Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
File:                     EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft (raw, json)
Hash identifier:          taiATk9NpTImzDZ9cYZZ4nofJv/OGE4QU8jL8bbnalI=
Subject key identifier:   16:CE:A7:36:34:12:6C:27:59:D8:92:9B:C4:0C:1E:FF:FF:FB:8E:64
Authority key identifier: 10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8
Certificate issuer:       /CN=10768d39f932791007a097209b0983fe85560cb8
Certificate serial:       019916886C62F61C9060A4CA40FABA8972D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
Manifest number:          1669
Signing time:             Thu 04 Sep 2025 21:01:03 +0000
Manifest this update:     Thu 04 Sep 2025 21:01:03 +0000
Manifest next update:     Fri 05 Sep 2025 21:01:03 +0000
Files and hashes:         1: EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl (hash: tYqmIuEdpYEhgTNIXPqvuzRqXgZyQjT+bq0ykLjPRhE=)
                          2: Nvbyv1PpytUaMC6H5xpJ11kc-dg.roa (hash: SbERHfQI9Tu/9a/EQjXNeCBB9RcFRF7Qffhnwr+U0O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:88:6c:62:f6:1c:90:60:a4:ca:40:fa:ba:89:72:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10768d39f932791007a097209b0983fe85560cb8
        Validity
            Not Before: Sep  4 21:01:03 2025 GMT
            Not After : Sep  5 21:01:03 2025 GMT
        Subject: CN=16cea73634126c2759d8929bc40c1efffffb8e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:94:46:87:b7:7c:09:52:09:56:3f:9d:b1:
                    cd:d1:db:89:e7:9c:65:4b:eb:2f:30:5d:36:f1:f3:
                    1c:0a:96:76:52:2d:af:24:8a:5a:a9:a9:4b:9e:86:
                    0a:d0:4d:9d:1c:cd:a9:72:32:54:50:c7:10:fd:06:
                    5b:74:9e:fe:de:ab:3e:24:68:2e:e5:f0:8f:e7:ee:
                    0e:15:7b:c5:72:9c:ab:21:92:c0:1d:d1:a5:0e:34:
                    da:47:2e:1a:8f:10:04:ae:17:b6:83:ce:8b:21:7a:
                    33:f1:85:ba:d8:7b:d4:78:89:45:91:a5:ab:f3:24:
                    6b:67:d6:e9:f6:31:82:f5:ad:8b:ac:84:98:5a:dc:
                    cb:04:0c:28:be:cc:f1:7e:ab:43:3a:a4:73:13:e2:
                    6d:ae:01:34:6b:ba:e8:21:84:27:8b:47:c3:66:31:
                    53:0b:2f:7a:e5:6c:f9:1f:2f:52:35:fc:6d:30:8c:
                    df:d5:b9:33:43:73:18:bb:88:16:84:5a:ab:97:a1:
                    81:e6:ef:66:76:e1:8f:9e:78:d2:fc:79:73:64:c5:
                    f7:39:46:12:b0:5b:55:07:3c:fd:d7:a2:ea:07:89:
                    b0:ad:34:78:c9:7f:ec:89:93:a7:8e:ee:16:af:ca:
                    51:1c:60:9c:33:cf:31:3a:79:a8:f0:4a:ce:fc:9f:
                    b2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CE:A7:36:34:12:6C:27:59:D8:92:9B:C4:0C:1E:FF:FF:FB:8E:64
            X509v3 Authority Key Identifier:
                keyid:10:76:8D:39:F9:32:79:10:07:A0:97:20:9B:09:83:FE:85:56:0C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHaNOfkyeRAHoJcgmwmD_oVWDLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/93c17e-8490-4e91-9815-72c33daf3156/1/EHaNOfkyeRAHoJcgmwmD_oVWDLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:10:08:26:7e:b7:7a:64:9b:6f:a1:89:da:ee:a3:e7:b9:
         8f:47:41:84:76:83:83:b1:bf:a7:50:51:1d:5c:3c:ab:66:a4:
         1d:88:d2:2f:cc:c7:b7:e9:a9:7b:66:d8:fe:b6:ac:41:eb:a4:
         7b:d8:47:b3:9f:a4:fa:66:fd:c4:f0:90:29:9d:20:1a:9c:e1:
         49:2f:db:c2:d2:55:99:9e:f9:d1:a2:c3:9f:23:47:86:93:59:
         15:83:5a:11:d9:94:68:88:33:f2:b1:b5:6a:42:8b:ae:1e:af:
         e0:7f:65:4a:ef:80:30:14:06:c0:be:40:bb:59:ba:ec:4d:7c:
         a1:92:2e:af:51:31:1e:bc:f1:db:9a:cb:da:89:3b:2a:ac:0c:
         22:89:1e:14:bc:00:4e:ee:20:76:d1:c0:cf:85:a6:d6:cf:5a:
         d4:f3:2b:30:93:af:ff:1b:90:58:3b:49:1a:b6:3e:c5:50:f9:
         d1:8e:77:60:4d:1d:34:d1:c7:17:92:f0:43:02:62:24:50:6e:
         bb:f4:6b:8a:e8:7b:1f:c4:20:7c:7f:f4:6c:da:18:ae:31:b9:
         c6:2f:47:ae:d0:78:88:5d:8e:99:0e:81:f5:61:93:91:d1:84:
         00:48:83:82:22:5e:59:2d:68:0c:16:4a:5b:b6:34:72:e6:98:
         94:9e:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:29 2025 by rpki-client