f:ad:fe:13:04:42:5a:
         a8:de:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:21:35 2025 by rpki-client