Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
File:                     ee4R2MQpe-xUvTBUMMpHct-shHo.mft (raw, json)
Hash identifier:          JZ6Jjiqz/CoFX786ijU7XiKWKSxbvmyOTQuSzCPs/Bc=
Subject key identifier:   27:4B:8B:1C:FA:57:5F:64:05:EA:57:17:29:EC:36:79:B6:57:99:5C
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Certificate issuer:       /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial:       01984966477DBC2DFD1ABD0979D23D4B73B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
Manifest number:          0A0E
Signing time:             Sun 27 Jul 2025 01:01:36 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:36 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:36 +0000
Files and hashes:         1: ee4R2MQpe-xUvTBUMMpHct-shHo.crl (hash: N6j4B/QX5P891rnFTL8DlrEnTH1WUGjljUD34/nD1t8=)
                          2: tzK04gs2QWdGkmPOxcIJ7O89Pa0.roa (hash: c/EnpCuozOUYVClxONo4ish8u2CS6ZGPowUUX+Csd6Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:47:7d:bc:2d:fd:1a:bd:09:79:d2:3d:4b:73:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
        Validity
            Not Before: Jul 27 01:01:36 2025 GMT
            Not After : Jul 28 01:01:36 2025 GMT
        Subject: CN=274b8b1cfa575f6405ea571729ec3679b657995c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:d0:6c:94:45:15:f4:0b:e3:8f:f4:61:22:
                    33:ca:07:67:56:a7:d7:65:de:34:2d:c3:7d:5f:28:
                    32:77:3b:1a:72:7c:bd:6e:5b:40:fc:87:8c:25:ae:
                    08:f1:62:e3:30:da:ce:43:10:05:e1:b0:3e:cd:d6:
                    f0:cd:3b:ab:27:88:c0:b3:3d:bb:d3:fe:98:a4:72:
                    c7:2c:c0:bd:c7:38:64:b2:89:5c:f9:1d:e1:cf:36:
                    8f:7a:7d:76:e1:b2:52:c6:8e:b1:d8:c1:94:be:ac:
                    a2:23:25:19:29:e8:d7:19:2c:2d:15:f1:b7:6f:e7:
                    9a:6e:01:2b:d1:17:4d:91:58:79:8a:d1:8b:db:42:
                    bf:2b:89:ef:8c:3e:bc:49:5f:44:57:17:b1:95:c9:
                    5b:ae:23:99:97:97:19:90:24:57:66:0a:96:c2:dd:
                    9f:85:5d:ec:69:1d:e2:24:51:98:ab:e1:96:ac:7e:
                    51:0a:1f:b5:38:b0:1f:55:82:13:b5:86:05:ae:3d:
                    fd:b2:a9:a9:90:cc:2a:95:6a:da:87:ef:6a:c2:e5:
                    85:ec:c3:c5:04:93:20:a0:3d:51:66:06:e7:a9:db:
                    3d:02:d7:f8:df:ef:3e:37:f8:17:57:c1:7b:c2:19:
                    b3:75:1f:1d:3c:5c:d3:b6:e2:41:c6:ac:19:45:fb:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:8B:1C:FA:57:5F:64:05:EA:57:17:29:EC:36:79:B6:57:99:5C
            X509v3 Authority Key Identifier:
                keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:d2:2e:09:7a:7f:b6:a7:44:df:bf:99:f4:c0:38:7b:84:
         dd:bd:5b:82:97:75:f6:ff:30:e6:04:9e:c1:78:8d:dd:9c:d4:
         ab:ba:6a:4b:f9:85:56:32:81:ff:40:e2:ba:31:af:00:b9:a9:
         36:39:ad:40:20:e0:c4:89:52:88:8d:15:32:83:e2:33:db:73:
         cd:d4:26:07:43:cc:58:ed:16:cb:e5:7f:68:9c:3f:53:cb:99:
         c3:2e:7b:ee:77:49:4b:e4:3a:79:9e:1b:7a:88:bb:04:d8:bf:
         61:f8:c9:58:4e:9b:eb:c3:36:14:11:6c:11:af:65:3b:42:a0:
         84:4e:8d:df:d0:a7:8b:b6:89:96:76:87:65:ed:8f:05:97:80:
         09:50:4c:11:4a:59:e6:14:24:8c:be:97:e3:7d:2f:37:c7:7a:
         55:79:7e:1b:17:dc:73:5a:56:44:c8:fb:d2:98:48:29:20:4f:
         75:0d:42:a1:b7:38:da:69:f4:05:32:34:dd:aa:5e:33:0e:b8:
         71:50:14:b4:1b:c5:ac:71:8e:ea:9b:20:40:20:40:e0:73:46:
         97:0f:44:51:bc:f3:a4:29:ff:7b:05:74:4c:f8:37:e5:19:34:
         24:ad:b7:32:ad:a5:fd:ba:e8:22:73:a6:02:94:c4:52:76:fb:
         f1:0f:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:23:16 2025 by rpki-client