Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File:                     eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier:          8ij9si5VM3brWBoM/POfFMzUYGJl04IzfSmwX/7A634=
Subject key identifier:   7B:05:64:1B:7C:CB:3F:30:86:FA:52:A1:0F:0C:53:87:0D:F4:B2:63
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer:       /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial:       01984C9D787E441A168B64356ACFE918EE02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number:          0A4C
Signing time:             Sun 27 Jul 2025 16:00:45 +0000
Manifest this update:     Sun 27 Jul 2025 16:00:45 +0000
Manifest next update:     Mon 28 Jul 2025 16:00:45 +0000
Files and hashes:         1: 0U0iwiffVettO-vogpqMch7csq4.roa (hash: uPiED/FamX8UNur9ecAQaLp7MXQZVhIJRf73CMOjMOY=)
                          2: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: mn+OpgAD+/UGvjah7hEuuuwntRGtiQxZgCDrvSJFG4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4c:9d:78:7e:44:1a:16:8b:64:35:6a:cf:e9:18:ee:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
        Validity
            Not Before: Jul 27 16:00:45 2025 GMT
            Not After : Jul 28 16:00:45 2025 GMT
        Subject: CN=7b05641b7ccb3f3086fa52a10f0c53870df4b263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:06:2d:b0:f2:91:05:17:19:4b:1b:36:e6:
                    26:fa:4e:2b:2b:07:7f:26:f4:f2:c5:c2:0b:db:8b:
                    de:9a:ea:5d:11:b4:41:61:7a:6d:08:5c:fb:37:19:
                    11:43:12:67:1a:62:d6:1a:20:b5:e4:87:0e:b5:35:
                    64:5f:47:e3:bd:4d:f8:7c:19:fa:54:a8:27:44:67:
                    74:87:11:58:bb:a1:dd:3c:9d:f6:66:c6:5a:0f:21:
                    24:41:12:46:25:ba:60:03:4a:bd:45:20:7d:3f:50:
                    7b:e2:fa:a7:c5:f5:c6:07:d1:1c:3c:ca:8e:71:9d:
                    14:c0:9b:7b:b5:1b:9b:f8:f9:6e:0c:f0:5e:78:5a:
                    f6:8b:e3:29:6a:f0:ab:d3:dd:98:78:80:05:c4:27:
                    54:36:e7:4e:a4:86:e3:48:dd:92:62:3c:17:c5:bb:
                    01:f0:fc:e8:92:58:11:64:97:76:3d:60:28:91:7d:
                    14:2a:20:5d:ad:2e:cf:fc:db:7c:44:29:16:ce:07:
                    08:80:7b:fa:17:18:32:f1:f0:a7:e9:3a:cb:b0:8f:
                    23:e5:60:09:2b:f9:b2:ad:6a:78:93:cb:a9:4d:58:
                    9b:51:5a:81:fd:40:86:80:7d:77:96:52:e3:3f:43:
                    dc:0d:04:97:97:62:4e:84:c0:1d:0b:81:7a:a0:6d:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:05:64:1B:7C:CB:3F:30:86:FA:52:A1:0F:0C:53:87:0D:F4:B2:63
            X509v3 Authority Key Identifier:
                keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:5b:70:89:f7:1d:23:45:a7:1e:35:25:6e:93:96:44:bb:8f:
         21:be:28:8e:e5:41:d5:91:b1:2d:29:8d:7e:29:fa:8d:2f:5e:
         48:37:d5:99:67:d0:e5:f5:a8:dd:19:55:2f:85:fe:c6:72:d0:
         a9:11:e6:64:64:e3:ae:18:8c:31:55:c8:d0:76:42:f8:4f:cc:
         02:13:d3:ca:c6:69:c3:38:f3:42:97:e4:b8:1a:28:03:2d:33:
         5c:98:86:23:8e:6f:81:79:8b:87:11:19:c9:37:36:fc:cc:59:
         f3:d2:c5:e5:74:29:22:bb:c2:5f:48:77:e7:7b:96:b0:60:43:
         47:36:10:37:82:2c:16:4b:47:b5:02:66:48:78:1b:3e:7b:df:
         cd:02:b4:b3:65:34:cf:a4:9f:31:58:29:12:c8:d1:3d:67:8c:
         88:54:75:35:2f:ae:07:a8:cf:73:94:fe:1a:a0:08:52:80:07:
         f6:4b:8b:1e:00:36:67:07:f7:86:14:db:41:a5:f8:a8:6f:13:
         45:1a:65:9a:d3:a3:8a:92:89:f8:f2:32:e2:a5:d9:66:7a:0e:
         39:04:33:81:ef:83:eb:dd:81:e5:d2:3a:7c:ed:71:db:da:7e:
         db:fb:63:9f:e5:b8:3e:b9:c2:2a:5a:e5:71:fa:16:19:76:79:
         03:b4:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:34:26 2025 by rpki-client