Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
File:                     aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft (raw, json)
Hash identifier:          RcgTO1mOLzpd3zIjB5lTPIMF+9r0AtTxCB0m30Rj068=
Subject key identifier:   87:C7:AE:70:E9:3C:E1:2E:6E:A6:D7:CD:E2:BC:02:32:54:66:0D:D9
Authority key identifier: 69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7
Certificate issuer:       /CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
Certificate serial:       01984965A6EFA9D13A1D2C6FC6DFFBFBAE71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
Manifest number:          14FF
Signing time:             Sun 27 Jul 2025 01:00:55 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:55 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:55 +0000
Files and hashes:         1: ARb5ZPDad5FfTT7dZ8xHZ7gMy6A.roa (hash: 8snm/YmhdjNlAruJqhnmmmr90GFSb4amikZSdNm3KvA=)
                          2: aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl (hash: RU5WIiDgRghenEB8kktA8QKbdZk6UC6IswhSbAyaidU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:a6:ef:a9:d1:3a:1d:2c:6f:c6:df:fb:fb:ae:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e01cc8f8e6e5ec750960d9a704510dff9572f7
        Validity
            Not Before: Jul 27 01:00:55 2025 GMT
            Not After : Jul 28 01:00:55 2025 GMT
        Subject: CN=87c7ae70e93ce12e6ea6d7cde2bc023254660dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ca:b8:55:ff:c1:19:b3:14:61:60:09:92:e2:
                    a3:38:a5:42:3f:e7:2e:b0:d8:8f:bd:a7:77:12:ac:
                    3a:47:27:ee:9e:e5:09:90:18:11:a2:13:ad:18:31:
                    79:6a:cf:5b:2b:fe:36:49:a0:60:45:b4:e1:fe:a6:
                    c1:32:d7:6c:9d:41:a4:fe:d9:ff:bb:f2:fc:a1:6a:
                    b8:99:8b:05:bb:df:1f:2f:cd:5c:4a:0e:ee:b5:af:
                    9a:c9:8c:02:73:46:78:be:df:1a:cd:00:c2:1d:25:
                    78:ae:d7:78:44:90:15:91:16:ff:45:19:08:12:62:
                    97:2e:88:ae:a8:54:39:dc:50:16:01:b0:5e:36:8f:
                    d0:6b:7a:df:86:74:9e:3f:64:7f:b3:0a:17:54:26:
                    ce:e6:2b:27:a7:16:f4:cb:29:20:7b:f7:74:ad:90:
                    3b:a7:2d:6c:15:a7:a7:63:93:97:51:74:fd:40:c3:
                    42:25:69:7a:8d:dd:e6:8b:d6:df:1e:e9:80:ea:5e:
                    08:09:38:f2:1c:6b:43:71:cf:c8:8a:13:cf:2d:55:
                    ca:55:c2:55:c2:38:03:ed:7e:ab:f3:7d:9b:da:ee:
                    d7:70:f5:10:a9:dc:f8:51:06:71:65:eb:14:22:8c:
                    12:38:a5:f0:ea:1d:a4:d1:95:7f:e8:a4:db:63:4c:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C7:AE:70:E9:3C:E1:2E:6E:A6:D7:CD:E2:BC:02:32:54:66:0D:D9
            X509v3 Authority Key Identifier:
                keyid:69:E0:1C:C8:F8:E6:E5:EC:75:09:60:D9:A7:04:51:0D:FF:95:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/744eeb-e064-4fef-9e90-5686d4313595/1/aeAcyPjm5ex1CWDZpwRRDf-Vcvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e3:1c:19:73:31:cd:41:7c:a8:8a:0b:36:8a:55:d4:4d:14:
         1a:31:37:75:a6:b1:cd:ea:0e:9c:0c:b8:73:27:4c:f6:0a:8e:
         a6:ef:cf:2a:31:90:2e:39:c3:1b:84:01:c3:df:31:5e:80:30:
         86:bc:61:66:86:c7:67:ca:9b:86:ea:8c:0a:02:e1:61:82:93:
         5a:40:ba:6f:83:b6:83:b1:90:cb:de:3a:af:6a:77:f2:64:50:
         4e:da:a6:fd:72:02:34:cb:6a:5c:89:a7:6b:0a:2f:48:84:91:
         4c:5f:f6:f2:61:76:f3:a0:d5:7a:c2:4a:3e:57:47:c1:ee:d7:
         99:d4:e5:b3:d8:5d:86:58:31:38:25:5c:11:55:d0:ec:e9:a9:
         64:6b:84:5e:56:94:ab:ea:00:cd:3f:d6:6a:0d:0e:80:b4:85:
         46:92:ad:9b:a4:1a:5e:4c:8e:f3:ee:6f:fe:9d:68:a8:c2:9d:
         88:c5:8b:48:aa:22:2e:ab:4e:56:d0:f3:5e:05:9e:b3:51:02:
         f7:41:f9:c0:8e:8c:ba:52:82:4e:3c:79:07:32:67:23:a1:b5:
         fa:33:56:9f:1d:c5:64:a5:d4:b9:17:5e:42:ab:88:7c:70:16:
         14:c7:ba:aa:34:8a:18:37:6b:24:ea:54:fb:f8:4e:83:a7:2e:
         1b:07:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:57:36 2025 by rpki-client