Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
File:                     ejClouMyTV5BJmf58pb1KvKXu00.mft (raw, json)
Hash identifier:          G7ASCLQmdMQYrfXHsgebxVJVsX9odXmuYb4tbX1FSwo=
Subject key identifier:   F8:28:C9:1D:CC:A2:F4:43:82:A3:37:33:D2:2C:73:89:6B:35:94:42
Authority key identifier: 7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D
Certificate issuer:       /CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
Certificate serial:       019A71EE64B123DF6D4C403B25EE6B3938B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
Manifest number:          0B15
Signing time:             Tue 11 Nov 2025 08:00:39 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:39 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:39 +0000
Files and hashes:         1: 1-6iDPGf7DcWOOF8Xk0MfjYVDa_U.roa (hash: 6Eeuw1USF7e5maHoVBqaoYLNV7brdUnH0K/WXFWdKYw=)
                          2: ejClouMyTV5BJmf58pb1KvKXu00.crl (hash: tCgavphnaC/JOGQoDhV8dDYLAiQ8y6m9RAsMNniFfIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:64:b1:23:df:6d:4c:40:3b:25:ee:6b:39:38:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a30a5a2e3324d5e412667f9f296f52af297bb4d
        Validity
            Not Before: Nov 11 08:00:39 2025 GMT
            Not After : Nov 12 08:00:39 2025 GMT
        Subject: CN=f828c91dcca2f44382a33733d22c73896b359442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:cb:df:63:5e:25:e4:1a:dc:72:06:e9:e0:
                    7e:a6:34:fb:67:2b:da:de:61:06:34:c5:71:26:90:
                    7f:84:0f:4f:f6:7c:e5:4c:15:86:56:ac:77:1e:33:
                    5f:a1:ea:05:e8:d6:75:e9:03:84:85:c7:12:aa:10:
                    c1:0a:24:98:82:50:16:e5:90:8c:d2:55:9f:17:88:
                    3d:05:06:80:9d:f2:a2:20:10:92:74:02:c1:c2:db:
                    3b:0d:cd:1f:56:eb:01:a8:3d:c5:29:04:1c:e4:91:
                    2a:6c:3d:3e:71:74:13:62:45:45:e2:08:95:a0:d4:
                    13:aa:a7:12:de:d8:7d:99:38:23:7a:db:57:4a:34:
                    de:eb:ce:57:57:e5:37:d1:64:6a:01:3d:25:0b:01:
                    2d:55:21:28:ba:28:7d:3e:53:b9:03:a0:b6:6e:e3:
                    26:02:9b:5e:9b:2a:60:98:14:93:d2:7b:70:a6:49:
                    d8:6c:a1:f8:43:f8:25:a0:3d:14:1a:84:85:59:6f:
                    a6:5f:96:a1:eb:c4:05:88:e6:e2:6a:81:fa:b3:54:
                    cb:9f:af:e9:5f:d7:7c:30:ea:8a:6b:88:5f:5e:d8:
                    9c:2e:30:17:fe:88:02:7d:36:8d:17:f6:fd:96:a1:
                    b7:ec:84:4b:f3:7f:b6:3f:75:67:ae:f1:db:3c:bf:
                    26:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:28:C9:1D:CC:A2:F4:43:82:A3:37:33:D2:2C:73:89:6B:35:94:42
            X509v3 Authority Key Identifier:
                keyid:7A:30:A5:A2:E3:32:4D:5E:41:26:67:F9:F2:96:F5:2A:F2:97:BB:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejClouMyTV5BJmf58pb1KvKXu00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/cd9b7f-7e57-4f95-ab39-f4d1bcb5c901/1/ejClouMyTV5BJmf58pb1KvKXu00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:89:4a:f9:f0:bc:56:03:2a:7d:58:7f:50:52:f6:b4:94:2c:
         c0:77:ce:de:9c:50:dd:16:ff:22:3d:16:11:f6:aa:0b:cb:c0:
         15:8c:9c:6a:96:0e:fa:2a:53:ed:ad:b4:02:b1:9d:1c:c9:b0:
         9b:f7:91:b0:10:86:10:8b:1b:41:8d:e4:2d:b6:49:2d:29:a6:
         c7:8c:a3:65:1a:21:01:94:79:0b:dc:37:05:a0:c2:e7:9c:e5:
         79:dd:14:db:13:05:1e:7b:17:2c:f2:54:7f:7c:55:08:04:3d:
         90:9d:26:f4:dd:0c:dd:2b:bf:bc:8c:a0:c4:52:c8:69:07:dc:
         35:f7:c8:05:66:bb:ef:34:6d:95:92:11:86:ca:8d:14:aa:a9:
         26:50:f0:db:f8:ca:d6:54:8e:c6:68:79:0c:e1:ea:75:c9:04:
         05:fb:72:6d:f3:51:8b:36:6f:30:8b:ef:79:96:88:eb:40:df:
         2f:d1:6f:3b:7c:b3:ae:af:f8:d2:bc:22:df:6c:67:da:54:e8:
         94:2d:f5:1b:20:46:e8:31:8e:ab:b0:41:c5:b2:35:c6:dd:f6:
         62:ee:0f:a0:e5:9e:cc:70:7d:f3:a2:c4:54:10:c0:7b:27:8a:
         f7:dd:e1:a0:aa:e5:ec:be:24:3f:0b:af:26:d0:c0:fd:9d:5d:
         3b:0d:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:55 2025 by rpki-client