Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File:                     grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier:          XEm5YS9PLpZ9tU9EN9W8Zo8KspchAGKZeL7tmFETPMk=
Subject key identifier:   80:68:42:0F:FB:0A:51:29:02:CB:EF:56:D2:61:6D:44:41:2C:1F:22
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer:       /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial:       0199228C2D7D330E2AA1024420B43449F6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number:          0E0A
Signing time:             Sun 07 Sep 2025 05:00:35 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:35 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:35 +0000
Files and hashes:         1: 1-q5t5dbXJQJPAbEiSYfDN9-Kp_0.roa (hash: jh5W+EA/au2yjcrCCgbD+iZSjQ/AqIbIhccnO7LERWE=)
                          2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: ffVx07jEpzpIMqsNalwZK5wonhua1m8Oi8Jb50xvPPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:2d:7d:33:0e:2a:a1:02:44:20:b4:34:49:f6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
        Validity
            Not Before: Sep  7 05:00:35 2025 GMT
            Not After : Sep  8 05:00:35 2025 GMT
        Subject: CN=8068420ffb0a512902cbef56d2616d44412c1f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:aa:00:90:12:8c:6d:0a:bd:6f:9e:31:cb:
                    f4:9e:73:1c:b5:80:c9:91:04:9e:6b:68:1e:28:97:
                    c6:09:bc:9f:d7:a5:0c:b5:0d:a1:3c:ca:65:29:41:
                    64:03:0f:10:97:96:e2:53:d8:09:55:98:b2:b5:40:
                    27:a9:2f:96:71:44:93:c9:18:b2:ae:26:d1:b4:93:
                    33:f9:6f:7b:8c:5b:5d:d5:ae:97:35:55:1c:56:ec:
                    06:bb:4c:f7:71:35:1f:a4:4c:bf:d3:74:70:dc:c9:
                    6a:da:72:2a:c4:92:28:79:a7:af:2d:a5:97:86:a9:
                    c8:99:49:7d:ca:fd:28:fc:60:3a:be:5e:1b:11:0e:
                    b8:3d:cf:58:b2:9f:86:27:76:7d:fb:a0:37:fc:cb:
                    c0:7b:40:e3:bc:c6:73:93:bc:d3:fd:92:c3:09:c4:
                    02:de:f9:05:d2:a6:bb:3e:ef:ec:79:21:85:fe:30:
                    93:48:c0:30:83:f9:ee:ea:70:aa:17:96:12:71:a4:
                    f5:e4:b3:42:10:58:58:13:6d:2d:24:22:9e:43:77:
                    ec:3c:c1:a3:2b:3a:24:04:5a:48:c9:3c:2b:1a:e7:
                    5f:10:82:0f:7c:23:68:2a:c2:f4:43:b2:42:3f:80:
                    90:02:87:e5:e4:13:9e:ae:82:0d:93:5d:69:54:f3:
                    d9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:68:42:0F:FB:0A:51:29:02:CB:EF:56:D2:61:6D:44:41:2C:1F:22
            X509v3 Authority Key Identifier:
                keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:81:87:f7:ce:32:46:0b:5b:e0:7e:07:a1:96:11:ff:7e:
         93:4f:34:40:d6:07:84:c0:bc:06:78:1b:0f:78:42:2f:8a:ad:
         10:05:5e:de:12:1b:00:23:75:b2:ce:b4:b8:20:0a:f4:12:83:
         1d:79:17:bf:92:1f:5f:be:61:9a:89:d1:07:31:83:1f:22:85:
         8b:b9:c4:13:c7:5a:fb:3f:35:49:c8:f2:b2:9b:2b:41:53:50:
         65:f7:26:8f:97:72:60:1f:b4:51:d5:c9:5f:79:87:70:1a:be:
         79:e3:dd:e0:9f:81:e8:75:6e:85:ee:1b:47:d4:0d:16:3c:ba:
         02:e4:8f:b0:8c:21:3b:37:81:6d:48:ca:b3:2c:6e:3f:b6:7c:
         c2:83:d4:c4:8c:42:6d:b2:6c:71:13:57:89:0d:54:61:4a:ab:
         10:c0:20:62:4d:0e:5e:be:16:ae:6e:2a:eb:a2:dd:07:f5:df:
         a4:3b:18:54:84:64:17:b5:ab:7d:06:27:76:44:71:24:e1:fa:
         6a:94:ba:49:42:f6:6f:a6:75:42:2f:30:a8:63:4c:cc:e0:30:
         92:6b:c8:df:a2:0d:40:ee:6b:57:b6:af:09:d3:0e:ac:3b:96:
         e0:e2:16:5e:9d:0b:7f:71:6e:5b:e2:af:4d:22:80:f5:30:13:
         74:f0:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:20 2025 by rpki-client