Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          CLHOI2gqWSWg71gwNirq88vaSwHKqbU8HVngBVwPSBU=
Subject key identifier:   DB:1F:50:FD:79:61:8D:61:81:4F:2A:9A:43:9D:B6:F0:1C:D4:7E:E2
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       019933134E235EAD54175A314AE63FAB0136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          0FE5
Signing time:             Wed 10 Sep 2025 10:02:07 +0000
Manifest this update:     Wed 10 Sep 2025 10:02:07 +0000
Manifest next update:     Thu 11 Sep 2025 10:02:07 +0000
Files and hashes:         1: HFuTsAaQKossZYATTz-p-c6jBeU.roa (hash: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=)
                          2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: RufcdiHRbHKoM4eNA4MWmLOU5vmhbYW5XkKZMr4Zavg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:13:4e:23:5e:ad:54:17:5a:31:4a:e6:3f:ab:01:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Sep 10 10:02:07 2025 GMT
            Not After : Sep 11 10:02:07 2025 GMT
        Subject: CN=db1f50fd79618d61814f2a9a439db6f01cd47ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:09:47:9d:1b:6b:4e:a6:4b:1a:1d:26:12:
                    f9:65:44:ba:fd:03:c5:0d:80:23:9f:fe:f4:d2:b8:
                    0f:ce:5e:d6:e0:20:c9:b1:f5:f2:b4:76:23:ff:db:
                    65:8f:52:cc:79:17:64:e6:a5:37:0d:49:34:6b:c1:
                    2e:fa:b1:39:19:21:0b:14:ef:d3:ab:47:fe:85:02:
                    48:88:66:8e:1d:f1:bd:d2:54:17:42:aa:d3:e0:9a:
                    46:c3:76:fb:ce:e8:0a:40:ce:30:5b:2b:ab:e1:fd:
                    d8:34:84:b9:b7:7f:be:81:ad:0f:49:ba:48:82:96:
                    7c:2a:96:0a:f2:43:5d:50:db:9e:71:87:6b:42:c4:
                    cf:95:59:39:0b:65:dc:08:87:8e:ee:bf:b2:6b:cc:
                    68:82:07:68:f9:c5:d1:32:ab:3a:7c:63:e6:49:48:
                    d3:d0:bd:87:1b:5a:44:97:c2:da:a1:b2:3e:06:a2:
                    c0:39:d7:24:cc:cc:43:2b:f4:9f:ff:ce:0a:f2:ba:
                    2f:b9:e6:42:94:52:2a:ff:ee:8e:6d:b9:10:d4:31:
                    dd:8b:9c:b0:72:08:69:38:2c:42:a7:a5:39:02:64:
                    df:3f:d1:b3:48:6f:42:0e:28:48:5b:6a:fa:d4:c2:
                    e5:0c:21:7c:63:71:f9:09:3f:5e:b8:6d:42:98:4f:
                    48:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1F:50:FD:79:61:8D:61:81:4F:2A:9A:43:9D:B6:F0:1C:D4:7E:E2
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:79:96:fd:ec:49:32:a0:db:2d:5f:1c:0c:f5:d5:c7:fb:
         6c:7f:f0:13:54:a3:8b:94:47:84:74:b7:c4:0a:fd:36:45:a7:
         51:3e:81:8c:6a:0b:6a:8c:eb:a0:90:26:a1:85:37:2b:cc:0e:
         b6:37:e4:46:9f:8f:1e:6b:52:7e:44:a4:70:78:b6:5e:75:51:
         82:46:7c:c7:7e:8f:bd:0c:a1:00:df:ce:69:75:cb:03:4e:c6:
         1a:08:7d:95:c2:07:26:3a:dd:ff:36:72:ef:5a:d8:f6:3a:dd:
         1f:e9:32:da:c6:b9:17:d6:7d:f7:40:c8:1a:66:19:e7:63:a4:
         56:29:0a:32:bf:ed:7f:0f:4e:a4:17:1f:98:3a:fc:82:cd:c9:
         35:99:ee:96:a0:39:29:ad:42:d5:28:2a:cd:fe:3a:1b:9c:5a:
         ee:7d:24:1c:0c:83:c7:8d:87:c4:05:91:b8:eb:19:36:75:2f:
         c4:7b:5e:7c:41:58:15:a7:d4:28:f7:49:58:95:1d:f0:7e:ca:
         2e:ea:9d:b7:60:91:6e:45:99:6b:78:a2:12:c2:de:0d:ae:6b:
         ac:fe:ab:1f:3c:01:b6:24:83:31:b0:60:c1:5a:d4:46:30:94:
         4c:ff:8a:c5:33:88:1e:77:b9:11:1d:45:7c:21:00:12:22:e0:
         47:5a:cf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:20:46 2025 by rpki-client