Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
File:                     Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json)
Hash identifier:          wZqKhvzzsUXdiAO62q8q5iCc/l5peTvvdEmzu4plo/c=
Subject key identifier:   ED:D6:21:D4:C9:9C:8B:2A:BE:A9:AA:1D:13:CE:E5:A0:F3:E9:E0:D3
Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9
Certificate issuer:       /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
Certificate serial:       01984B53B2FEE1DBACAE6680F9E7CC327E32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
Manifest number:          0410
Signing time:             Sun 27 Jul 2025 10:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:33 +0000
Files and hashes:         1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: m0FY3qKWlusS4KH/zpgjk/naw3prngJ8Jia1kj0SedQ=)
                          2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:b2:fe:e1:db:ac:ae:66:80:f9:e7:cc:32:7e:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9
        Validity
            Not Before: Jul 27 10:00:33 2025 GMT
            Not After : Jul 28 10:00:33 2025 GMT
        Subject: CN=edd621d4c99c8b2abea9aa1d13cee5a0f3e9e0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:00:bc:0a:c0:08:b7:0a:b0:7c:70:cb:08:f0:
                    47:83:d7:1e:8f:eb:9e:11:21:9c:42:13:f5:81:44:
                    e4:30:a9:93:6b:57:da:e7:31:cc:6d:ac:ed:cf:6d:
                    29:7f:c3:dd:29:3b:61:34:8f:f5:ee:55:56:0c:ac:
                    04:d2:42:49:9f:20:fd:02:97:20:63:ee:b8:f2:df:
                    33:43:67:af:6f:91:d6:08:e1:10:57:0b:39:56:1d:
                    07:a9:2e:b0:63:51:99:51:02:5c:02:42:95:b5:c4:
                    e8:1d:f3:2e:42:eb:ce:8e:ad:57:56:8c:6a:5e:57:
                    93:dd:7a:71:a5:96:7f:8d:94:83:75:32:49:9a:e7:
                    40:8a:7b:b7:b8:ab:49:d7:47:2a:6f:45:ee:89:cf:
                    ee:9d:22:82:0a:32:4a:06:a4:f2:7d:1d:1e:59:23:
                    9c:ff:83:b6:19:8e:fd:fd:91:b5:f5:c5:60:96:f9:
                    db:d1:76:95:4a:d9:0f:7c:0f:48:49:a8:b5:66:42:
                    a0:15:ba:dd:a1:0e:bb:5f:8a:13:3c:40:00:54:1c:
                    19:b8:93:1f:e1:69:3b:84:84:a1:d9:88:97:5b:95:
                    9c:6b:bb:85:9c:57:d6:17:9d:d4:21:97:15:b1:bc:
                    63:fe:eb:73:c9:9d:c6:21:1c:50:f5:dc:e1:a8:3e:
                    9e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D6:21:D4:C9:9C:8B:2A:BE:A9:AA:1D:13:CE:E5:A0:F3:E9:E0:D3
            X509v3 Authority Key Identifier:
                keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:27:be:86:0e:a5:e6:cb:fc:f7:a6:a3:6d:34:af:f1:b6:5a:
         4e:ff:da:29:6e:6c:f9:8c:78:2a:cf:93:e0:94:7a:73:bf:8a:
         0c:54:10:85:81:b8:7c:0c:d6:99:01:5a:d1:b6:cb:ee:c1:fb:
         3d:5e:24:82:8a:93:89:5c:58:12:8d:66:7c:72:09:bc:6c:52:
         86:b6:39:e9:b3:75:6f:90:22:87:41:ef:df:7d:b6:8d:2a:4b:
         34:e3:4e:6c:d6:5c:4e:5d:bb:f3:00:2c:d5:7e:c8:df:67:c7:
         d8:92:f2:3c:49:be:d8:3c:9a:ac:04:5f:bd:a0:0f:47:68:87:
         ca:61:75:fe:27:7f:38:93:a2:72:41:7a:79:5a:50:a3:23:b0:
         77:0a:87:3a:77:5e:fa:d2:78:cf:f7:76:1c:f7:78:61:9a:c7:
         79:24:56:c4:ef:aa:4d:d6:3c:f1:8c:a6:83:21:f1:35:ab:a0:
         22:0d:12:da:6b:bb:1e:0f:3a:ab:e5:fc:47:c2:b6:67:c3:8f:
         35:64:83:fb:f4:15:35:40:8a:c9:a4:ff:fe:75:8b:72:89:1b:
         d3:b3:36:ed:57:f7:fb:a0:50:7a:f7:51:73:c0:25:5c:5f:95:
         ac:0a:31:39:4f:6b:22:79:c3:03:cf:b1:1f:40:94:93:86:59:
         69:f8:a9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:12:29 2025 by rpki-client