Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          VJmWYlYifXXYPK+p/FhWk92MqmVARiFz/T7Ti4hF6fM=
Subject key identifier:   86:5F:B2:A9:FB:EE:71:EB:E6:B2:A9:E4:FA:59:7F:5A:21:6F:55:82
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       01984776CF1A9B6C4A128E7AB9F3DA90A4E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          0EC0
Signing time:             Sat 26 Jul 2025 16:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:25 +0000
Files and hashes:         1: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: flqD8MREGXKlHGsOWs7p7r15sWx+Hx8Vl9ug5TgqY3A=)
                          2: gLKpyPGbqCEdbx2uKWZ-HtuhLy0.roa (hash: f77sZOCl1dYzZqqQSp/e70T40ZHDdgkRvhdb7798S4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:cf:1a:9b:6c:4a:12:8e:7a:b9:f3:da:90:a4:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Jul 26 16:00:25 2025 GMT
            Not After : Jul 27 16:00:25 2025 GMT
        Subject: CN=865fb2a9fbee71ebe6b2a9e4fa597f5a216f5582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ef:5c:a0:8b:8d:16:92:7d:fd:fb:bf:63:74:
                    1c:29:c0:72:e7:ab:b7:7d:5c:c5:32:74:20:62:e5:
                    7f:03:da:47:69:49:3e:06:1c:a1:c1:3b:6d:f0:ff:
                    4d:b7:c9:85:61:02:b3:40:29:29:4d:c3:53:6c:78:
                    da:43:a1:17:ea:34:a1:49:31:b2:dc:1b:48:29:63:
                    45:78:fe:4c:32:20:4e:d3:6b:67:15:32:e2:5f:b2:
                    fb:ba:ec:ab:9b:c4:19:97:12:7c:49:c3:47:06:3b:
                    09:15:4d:bf:30:4b:33:cb:bb:e0:0b:36:cb:b6:1e:
                    9d:f7:f7:f1:2e:0b:07:4c:89:5e:da:c6:db:7b:b4:
                    10:0f:51:1e:d5:4a:79:16:6b:38:86:46:cc:41:cc:
                    b2:f5:b2:3c:12:9c:e0:da:41:39:73:49:a5:f5:0f:
                    0d:ce:65:64:63:af:4a:14:fa:47:02:ea:0d:30:b2:
                    9d:82:14:0c:fe:68:6c:67:57:a0:db:b6:f1:7b:29:
                    a4:56:78:e4:3d:bf:b1:04:9a:ec:d6:6e:6a:40:7b:
                    bc:29:67:62:a4:e7:a4:62:d5:ce:13:e3:46:29:47:
                    57:fd:e7:16:09:af:8b:8c:4f:d7:c8:2b:47:2d:23:
                    22:b9:64:f2:8c:2b:d5:cc:94:c3:ca:df:9e:25:97:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5F:B2:A9:FB:EE:71:EB:E6:B2:A9:E4:FA:59:7F:5A:21:6F:55:82
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:6b:a9:07:1e:76:16:dc:c2:e2:ad:ef:56:19:cc:d7:49:4f:
         7c:35:2a:1b:cb:5b:86:06:f9:a0:e2:91:45:65:3b:c6:d6:a0:
         60:6a:5e:19:65:5e:35:68:09:99:4c:38:c9:40:cc:29:08:ce:
         29:95:89:4b:d9:27:9d:23:1c:7f:d6:e1:f4:d9:16:b5:fa:73:
         9e:fd:50:f2:f7:c2:a1:91:68:bb:38:16:5c:62:bb:d2:ba:60:
         69:62:10:fb:1a:9c:3c:ee:4b:ca:ca:84:74:1e:b3:1d:0a:f0:
         50:4e:22:24:08:81:13:f4:b9:1c:04:f6:96:3d:03:41:b5:ca:
         e5:cc:39:cc:f3:ae:e9:58:6a:6b:f0:e7:27:ec:85:4c:5d:45:
         90:96:00:16:57:39:55:d6:57:d3:72:b9:7e:93:06:df:a1:16:
         03:c0:0a:3c:2d:d0:e2:c0:24:a9:6e:c0:78:41:b0:da:02:a0:
         6e:a6:12:7e:7a:ef:6e:2b:cc:bb:7f:3d:f1:96:f2:50:8e:d7:
         09:64:0c:0e:a2:90:78:fa:77:05:5a:bd:4a:92:90:51:3d:56:
         ed:c4:29:2e:a0:9b:88:e8:be:3e:2a:d6:5c:36:04:ef:95:b6:
         43:b9:19:a0:60:f5:34:1a:eb:42:e3:a0:70:e7:01:6b:40:41:
         64:12:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:19:26 2025 by rpki-client