Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          JMlxIt9xVwAYd6ggOSEgFEQoJns1YUTtzx3S41MZ9sc=
Subject key identifier:   03:AA:8A:87:CE:E3:08:CF:E6:3F:F7:55:81:98:98:D5:6E:28:14:7C
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       019853E8ADDBA0972F6FA8FA65B80DA01F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          0CEE
Signing time:             Tue 29 Jul 2025 02:00:14 +0000
Manifest this update:     Tue 29 Jul 2025 02:00:14 +0000
Manifest next update:     Wed 30 Jul 2025 02:00:14 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: Zc6Nn9TfXxZ3F8iXnLHLn9SzBnBRpNVDAajoIJWygtY=)
                          2: FNssP3Vnl359dcbgHZkufRV_lXA.roa (hash: JifcLzI/Tl7E2mLCjrs1dQqQn1Db6poPn/8XtbADxCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:e8:ad:db:a0:97:2f:6f:a8:fa:65:b8:0d:a0:1f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Jul 29 02:00:14 2025 GMT
            Not After : Jul 30 02:00:14 2025 GMT
        Subject: CN=03aa8a87cee308cfe63ff755819898d56e28147c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:5f:03:3e:88:e1:78:00:e7:3a:4b:9a:a6:
                    8f:57:a3:09:85:27:a2:aa:96:06:40:41:79:41:03:
                    27:2a:c9:5d:35:3f:48:0e:15:61:bf:21:5d:29:9d:
                    12:5d:1c:00:11:ac:15:53:1d:33:e3:35:34:fc:0b:
                    31:ca:ce:5f:1c:31:2b:e8:31:b3:97:42:e4:e4:69:
                    43:19:c3:aa:66:96:e8:a4:95:9b:95:b5:77:ae:36:
                    cb:f8:74:03:54:83:d2:51:a4:63:0a:f3:76:35:17:
                    dc:9d:20:7f:90:74:e3:83:5e:65:d6:8a:2f:40:09:
                    55:fe:0a:50:c5:85:95:7b:d5:1f:14:90:4b:38:c0:
                    0b:54:12:40:9d:02:c9:65:93:4d:aa:f5:e4:2c:8e:
                    5c:72:27:dd:0d:21:4c:b5:09:95:02:08:86:e0:0a:
                    e9:8b:39:a7:e3:60:e9:10:9c:f7:68:e0:18:98:6a:
                    2e:4f:8d:8c:cb:f7:93:68:fd:c3:f3:0d:58:be:37:
                    ca:4d:d0:e6:c3:cb:cc:20:d6:23:3e:5d:8e:67:d6:
                    e8:40:d0:86:67:7a:4a:78:1c:ae:6a:e6:2e:20:c7:
                    68:81:dc:5f:d9:34:bd:d4:cc:5a:ab:e5:9e:ad:e5:
                    b7:30:38:96:df:05:20:f1:f3:b3:1c:25:6d:d5:13:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:AA:8A:87:CE:E3:08:CF:E6:3F:F7:55:81:98:98:D5:6E:28:14:7C
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:2a:81:ae:ea:c7:55:d3:70:f4:1e:67:04:c7:90:f4:88:
         84:4f:0a:d9:28:ca:46:ce:e4:fa:58:ca:3c:c6:38:1f:93:dc:
         85:42:39:a4:06:01:ce:6f:71:64:d6:86:fe:d6:f0:4e:88:8b:
         f5:f2:c0:ac:50:ea:ef:cd:f8:63:7d:95:8a:06:52:c5:92:45:
         e0:e0:e8:62:21:f1:b1:ec:f8:93:2b:ea:e2:aa:d2:f6:45:f8:
         dc:0e:1d:dc:98:93:6e:c2:8d:c5:94:f3:96:89:b7:1b:d1:27:
         b4:64:6d:71:a8:91:08:4c:d5:e3:45:08:f4:d6:a4:d0:30:77:
         26:77:41:80:dd:9e:d3:27:37:12:ae:a6:93:ad:55:4a:44:d5:
         ba:e7:c1:ae:0a:ed:9d:6a:50:29:a5:ea:41:e7:7c:9d:4b:f8:
         6a:34:09:4d:db:50:71:b3:e0:65:09:54:93:d2:7d:7c:38:f5:
         21:a4:30:57:63:6e:05:7f:38:48:e2:a8:5f:1b:eb:36:40:1d:
         2b:da:d5:e2:89:b4:9f:e9:88:1e:10:dc:86:7e:6e:b2:0c:df:
         45:74:ef:2a:e6:42:a7:0a:60:df:71:e4:da:83:c9:f6:d7:d8:
         93:34:08:1d:5a:c1:2e:3d:fb:b5:54:87:b5:d8:98:e8:b6:55:
         ec:e1:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:48:44 2025 by rpki-client