Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          yUxA6yfZ3n1hYOtmvsEeGlb3Xwv8KEXpNakZvf82DpU=
Subject key identifier:   EA:C2:5D:85:24:52:11:4F:BC:45:02:A5:03:61:5D:7A:C8:21:ED:B1
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       019934928789E5FBEAE12183D4890C100E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          1682
Signing time:             Wed 10 Sep 2025 17:00:42 +0000
Manifest this update:     Wed 10 Sep 2025 17:00:42 +0000
Manifest next update:     Thu 11 Sep 2025 17:00:42 +0000
Files and hashes:         1: HHlEIHLaS3GMguRjiZVeXZtaB1U.roa (hash: YlDlqGcFKkVbm+bI6++WiC8vTEcJ4i7q+bRlRvHQvDM=)
                          2: JFfXWjIJHVSFeGbySM8n0cwBw74.roa (hash: kgkONWoOOrXSbcj6bdCOVH5+Q3j9I/JtMm/NZI6wPhU=)
                          3: YWh_o51jvYOy_7yJxKWIzC6AjVw.roa (hash: 5h6ADSbcLhyyb1o530CRr7FXSLev1xEONn8X3G0ic1Y=)
                          4: f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa (hash: f/FLhL5iK4w35mAjQuNFPLV5x3iPtqx+dEGqwTvpyc4=)
                          5: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: zkFRtXa6Mxsfu2Jsezf8j6BkUX77YyI/c5vE9Uw6A+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:92:87:89:e5:fb:ea:e1:21:83:d4:89:0c:10:0e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Sep 10 17:00:42 2025 GMT
            Not After : Sep 11 17:00:42 2025 GMT
        Subject: CN=eac25d852452114fbc4502a503615d7ac821edb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:5c:75:b1:f2:86:a9:bf:b9:c3:c6:9d:43:
                    cf:36:05:e4:b7:f0:3e:ba:13:0b:5a:3d:ba:94:93:
                    97:2f:97:be:ba:ee:71:f5:65:fb:e8:06:a4:17:01:
                    b1:dc:76:46:25:8c:6b:f5:98:94:a4:cc:d4:c1:74:
                    ed:a7:10:ef:ab:27:cc:0a:0a:ba:21:3a:b3:2d:e7:
                    79:14:c0:c6:5a:13:8d:6f:f7:f9:38:20:b6:89:8d:
                    84:2b:fd:ef:b4:b4:2f:f5:d0:d0:98:8d:76:89:5e:
                    be:3f:5f:ad:5a:82:9a:22:8b:5e:24:a9:b0:45:86:
                    91:f0:df:50:b1:40:09:3c:14:1f:95:93:4e:6e:44:
                    a0:05:83:5a:ee:8d:a3:94:b6:77:30:8c:55:c3:d5:
                    d6:b3:2a:fe:2e:90:dd:ce:15:98:6a:f9:d4:8c:1a:
                    67:9c:8b:9a:a5:25:73:ee:fd:3f:5b:8d:e5:b4:0d:
                    4c:50:83:74:8a:cb:d0:46:ea:1e:2c:fa:74:e2:58:
                    70:2f:31:83:dc:32:9e:79:e9:b0:7d:9e:60:f1:27:
                    5e:00:49:87:47:26:4f:76:11:87:4c:a3:cb:fd:09:
                    0d:87:53:d5:ff:ac:13:76:a2:99:4c:8d:1a:3c:90:
                    70:8b:df:c4:20:fc:6f:ba:6e:a9:88:6c:75:d8:32:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:5D:85:24:52:11:4F:BC:45:02:A5:03:61:5D:7A:C8:21:ED:B1
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:08:00:83:bc:7b:46:34:61:54:7f:e5:a3:c3:f7:0a:ca:
         ce:0a:13:34:44:b2:ae:94:fc:c2:6d:c3:ee:f8:81:85:af:d3:
         b9:af:ee:d5:ab:f1:aa:8d:cc:fe:f1:f4:6f:e9:5b:43:6c:e8:
         ee:3c:b4:2a:92:b7:41:f3:34:eb:b7:60:0b:1a:e1:19:57:b0:
         ba:c5:0b:d3:fd:04:23:97:26:5b:3a:28:ad:09:36:40:63:dc:
         c4:a5:47:c0:62:42:7d:9a:38:2d:e2:25:c5:6d:0d:03:58:dc:
         74:73:bd:7d:eb:d0:41:9f:de:43:66:44:9d:5d:95:59:36:48:
         45:90:8a:a6:64:4f:e5:26:da:47:32:d5:28:55:23:d7:63:b2:
         27:60:1d:f0:48:59:be:28:95:ed:97:40:ca:8c:f2:c6:56:e2:
         5e:c8:ca:24:db:94:4e:9e:4a:98:4e:56:25:c0:fe:ab:43:ef:
         2b:50:98:cc:85:7f:e1:72:a2:22:88:9b:51:c8:d6:53:8a:39:
         c6:fc:a5:c6:9c:ef:8d:ae:d3:a6:43:0f:da:6c:15:6c:54:77:
         c7:e8:76:5a:f0:50:ca:5a:8d:a1:76:7a:a3:96:e4:e5:66:5b:
         1a:58:f2:cf:0e:12:9f:06:4a:06:b6:23:2e:22:8c:14:cd:b5:
         8f:ec:df:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:19:39 2025 by rpki-client