Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
File:                     eDLQYJMtR4WhDKR96AAvZcHvM64.mft (raw, json)
Hash identifier:          CRwWpNuivKuKKxkrkWmyuJ+TXQ/bgqx9ZI2JCIqBB1M=
Subject key identifier:   CA:E2:F5:C6:BF:BC:D6:7F:28:C2:62:74:FE:28:86:29:2F:D3:2D:B1
Authority key identifier: 78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE
Certificate issuer:       /CN=7832d060932d4785a10ca47de8002f65c1ef33ae
Certificate serial:       019921E7DA0B1BAF72C2B1ADC967201DBA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
Manifest number:          116F
Signing time:             Sun 07 Sep 2025 02:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 02:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 02:01:06 +0000
Files and hashes:         1: UkvE1AtgzFaEZZjsZiVXyyLbs5o.roa (hash: y7S6KVTG3N2Xe5Mq5Th3G1Pm17a7WWjgGUAMC2Q3dUs=)
                          2: eDLQYJMtR4WhDKR96AAvZcHvM64.crl (hash: cLSIPkK4KpYyWDep9XtNU/mIHqDuJ1zDuo6N2xDIziQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:da:0b:1b:af:72:c2:b1:ad:c9:67:20:1d:ba:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7832d060932d4785a10ca47de8002f65c1ef33ae
        Validity
            Not Before: Sep  7 02:01:06 2025 GMT
            Not After : Sep  8 02:01:06 2025 GMT
        Subject: CN=cae2f5c6bfbcd67f28c26274fe2886292fd32db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:f0:28:8c:07:98:78:99:b2:7f:ea:03:77:
                    ae:2f:c8:b4:48:f4:12:95:f2:7e:0e:9f:db:59:31:
                    30:19:ef:ce:10:6f:d8:73:93:95:b7:07:91:1f:05:
                    9b:c7:fd:5d:90:43:6b:31:9f:39:21:06:1a:6e:1c:
                    39:51:93:63:91:66:3d:99:eb:61:38:19:e3:e5:ea:
                    00:cb:4c:96:84:28:20:d3:c5:a2:bc:21:b6:e2:06:
                    98:8c:0a:bc:03:c0:06:6a:54:40:fc:c7:22:9a:7b:
                    3e:24:bc:c0:1c:a2:0d:ed:2b:21:02:80:b2:47:e3:
                    07:1f:bc:32:d2:ff:e6:13:66:a3:d2:60:c2:c1:e9:
                    ea:37:32:9d:65:14:d3:0e:a8:db:ab:44:67:74:dd:
                    0b:5f:04:55:c3:b3:85:e4:b8:c9:e0:02:64:76:f2:
                    1c:a7:5c:04:29:74:13:14:0d:2b:cd:28:c3:04:7e:
                    6d:c9:be:77:e0:2c:7e:49:20:cf:2d:62:a5:43:24:
                    63:c7:18:9d:f2:22:f4:f5:f3:9e:9f:d2:b9:a0:d8:
                    8f:4b:af:d8:97:7f:0b:3c:41:ea:cb:9f:e0:a5:39:
                    db:c4:f3:42:fc:91:10:70:d8:23:79:d2:e1:64:d2:
                    fe:fa:6a:93:28:33:bd:59:f1:e5:55:11:8f:42:72:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E2:F5:C6:BF:BC:D6:7F:28:C2:62:74:FE:28:86:29:2F:D3:2D:B1
            X509v3 Authority Key Identifier:
                keyid:78:32:D0:60:93:2D:47:85:A1:0C:A4:7D:E8:00:2F:65:C1:EF:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDLQYJMtR4WhDKR96AAvZcHvM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/aa037c-32ce-4406-b0bc-89949fcc7afb/1/eDLQYJMtR4WhDKR96AAvZcHvM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:34:f6:ef:fd:95:38:e0:da:52:09:fe:3b:45:41:72:4e:6f:
         93:a3:e2:88:c9:62:57:97:70:c3:1f:d9:c8:b7:66:da:1d:c4:
         49:1c:93:53:d9:d0:10:f5:fb:14:f9:17:ac:f4:6b:8d:49:82:
         f0:e6:ae:bf:d9:80:ef:d7:11:5f:b9:ea:6f:2b:56:51:21:55:
         63:93:ff:a8:94:58:ca:48:b6:2b:2e:21:8a:18:df:01:36:f6:
         be:d6:df:c4:c7:99:15:ab:5e:bb:b9:16:26:ce:09:eb:d8:45:
         a2:e0:b5:79:64:a8:a8:61:04:3b:1c:57:18:5b:51:f7:96:16:
         10:41:d2:ff:33:d0:f9:71:16:1a:00:68:ff:2d:9d:3d:26:93:
         76:aa:e4:74:de:fd:52:39:96:07:e3:1e:4a:50:11:74:4d:aa:
         26:46:4f:95:c8:4b:6c:d3:5c:7a:1a:2f:6e:3b:b3:73:1d:27:
         02:77:fe:14:e2:3d:af:64:d2:88:f9:4c:67:6c:82:d9:c2:5f:
         7e:ae:d8:18:6b:57:ea:5d:65:47:68:66:75:9d:70:07:ff:21:
         4b:ad:3a:2a:10:33:c4:20:00:9f:b8:60:44:42:6a:7d:09:3a:
         6e:fb:00:0e:3f:a6:17:2b:9f:da:e1:db:61:eb:89:67:fc:a7:
         9b:4c:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:02 2025 by rpki-client