Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File:                     eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier:          N0vkc4gJA2/4Z1FwcKEed0xU0JbxKq3EUMHXITqp3aw=
Subject key identifier:   9D:16:3A:C2:71:F0:2C:FF:C0:EF:E5:F9:29:92:9A:D4:C3:75:C0:22
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer:       /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial:       019845BF54C88B105B8237E4447E01A68845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number:          12BF
Signing time:             Sat 26 Jul 2025 08:00:23 +0000
Manifest this update:     Sat 26 Jul 2025 08:00:23 +0000
Manifest next update:     Sun 27 Jul 2025 08:00:23 +0000
Files and hashes:         1: WiSq1XaassFeIzQ7VRRmBzOb3-E.roa (hash: kuvzaokAS1drpTQ/4WqXgBODOQIMCPVvcrCFZCP4fDk=)
                          2: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: oHvPB2dGfrILRBhhSFKMQASzRXh7sU033efb3LQd7DA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:bf:54:c8:8b:10:5b:82:37:e4:44:7e:01:a6:88:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
        Validity
            Not Before: Jul 26 08:00:23 2025 GMT
            Not After : Jul 27 08:00:23 2025 GMT
        Subject: CN=9d163ac271f02cffc0efe5f929929ad4c375c022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:22:54:24:79:33:72:b7:a8:68:bf:90:2c:
                    46:19:9b:68:b0:a2:b1:87:9e:1f:96:22:c7:9a:83:
                    c6:56:c3:46:1e:be:5b:32:3d:02:d2:b2:bc:86:87:
                    d5:82:e8:20:04:dd:b8:97:c1:e6:70:07:c0:d0:e1:
                    22:47:c3:d2:93:a7:a4:21:32:d0:dd:ce:3f:54:06:
                    99:ed:f5:f1:a6:8d:ba:6e:e8:e9:a5:e4:3f:d2:60:
                    9d:ce:e3:ba:60:70:8a:ec:98:4f:bf:74:5a:88:10:
                    28:e6:e8:4c:e3:3e:72:31:78:4f:3f:42:d1:0d:c7:
                    50:28:65:5c:e9:90:f3:2b:f6:0d:e5:64:02:b7:a3:
                    d9:71:6e:10:82:ee:9e:08:4a:2c:a6:8f:dc:d5:f3:
                    cc:25:66:53:0f:69:22:af:39:97:52:ff:fc:c8:07:
                    3f:be:aa:8a:cf:4d:f4:de:80:02:0b:11:08:79:56:
                    7a:96:d9:06:94:99:64:6f:ca:ed:91:3e:70:ac:8e:
                    8f:53:ed:15:ac:9c:15:1f:40:15:e7:67:dc:d9:02:
                    f5:86:f6:b1:e2:9b:d6:21:41:6e:8f:eb:f2:9a:b5:
                    28:27:58:69:d3:fe:0d:88:13:78:89:fc:98:d4:2d:
                    86:28:77:98:58:fa:14:86:10:7e:8d:75:da:d1:d5:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:16:3A:C2:71:F0:2C:FF:C0:EF:E5:F9:29:92:9A:D4:C3:75:C0:22
            X509v3 Authority Key Identifier:
                keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:68:96:8b:a2:1f:f7:3b:3f:75:63:ba:70:7e:82:26:64:b3:
         46:46:3b:ea:f0:41:3d:20:df:63:58:af:33:95:ff:48:d5:03:
         58:0c:78:10:c3:79:e8:ed:4c:dc:79:fa:02:cd:12:2a:be:06:
         b8:05:fe:79:83:a3:5c:e7:15:a6:ce:56:6f:5e:84:4c:c3:6a:
         98:e0:70:b3:10:53:30:36:c5:a9:e1:51:cb:d4:ca:2e:e0:4c:
         49:d2:28:ec:a8:ae:e5:a1:fb:56:7b:c6:b9:20:93:7a:59:d8:
         a9:51:f5:ae:fd:97:42:d4:9e:9d:0a:fb:6e:58:18:b6:f0:52:
         1b:d5:78:3a:53:59:a5:a6:b7:da:2e:ef:66:16:53:2c:4f:d0:
         60:35:45:e7:63:e1:21:bc:08:a0:6e:ae:83:34:33:66:b5:95:
         9b:44:ae:87:aa:16:02:4e:8c:ca:81:bc:7a:24:21:1b:1e:4a:
         6b:6e:1d:f8:19:3d:04:23:75:8b:dc:bf:b0:05:73:8c:d1:bf:
         6b:4e:28:cc:dc:81:2a:71:a2:e1:31:79:9b:3d:3a:5c:3e:cc:
         46:b3:8f:26:57:86:2c:e7:19:cf:4d:45:09:2b:13:59:2c:d7:
         90:89:74:a7:5f:d9:31:ec:fb:c7:88:35:a8:76:1f:15:e9:ae:
         bb:4d:50:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFv1TIixBbgjfkRH4BpohFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Nzk3NzBiZmZjMTRkOWNkZmI1NzRlYzg2NmNhYWYxMzU3
MmY0NWMwHhcNMjUwNzI2MDgwMDIzWhcNMjUwNzI3MDgwMDIzWjAzMTEwLwYDVQQD
Eyg5ZDE2M2FjMjcxZjAyY2ZmYzBlZmU1ZjkyOTkyOWFkNGMzNzVjMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo0iVCR5M3K3qGi/kCxGGZtosKKx
h54fliLHmoPGVsNGHr5bMj0C0rK8hofVguggBN24l8HmcAfA0OEiR8PSk6ekITLQ
3c4/VAaZ7fXxpo26bujppeQ/0mCdzuO6YHCK7JhPv3RaiBAo5uhM4z5yMXhPP0LR
DcdQKGVc6ZDzK/YN5WQCt6PZcW4Qgu6eCEospo/c1fPMJWZTD2kirzmXUv/8yAc/
vqqKz0303oACCxEIeVZ6ltkGlJlkb8rtkT5wrI6PU+0VrJwVH0AV52fc2QL1hvax
4pvWIUFuj+vymrUoJ1hp0/4NiBN4ifyY1C2GKHeYWPoUhhB+jXXa0dXTBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0WOsJx8Cz/wO/l+SmSmtTDdcAiMB8GA1UdIwQY
MBaAFHh5dwv/wU2c37V07IZsqvE1cvRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzIt
ZWU3MzEzNzE2NDk4LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zN2UyNmYtNTdiOC00MDgwLWI4MzItZWU3MzEzNzE2NDk4
LzEvZUhsM0NfX0JUWnpmdFhUc2hteXE4VFZ5OUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImiWi6If
9zs/dWO6cH6CJmSzRkY76vBBPSDfY1ivM5X/SNUDWAx4EMN56O1M3Hn6As0SKr4G
uAX+eYOjXOcVps5Wb16ETMNqmOBwsxBTMDbFqeFRy9TKLuBMSdIo7Kiu5aH7VnvG
uSCTelnYqVH1rv2XQtSenQr7blgYtvBSG9V4OlNZpaa32i7vZhZTLE/QYDVF52Ph
IbwIoG6ugzQzZrWVm0Suh6oWAk6MyoG8eiQhGx5Ka24d+Bk9BCN1i9y/sAVzjNG/
a04ozNyBKnGi4TF5mz06XD7MRrOPJleGLOcZz01FCSsTWSzXkIl0p1/ZMez7x4g1
qHYfFemuu01QSA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:41 2025 by rpki-client