Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          1IAHtzx4TklQS16p3FxVfZ2WP1Le1AYHKiFjUq9tb5A=
Subject key identifier:   24:80:F8:AC:66:F8:5F:3F:46:04:3C:10:79:18:7A:80:5B:27:B4:80
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       01994EF7AC15B381EF9B4F9F4A085EB39327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          0DE8
Signing time:             Mon 15 Sep 2025 20:01:18 +0000
Manifest this update:     Mon 15 Sep 2025 20:01:18 +0000
Manifest next update:     Tue 16 Sep 2025 20:01:18 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: PVg2nY/gV0VycluhYJmqdz0nAx6FemctY/4n+EwL0eA=)
                          2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
                          3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
                          4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 17:04:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4e:f7:ac:15:b3:81:ef:9b:4f:9f:4a:08:5e:b3:93:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Sep 15 20:01:18 2025 GMT
            Not After : Sep 16 20:01:18 2025 GMT
        Subject: CN=2480f8ac66f85f3f46043c1079187a805b27b480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:bc:f6:77:38:30:12:f8:94:48:1b:eb:8b:
                    bf:23:47:d6:4d:35:87:6f:bf:1b:0b:20:64:a6:8e:
                    ee:fb:f4:64:fc:07:a9:46:46:88:56:58:68:27:69:
                    71:5c:62:5b:14:0c:7e:ff:24:83:46:03:01:b4:6d:
                    86:26:b5:c4:68:82:7b:7d:a6:4e:67:58:0e:95:d0:
                    c5:8c:95:0a:3b:0a:26:95:3d:bd:7f:4b:a9:f3:ea:
                    a3:a0:46:f3:4a:f9:4f:5c:89:72:c4:1c:c7:fe:5f:
                    b0:7a:cc:5b:87:d2:36:0c:4c:1e:ef:65:6a:4c:2e:
                    95:ed:e6:8b:15:5a:21:85:bf:e3:a3:17:d4:9b:37:
                    74:af:8b:bb:7f:40:46:b7:76:f7:27:42:b1:51:0d:
                    4c:09:db:61:19:75:dd:45:1c:f7:99:6a:3c:2d:79:
                    8f:e0:b9:0e:0e:91:d1:96:53:fa:93:61:6f:62:72:
                    7f:1d:52:ba:ee:d5:6c:8f:d8:08:2f:99:63:cb:f4:
                    f2:33:78:82:44:42:3c:39:27:a1:8b:a0:24:96:76:
                    79:46:3e:7e:a0:50:c0:0f:b3:6c:43:df:a2:c9:75:
                    bc:a9:53:19:2c:9d:ff:11:5d:a8:b8:42:d5:20:9c:
                    50:b0:d0:27:95:75:2a:c3:6c:3b:b4:0c:71:f8:39:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:80:F8:AC:66:F8:5F:3F:46:04:3C:10:79:18:7A:80:5B:27:B4:80
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:3b:50:ab:5f:10:af:ab:28:1e:7d:23:7a:f8:d3:54:91:
         6e:e6:3e:c5:a7:c4:41:66:9b:34:79:a7:75:40:05:d2:79:f9:
         7e:59:28:d3:46:5c:10:fc:ce:e0:b4:ad:d8:74:3d:f4:06:8c:
         ea:06:50:61:fb:f5:dc:7b:7c:33:91:1e:ad:73:7a:93:a3:b4:
         d4:eb:f5:ee:a7:58:e8:f0:18:ac:90:be:20:d6:7f:8d:12:16:
         47:ed:8e:3e:93:56:28:24:64:24:a0:17:42:cb:23:e7:d8:9f:
         cc:38:61:aa:29:03:b9:fc:b6:20:4a:84:d7:c8:69:07:6e:85:
         a8:aa:5c:cd:56:f7:58:c4:8d:08:17:40:d2:a8:52:98:fc:e3:
         69:37:d8:9e:4d:18:95:5e:55:77:f1:c5:2a:6e:a2:1a:fb:d6:
         b6:e9:d8:29:0d:6b:ee:aa:6f:44:50:71:d9:08:2c:a7:7d:c7:
         41:07:c2:92:01:22:72:5f:59:fa:21:0f:cb:9c:06:fb:a4:0f:
         e1:06:39:f9:f3:f8:17:c0:88:16:55:4c:05:38:88:06:e1:37:
         64:57:c6:57:8b:a0:3c:f6:91:2e:1a:32:97:3b:bf:cf:44:78:
         0d:c9:0d:97:ce:00:30:32:9c:8d:49:97:5d:1d:d3:30:2a:f5:
         7e:e7:9d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:04:27 2025 by rpki-client