Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
File:                     eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft (raw, json)
Hash identifier:          ENuppQcdQKgibXCjM5B07B06A3jLhXj80iSQpNfL0cI=
Subject key identifier:   0C:84:8A:87:F4:F4:3F:B1:17:24:DE:B8:64:56:99:2C:0A:30:AD:3D
Authority key identifier: 7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5
Certificate issuer:       /CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
Certificate serial:       019827EC4541DF119A992BFC183A0D94AFD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
Manifest number:          38
Signing time:             Sun 20 Jul 2025 13:00:52 +0000
Manifest this update:     Sun 20 Jul 2025 13:00:52 +0000
Manifest next update:     Mon 21 Jul 2025 13:00:52 +0000
Files and hashes:         1: 07Dre1kZ1oyyZdumPkKx6qPgfFY.roa (hash: RR36HXtAKDeJVmCbbh+1KLLcoMylQhGqmF8IKuf7xSg=)
                          2: eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl (hash: vvYa15LTKOMFyUbHy6tyfG2kVDRA+DmGVcb3qRzrqak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:ec:45:41:df:11:9a:99:2b:fc:18:3a:0d:94:af:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b26c46d0e5fff0437cb69783fe399f1903200d5
        Validity
            Not Before: Jul 20 13:00:52 2025 GMT
            Not After : Jul 21 13:00:52 2025 GMT
        Subject: CN=0c848a87f4f43fb11724deb86456992c0a30ad3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:da:8f:1e:9d:20:68:35:e4:9d:8c:f7:3b:
                    a1:91:d5:4b:f6:5c:bb:92:e8:9b:d8:61:61:e1:96:
                    f6:9b:ab:78:c4:f0:42:2f:1a:12:25:cf:bc:23:d4:
                    ed:18:64:c3:4d:e9:87:a4:7c:a4:10:e6:e4:61:b5:
                    39:47:cf:99:19:41:e8:a6:56:ba:6c:b6:b6:20:22:
                    aa:ed:11:e9:ff:9f:5d:f7:fd:79:74:5d:57:f9:8f:
                    ac:77:2b:69:06:db:10:71:4c:80:d5:d9:cb:eb:84:
                    77:f4:8a:f2:d1:47:5f:b4:6b:ac:4d:93:70:c1:d3:
                    eb:b1:f1:20:fb:18:69:c1:00:40:f1:06:45:41:85:
                    9b:72:a9:52:13:b3:1f:7e:be:50:26:6a:70:ec:6b:
                    23:b7:71:87:93:f9:c3:7c:2a:73:28:4c:39:24:e2:
                    46:ba:54:03:4f:c6:98:35:be:e9:60:95:c8:36:84:
                    5b:d2:c8:6a:b6:cf:51:58:51:df:d7:72:9a:b7:ef:
                    ad:b9:9a:f0:fb:f1:fe:e8:f8:87:b4:53:d2:d6:cd:
                    c7:f7:84:76:a0:f9:6c:81:65:dd:b3:e0:ea:6e:7c:
                    c2:e1:4d:b1:64:53:f8:08:2a:a7:21:68:a8:1c:2b:
                    c7:53:62:ac:45:01:23:2c:38:d2:91:a5:c0:0c:bc:
                    c0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:8A:87:F4:F4:3F:B1:17:24:DE:B8:64:56:99:2C:0A:30:AD:3D
            X509v3 Authority Key Identifier:
                keyid:7B:26:C4:6D:0E:5F:FF:04:37:CB:69:78:3F:E3:99:F1:90:32:00:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ab0ef-1aea-4e73-add7-74db9a29a73c/1/eybEbQ5f_wQ3y2l4P-OZ8ZAyANU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:39:e7:16:1b:65:41:0b:fe:4a:ea:62:d7:d8:69:29:e3:ff:
         03:3a:6a:c4:44:78:c9:fd:68:e9:38:3f:dc:e3:8b:db:36:c8:
         4f:5b:90:1f:b5:9e:e1:0e:e8:a0:43:b1:86:4c:35:32:09:37:
         4a:a7:28:d1:7b:76:51:ad:10:d9:31:19:99:07:ad:de:8e:09:
         54:b9:6f:25:60:c4:17:84:95:03:4f:03:4f:76:27:d2:26:d7:
         b2:b2:4a:3e:1a:55:52:e4:ae:a5:f6:8f:7b:e3:c2:be:e6:8b:
         60:75:47:53:e8:0d:5b:b6:31:8f:b4:56:ca:c1:a7:4b:d8:51:
         41:94:7c:4d:d9:be:53:88:a1:34:5c:83:7c:e6:19:a2:4c:91:
         ea:69:75:7e:c6:e0:1d:ad:1c:41:28:20:b4:b2:51:cf:9f:6a:
         b3:40:c6:e3:0a:38:0a:ea:56:7d:38:0d:f4:4a:c9:30:3f:38:
         49:b3:b6:e0:de:71:15:80:2e:3f:64:1d:ee:da:6e:78:15:ec:
         f8:24:bb:07:51:16:d5:45:65:6a:53:b5:f2:a6:6d:3a:da:4d:
         89:57:db:e9:6c:ba:bf:ad:49:08:fc:81:a3:be:43:cd:83:4d:
         ea:6d:80:45:ce:20:cd:50:05:30:08:2f:a3:91:c5:b8:0a:e9:
         c3:f1:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:16:52 2025 by rpki-client