Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File:                     KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier:          NRfR0u3lOcSFyLtSTAi7IcvlXrae32lRX8OeDHiU7M0=
Subject key identifier:   E9:3D:D0:9C:31:06:E0:A2:94:1F:A1:94:2B:F2:AF:5C:26:9D:24:49
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer:       /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial:       01983539EBED497B3C9AC2744086317FF080
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number:          0E24
Signing time:             Wed 23 Jul 2025 03:00:45 +0000
Manifest this update:     Wed 23 Jul 2025 03:00:45 +0000
Manifest next update:     Thu 24 Jul 2025 03:00:45 +0000
Files and hashes:         1: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
                          2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: 12aIRKL/LSb9mrm9S812wfDPAoJdLNtm4pnEitVjvps=)
                          3: Rs-Hb7Ce7VPVhger173QDLpRVns.roa (hash: FHoraum22ekUFk3RVeKBH0jOAMKTEJcQ/5EYQf5cotU=)
                          4: WfzXnM2eK_kSs-4yP9rU_Vq2KXg.roa (hash: PgVhQbQKOEzO/hmF/YVvQFUh9kfxOMI2b5QsLYE0w8U=)
                          5: szTswhDYGFZLNq2gmPhOGNU3JHY.roa (hash: mz4tdadkMvHnGNpBkk3KejTx0a499gLsvzCSSSwliEU=)
                          6: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:35:39:eb:ed:49:7b:3c:9a:c2:74:40:86:31:7f:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
        Validity
            Not Before: Jul 23 03:00:45 2025 GMT
            Not After : Jul 24 03:00:45 2025 GMT
        Subject: CN=e93dd09c3106e0a2941fa1942bf2af5c269d2449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:b6:db:5a:c2:16:53:4b:3f:c2:d4:f4:9c:
                    7c:e6:4c:bc:b0:be:ea:e0:44:90:fd:eb:9e:d1:3a:
                    04:64:93:24:30:ad:16:6e:ff:ce:53:ae:d8:c1:90:
                    6c:2c:ff:fd:86:19:b3:61:01:b1:8b:08:fa:47:6c:
                    2c:cf:a8:8e:30:5d:5a:28:22:e6:19:61:50:0f:27:
                    83:8c:1b:7f:c0:ec:eb:6f:c5:aa:de:73:7d:36:64:
                    69:f2:49:f4:fb:05:a7:5c:d3:7d:a5:b8:84:91:a8:
                    76:36:a7:6f:94:aa:32:23:9f:7e:9b:fb:88:4a:c8:
                    87:63:8a:ee:de:8c:bb:e5:65:55:52:26:0a:68:51:
                    e6:60:0a:6a:61:8d:1e:0e:f6:dc:a7:9b:58:62:23:
                    ab:f8:e6:1b:57:45:05:e1:3a:b4:2a:66:0d:e8:29:
                    da:84:9d:a7:67:ef:27:e9:13:4c:85:f0:83:68:4c:
                    b5:e6:19:c3:b1:4c:33:bd:80:7e:fb:0a:11:6c:d3:
                    31:99:7e:68:98:54:a4:7d:7c:9f:b8:1b:42:ed:3c:
                    fe:53:c8:8e:82:2a:4f:f8:5b:c6:4a:9a:0f:3b:14:
                    ad:4f:e0:da:2a:64:c3:7e:35:f3:be:a4:9e:1e:e4:
                    8d:a2:93:25:43:b5:21:98:21:1f:48:ad:6a:99:ee:
                    63:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3D:D0:9C:31:06:E0:A2:94:1F:A1:94:2B:F2:AF:5C:26:9D:24:49
            X509v3 Authority Key Identifier:
                keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:90:c6:59:01:a6:14:41:40:7e:69:32:73:b6:09:16:59:
         78:bc:e7:00:20:60:75:f9:29:a8:ce:ea:fc:35:7e:d5:06:e2:
         ab:2c:f8:e7:08:a3:dc:2c:3d:32:f4:9c:eb:38:17:f2:a2:7f:
         1f:21:ae:43:fb:6b:1b:98:92:42:8d:3b:36:90:7c:fe:80:38:
         d8:80:bf:ad:58:6a:5c:b5:c2:6c:ad:3a:03:42:0c:91:b2:5c:
         c7:2a:e4:06:04:aa:16:f4:12:59:37:67:3b:88:4c:42:c7:92:
         bb:01:82:b4:16:51:43:2a:48:38:d3:c1:ce:b8:3e:d5:98:7f:
         cd:23:f3:56:2d:f9:3f:f9:dc:10:c2:9c:0d:c5:ae:a4:78:51:
         41:bd:32:d1:2a:c7:22:f6:d1:aa:b5:6e:12:fa:02:de:8b:cd:
         c6:e5:af:d7:0b:a7:77:be:60:e6:5d:bb:ab:a8:13:d3:be:01:
         96:58:1f:fa:8c:05:95:b0:66:c0:1c:b9:bc:96:f3:05:85:98:
         eb:8e:47:5a:89:f4:4a:84:13:df:b0:02:ae:7c:ad:28:67:85:
         d4:da:81:ce:f3:61:a5:fb:9b:e8:bd:8b:5c:9e:9b:e1:67:ee:
         17:26:47:c5:39:4c:6b:94:e4:65:1f:96:86:b3:0e:a7:7f:84:
         c1:94:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:25:22 2025 by rpki-client