Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          TmQ17h1mcSXBcxjLFLIDSwHSlpVvqzwHoNCK1tb9iIM=
Subject key identifier:   03:D3:62:A9:28:35:3C:09:D6:50:7D:B6:1D:C9:E0:42:8F:8D:69:CD
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       0199187744978B80E94B4C7FC4AA83735B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          4B
Signing time:             Fri 05 Sep 2025 06:01:33 +0000
Manifest this update:     Fri 05 Sep 2025 06:01:33 +0000
Manifest next update:     Sat 06 Sep 2025 06:01:33 +0000
Files and hashes:         1: 6pr7bC9xj3LXncglgFHE1ACWKnk.roa (hash: HF561zp0/qVinEliP1IFKlQACRwz8RHQD3kya8mzZ+U=)
                          2: DyDiidWZS3iA7B2blKmA9bXsSRk.roa (hash: 8Th9ZjmszvDIlprvR+a1tMmoJ0kkYSailEtQfsqFMeY=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: 4v5u1ZkUarOMT/PGwP/NOMl52rB75f311GGsmL8dUWo=)
                          4: EZZjtsRZB4At2QcIZcqmfQeU5tg.roa (hash: vbbShe8wdndeEL7lS6dm5FZSSpF2qDaTf1tgRMD7QrU=)
                          5: L6E0N5We5qeZ-y9d2NJMforAByY.roa (hash: ZYC/BS1PJtF8W5Ev9dV+L5Rd8Gl/CdhyxKHOzd5pCTw=)
                          6: YaE-516tO0-vxtzgzUQCVeYa6sM.roa (hash: yKU5PrBmHLHt75hheXsS4PIrNLFdDNALNLqvpMN9xYM=)
                          7: sb-GCH9IlUVV1HBTwu_2sGH00L8.roa (hash: NIEwuhjNP7AJ1aGJG2ysJUL1eP2V5WuknrN1zsvlhbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:77:44:97:8b:80:e9:4b:4c:7f:c4:aa:83:73:5b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Sep  5 06:01:33 2025 GMT
            Not After : Sep  6 06:01:33 2025 GMT
        Subject: CN=03d362a928353c09d6507db61dc9e0428f8d69cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:f6:0a:c2:d8:94:58:34:ce:e8:99:3b:e3:
                    17:c1:07:97:0b:56:a4:75:de:ed:52:a7:15:45:64:
                    83:96:51:54:e7:5e:00:b0:4d:06:0c:62:7a:2f:0f:
                    33:23:5b:a7:9d:b4:92:7e:91:20:81:d6:70:a8:a6:
                    71:28:4b:40:1a:5d:d6:39:84:9e:ce:fd:cb:af:68:
                    cb:b9:e4:46:10:5a:b9:b3:73:b7:60:d8:21:a8:50:
                    87:0b:a7:4a:6c:e7:de:ef:35:67:2d:c4:3b:c9:17:
                    8f:ce:fc:ec:eb:3b:e8:6d:33:35:e7:0f:53:46:f5:
                    62:a2:ac:89:35:35:df:52:2e:09:cc:e8:4b:93:dc:
                    c7:11:83:ad:b1:d4:2f:bd:66:47:84:7a:06:78:a6:
                    da:33:a2:02:5d:04:60:db:f6:3f:19:6c:69:be:23:
                    e4:f0:e1:96:8f:6a:f1:4c:7e:8b:6e:ed:38:39:ee:
                    f7:cb:55:26:53:54:ee:0c:e3:05:53:94:d0:0b:28:
                    0c:79:cd:45:aa:76:28:8a:c6:ba:13:70:5f:b4:67:
                    02:a6:67:3c:36:2e:32:e7:a9:dc:d9:94:85:3e:37:
                    e8:75:60:8c:ab:74:9e:18:e1:42:fc:80:b3:ad:c6:
                    f0:6a:46:f7:99:e0:f9:df:f7:0e:a5:d6:85:6a:14:
                    da:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D3:62:A9:28:35:3C:09:D6:50:7D:B6:1D:C9:E0:42:8F:8D:69:CD
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:41:57:0e:53:b8:58:a0:94:c7:cc:68:28:78:06:ef:ba:
         2a:7d:62:3a:ca:81:7a:ab:52:7a:1f:a7:32:b5:70:4c:47:c7:
         80:9e:65:e1:c1:2a:ab:15:b5:a3:1a:db:e4:52:0b:63:22:05:
         f8:8f:5a:87:bf:61:67:00:ba:1d:3f:7a:13:50:73:60:f2:ab:
         f0:eb:3d:db:3f:6c:87:8a:b0:a5:b8:57:0c:7c:74:de:eb:a8:
         cb:11:6c:0b:b3:8a:07:92:64:81:af:33:fd:4f:c8:5b:44:10:
         61:9b:46:5f:cf:7e:56:62:4b:a4:b9:40:a1:df:56:ed:d1:43:
         ff:cf:ed:8e:87:47:67:2c:8f:d9:42:bc:47:18:4d:49:50:d6:
         f4:ef:6e:3f:b7:1f:36:8b:29:37:11:4f:43:fd:22:73:e1:4e:
         c6:74:91:cf:38:34:00:c5:29:df:6c:02:a6:53:00:ce:17:a2:
         eb:8d:73:d3:a0:11:82:e6:0f:eb:df:8b:39:94:67:05:42:b0:
         00:ef:fb:54:9b:27:ac:11:77:21:9e:a6:8a:ef:3f:70:b8:be:
         49:dd:75:56:8e:b7:2f:84:73:90:29:bc:b0:14:8c:90:87:4f:
         ae:bd:92:43:c4:78:dc:bf:14:25:7f:f9:84:a5:2e:d4:12:4c:
         d8:da:33:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:37:28 2025 by rpki-client