Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
File:                     eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json)
Hash identifier:          6aRYq31EZr2wPeFUBXRrzUVMs+gG45PBRNCk2kkS3Uc=
Subject key identifier:   56:19:3B:DD:48:46:A7:A4:DC:85:38:32:BB:1D:2A:1F:61:0B:53:5F
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Certificate issuer:       /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial:       019844083427D77429B40783882880F2B878
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
Manifest number:          099D
Signing time:             Sat 26 Jul 2025 00:00:44 +0000
Manifest this update:     Sat 26 Jul 2025 00:00:44 +0000
Manifest next update:     Sun 27 Jul 2025 00:00:44 +0000
Files and hashes:         1: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (hash: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=)
                          2: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: izJ+XVuD2wwPTwzE6J0WT4dsmyvj3lVtey9RRvPvrDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:08:34:27:d7:74:29:b4:07:83:88:28:80:f2:b8:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
        Validity
            Not Before: Jul 26 00:00:44 2025 GMT
            Not After : Jul 27 00:00:44 2025 GMT
        Subject: CN=56193bdd4846a7a4dc853832bb1d2a1f610b535f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:fb:ce:9c:ef:3a:df:7d:7c:91:d2:3a:a1:
                    44:4b:79:12:c6:69:f7:ef:60:a0:5b:a9:f2:00:e3:
                    56:b4:c3:02:f7:f7:a6:3b:39:cc:bb:de:13:ac:a4:
                    15:2b:12:58:d8:44:b0:f3:c7:fc:da:0f:85:aa:e1:
                    8d:e9:cd:55:ee:6a:cc:f2:36:b1:88:b0:14:ed:17:
                    09:4b:b7:1c:e4:c5:f1:b3:25:f1:7b:df:7d:1f:e0:
                    0d:59:49:4b:4a:4e:a2:86:2e:1a:d4:41:26:6d:3c:
                    67:46:a8:ff:c4:1a:1d:f8:e0:ea:26:ea:93:8b:62:
                    8a:6e:36:3f:16:bf:64:6d:49:4a:1d:5e:1b:d9:73:
                    02:57:ce:19:a7:c6:ad:4d:9d:69:3e:26:72:e9:01:
                    7f:73:de:c4:cd:08:49:ad:15:59:2d:9a:1c:ce:ee:
                    6a:6b:76:71:d6:2a:a6:6f:eb:dc:82:17:aa:f9:41:
                    4b:a2:72:85:dd:4c:2e:fd:9f:49:7d:32:5f:c5:f2:
                    64:52:e9:b4:cd:26:f8:98:99:b6:57:67:63:90:bc:
                    3f:b2:2e:4c:31:cf:1f:1f:a5:d6:f1:83:9b:c9:30:
                    ee:5a:0c:11:40:ab:9b:f9:2f:b0:ab:1d:41:11:c6:
                    45:28:3c:5f:c3:5a:12:c2:57:d1:dd:1c:43:4a:96:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:19:3B:DD:48:46:A7:A4:DC:85:38:32:BB:1D:2A:1F:61:0B:53:5F
            X509v3 Authority Key Identifier:
                keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:7d:c9:ce:1f:c8:a3:4c:3c:47:db:b4:9e:f2:54:87:7c:37:
         5f:e9:89:ba:fb:7f:12:c7:9d:fb:12:27:d5:a3:df:89:e2:ee:
         92:75:2e:8e:fa:a8:aa:53:78:e6:9f:0d:bf:0e:7e:21:0e:c3:
         cc:67:4f:4e:1d:fb:77:3d:c5:31:54:81:49:04:e0:a8:95:f6:
         0d:ff:66:82:46:18:57:60:fb:2b:9a:4e:08:9d:d0:3a:ed:9c:
         50:be:5e:55:7e:84:d3:28:47:bd:f3:97:7f:74:ca:40:83:91:
         79:f4:0b:b5:de:5c:02:8a:93:b9:95:4c:2a:62:c9:9e:9d:61:
         08:4a:ad:f4:0a:24:d6:7c:5d:36:85:c7:fb:67:47:a6:49:72:
         67:18:b8:de:49:e9:8e:ac:e9:7c:67:1b:09:bd:74:67:dd:f9:
         e8:f2:d2:50:a9:d5:aa:c8:36:47:17:9b:2a:19:ab:db:fc:40:
         ec:46:bd:de:0c:18:22:00:30:93:16:7f:22:a1:3c:ad:e2:d3:
         e9:42:46:6a:c8:94:ed:91:7d:e2:53:7c:36:ee:6e:ce:c6:c0:
         d3:04:8f:cb:7c:14:5b:63:13:83:f6:6a:bc:cb:24:82:d2:c7:
         1f:22:57:51:31:db:86:f5:54:5d:38:50:4e:0a:d3:95:0d:5d:
         ed:05:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:23:29 2025 by rpki-client