Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          2fJW1DWfVLUjZPYXR5Kjy3K85Q/DBENJJq1weyFY0c4=
Subject key identifier:   19:58:A0:45:FD:21:37:2F:15:08:6A:25:CD:C5:AE:5A:3D:69:73:E3
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       01993537A143A3E22A045F0739630EF6608E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          12C5
Signing time:             Wed 10 Sep 2025 20:01:02 +0000
Manifest this update:     Wed 10 Sep 2025 20:01:02 +0000
Manifest next update:     Thu 11 Sep 2025 20:01:02 +0000
Files and hashes:         1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: zdNQCA+5Cu7xDvhu/1cSv8RZTyuNCojJvb945RlEXuk=)
                          2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:37:a1:43:a3:e2:2a:04:5f:07:39:63:0e:f6:60:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Sep 10 20:01:02 2025 GMT
            Not After : Sep 11 20:01:02 2025 GMT
        Subject: CN=1958a045fd21372f15086a25cdc5ae5a3d6973e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c5:db:ae:c7:a5:9f:dd:ab:db:49:6d:fd:a9:
                    fb:94:62:96:32:ff:d3:3b:52:0a:b1:1f:c0:3c:43:
                    e1:d6:ee:f0:ec:04:88:fa:9a:e9:9c:81:ee:13:54:
                    29:c2:b0:08:87:84:13:9b:eb:0b:06:4c:94:01:2b:
                    7f:6e:25:72:ee:6a:cc:5d:bb:87:68:8a:a7:58:f9:
                    2f:8b:0e:9c:ff:c8:7c:02:1c:c6:eb:37:da:3f:41:
                    b6:73:88:66:81:d3:03:6f:85:bd:80:64:f7:cd:68:
                    d2:bc:1c:5e:83:aa:a8:88:e8:ec:1d:26:ad:19:8d:
                    77:6d:3b:86:bd:bc:75:63:81:1b:1b:96:b7:f6:a5:
                    cd:c3:af:57:b4:e1:6a:96:f1:0d:12:86:2b:71:de:
                    40:6d:31:6d:cd:19:d3:23:df:f7:c2:3b:75:d1:68:
                    d0:00:13:e3:23:e4:ff:6f:4c:82:bd:e9:77:31:c4:
                    a6:c0:b1:ff:84:38:62:7c:7b:63:0c:de:be:bf:40:
                    d6:65:19:a3:5d:e8:d0:84:ff:78:77:71:ff:d8:ba:
                    2c:4b:6e:b7:99:f6:b1:a5:9d:0f:6f:58:26:31:40:
                    3d:fb:24:96:f3:19:fd:a2:22:4b:ed:e4:9f:f1:ba:
                    22:f0:1f:61:46:51:80:aa:5f:4b:32:d5:3a:57:e5:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:A0:45:FD:21:37:2F:15:08:6A:25:CD:C5:AE:5A:3D:69:73:E3
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:51:ea:94:fa:de:85:4d:4d:81:47:fe:22:48:01:6b:ad:
         f6:3e:d1:8e:9b:4a:ce:6d:69:48:69:c1:5a:9a:bb:be:54:ed:
         fc:2f:fd:1d:7e:c7:e6:ab:b1:f0:4e:b6:2f:31:d0:b7:e1:92:
         ec:4d:00:7e:52:ee:3a:6d:39:7a:88:af:26:08:7f:8c:e7:a2:
         2b:9b:11:53:3a:f6:a3:59:78:fe:bf:35:60:f5:e1:25:71:24:
         78:3e:b8:3d:91:ee:cb:ec:73:00:d4:7e:45:dc:5f:99:ba:4d:
         28:91:56:1b:c4:72:b6:e2:49:44:66:3e:7a:9e:1f:9d:3f:4b:
         63:b4:a7:e6:03:b9:c7:d3:10:2b:30:71:09:d4:dd:5c:33:48:
         cc:61:9b:5f:17:e6:f4:58:06:17:69:66:de:a4:65:99:78:a1:
         b8:f4:d9:26:70:0a:0c:c8:56:d1:24:6c:a0:bf:55:14:ad:d7:
         cc:bb:4f:02:2a:c6:08:8e:19:d8:a4:5a:77:90:73:48:36:17:
         80:52:0c:b5:52:89:1a:e9:28:b2:75:7e:fb:0c:df:a9:2a:32:
         22:2c:63:82:1c:a0:6e:e1:d8:59:7a:cc:85:c1:f0:54:fb:a8:
         f6:bd:84:cb:83:82:c1:18:99:a1:62:f1:5b:a8:8b:e4:7c:b1:
         67:87:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:46:54 2025 by rpki-client