Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          1+jK99Mw3/u4Z1VeGGS9/D2KOP/A/DScnTjUF6mvB5I=
Subject key identifier:   E1:79:BF:F6:E5:DE:64:9A:0E:F6:A7:11:8D:C0:0C:0F:0E:79:87:15
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       019848F77AF497D02CD96CED40E33844181A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          0639
Signing time:             Sat 26 Jul 2025 23:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:35 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: rouA/Ld5LbFje7vtqfcgG9tQbq31ltLhLeEC0NRtHfg=)
                          2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:7a:f4:97:d0:2c:d9:6c:ed:40:e3:38:44:18:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Jul 26 23:00:35 2025 GMT
            Not After : Jul 27 23:00:35 2025 GMT
        Subject: CN=e179bff6e5de649a0ef6a7118dc00c0f0e798715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:64:5b:bc:eb:03:e8:28:50:bd:f6:20:28:
                    56:18:fc:e7:c0:6d:07:61:b6:ad:cc:6c:c3:cb:d6:
                    9c:38:3d:b3:b8:c2:8e:66:d7:bc:7f:61:b8:a0:eb:
                    22:d0:96:28:65:d9:19:e5:19:5a:5a:84:a9:21:f1:
                    02:8d:17:e9:a5:64:13:62:91:80:4b:cb:f6:62:ad:
                    17:5d:44:39:af:ce:29:3f:70:86:e6:b4:85:c7:2d:
                    1c:68:b7:b6:66:a8:e1:9b:4b:ee:ab:58:0c:3a:c7:
                    8a:cd:59:0a:1f:64:90:96:c9:f7:7e:3a:e6:8c:ff:
                    9f:d3:00:4d:07:52:47:0a:80:aa:ff:91:32:08:73:
                    cd:e6:20:5f:9b:5e:24:71:7f:2c:ae:2f:24:0d:1c:
                    46:85:a3:57:9a:c3:dd:42:a3:3a:2f:ee:8d:7f:17:
                    88:9a:26:ef:73:67:5d:64:41:cf:55:df:53:a0:ff:
                    8f:1d:f6:15:e6:3a:e1:5b:aa:3f:f3:93:c0:17:2a:
                    df:a4:76:c5:1c:bb:23:d9:c6:b7:b3:f1:0b:77:b1:
                    8b:8b:e4:8e:d1:cc:d1:f4:5a:d0:bc:38:69:68:e5:
                    f4:c4:b3:2a:52:55:24:b7:17:d5:0c:4d:a5:9f:b0:
                    35:63:27:fd:e3:6d:e7:c8:78:f1:e7:d0:e0:a9:4c:
                    8f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:BF:F6:E5:DE:64:9A:0E:F6:A7:11:8D:C0:0C:0F:0E:79:87:15
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b2:10:21:11:a8:63:4c:41:6d:8a:60:4f:11:0b:77:9f:31:
         c8:ab:4d:9d:07:d7:21:9e:03:c0:cc:2f:79:10:e6:0c:ea:4f:
         04:60:c7:cf:1c:4d:47:78:8c:89:f2:be:f5:e3:8b:94:cf:f4:
         e6:88:65:d7:d9:be:fa:94:db:07:a7:fb:da:fe:58:1d:ef:07:
         e4:10:7a:cc:8d:f7:6f:67:fb:d4:21:95:cd:e7:70:30:6c:d6:
         be:b9:13:91:a0:93:43:ff:c5:24:68:ca:10:ec:10:11:a3:aa:
         e1:09:8b:e9:37:67:ce:e6:a8:c3:8d:3b:81:ea:01:aa:8b:63:
         06:ef:13:e4:17:0c:c5:94:fe:f1:b2:bd:26:e8:6a:06:d0:6b:
         38:b3:65:82:27:d3:99:b3:7d:65:70:3f:dc:c1:5d:89:70:56:
         eb:0b:5f:24:77:67:8a:c8:a2:d8:cf:8d:61:42:d5:78:52:e9:
         69:34:70:88:70:25:b2:c3:54:23:dd:8e:eb:28:55:11:d4:2e:
         5c:53:2f:98:0b:28:7f:ee:7f:0a:99:a9:1f:5c:de:cd:28:86:
         a7:1f:f6:fc:16:d0:ae:11:2e:1b:3a:f7:f6:bb:ef:dd:ef:44:
         cc:21:08:15:f4:7b:2d:c4:1d:ab:03:d6:88:04:a2:c3:d1:43:
         a2:8b:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:15 2025 by rpki-client