Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
File:                     eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json)
Hash identifier:          MbqUfqsZNSoY7t+3IiLP10EHZ2dn7xwVzO9A7MPnBm4=
Subject key identifier:   B8:B4:FA:C8:77:02:71:13:69:DF:22:24:0E:B1:6B:DF:37:53:D2:36
Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5
Certificate issuer:       /CN=790ede662203f459e9b196d23387ac29e4a7c4e5
Certificate serial:       019921E7B260B4E378E7C2D7753DD8036017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
Manifest number:          0340
Signing time:             Sun 07 Sep 2025 02:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:56 +0000
Files and hashes:         1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: qVFKincz7wuz0uja0qkPYuOJHzmeaZI7RF/fl5CHuKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:b2:60:b4:e3:78:e7:c2:d7:75:3d:d8:03:60:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5
        Validity
            Not Before: Sep  7 02:00:56 2025 GMT
            Not After : Sep  8 02:00:56 2025 GMT
        Subject: CN=b8b4fac87702711369df22240eb16bdf3753d236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f1:dd:27:c6:4f:6a:22:2b:57:92:1c:f5:61:
                    0e:d3:28:d8:9a:11:1b:6d:75:a9:07:5b:5d:e7:33:
                    ba:60:f7:ce:7a:3a:cc:ad:31:76:60:35:d5:cf:97:
                    cc:52:73:e1:3f:b0:7d:b2:b0:2c:5b:16:ee:81:df:
                    c3:88:8d:9c:80:25:eb:67:34:85:97:15:2b:42:7f:
                    0c:cc:58:71:80:9a:a1:c0:6f:77:e4:71:d4:a3:98:
                    56:bb:e6:b0:b3:fa:db:08:b9:4d:4d:5d:32:81:2c:
                    ed:6b:97:68:eb:29:f4:f2:ac:37:45:04:d9:46:93:
                    ae:4d:41:81:83:2a:c9:04:0c:97:57:87:18:46:1d:
                    4a:70:c5:c2:5b:3f:fa:b3:65:3a:2c:ec:3f:c8:c4:
                    1b:41:9c:37:05:d9:e9:66:9f:c2:55:58:b1:16:46:
                    2c:8b:ab:ff:96:f5:1b:04:6c:aa:11:7b:f7:fa:b6:
                    f6:cd:39:e1:31:d2:88:af:82:e5:3e:de:93:9c:da:
                    0c:17:a2:aa:e9:a9:a0:d2:e7:7a:5d:f7:b2:00:7e:
                    c1:86:a4:ea:6c:1d:6b:eb:97:d2:f0:51:57:2d:3e:
                    fc:53:2b:d3:c5:d2:15:15:5c:4d:25:32:e6:15:b0:
                    05:9f:b3:12:01:5b:e2:4c:64:cf:37:7a:78:d1:a3:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:FA:C8:77:02:71:13:69:DF:22:24:0E:B1:6B:DF:37:53:D2:36
            X509v3 Authority Key Identifier:
                keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:d4:89:44:2b:a9:82:c1:f7:8a:c1:f2:0c:40:5f:69:1a:
         c1:60:a2:89:d1:73:44:fc:c9:40:56:70:94:63:a7:f5:f0:58:
         ad:df:ef:e2:0b:57:dd:94:60:c8:c1:1e:f8:de:b3:5b:49:58:
         7a:7f:f2:6e:7b:0b:28:8e:26:3b:43:18:dd:71:14:f6:b4:d2:
         2d:20:e6:9f:7f:45:e1:59:a1:9b:6e:4e:35:99:d1:8e:c6:96:
         3f:6e:02:9b:c0:60:45:e4:1d:65:0d:fc:5a:e6:20:0a:92:6a:
         ce:a3:5f:dd:25:b4:53:41:78:ac:3d:85:d2:cd:b2:7c:a0:6e:
         08:a6:29:5a:82:7f:b9:54:c7:5d:9c:e5:6e:19:11:08:10:72:
         08:ab:83:b3:1b:58:f9:42:68:1f:19:6e:86:86:b1:52:19:c5:
         48:f7:26:23:84:be:e3:e3:87:92:d6:f0:d9:93:b1:96:bb:58:
         d2:15:79:a0:60:98:05:99:74:dd:3a:2b:1d:73:b9:15:d0:83:
         78:c5:ce:48:79:3f:61:97:11:4d:47:c8:c3:38:97:b1:08:5d:
         23:da:2b:34:1c:5e:21:9c:36:72:cd:f4:49:04:db:86:a4:66:
         ed:7b:4b:6e:56:0d:a2:0f:ac:97:c9:30:ec:23:9f:f6:11:08:
         00:04:47:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:46 2025 by rpki-client