Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
File:                     eVsxnntbAEAd-YBbCV6_WuLOlZw.mft (raw, json)
Hash identifier:          6kGp1paQarlJi3HTkXpcxbujA3m8Yabhi4Jak9WCMgk=
Subject key identifier:   A9:5A:9B:74:F1:43:9F:ED:09:E2:B9:F7:91:7D:D9:22:91:E5:39:65
Authority key identifier: 79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C
Certificate issuer:       /CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
Certificate serial:       01992255AC6AAE48ECC4117ABACCCB58744D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
Manifest number:          15CF
Signing time:             Sun 07 Sep 2025 04:01:03 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:03 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:03 +0000
Files and hashes:         1: 87kSYonFcZwIXqn-oUHMTUjS7ZQ.roa (hash: r4G2JQElUAKaln7jVsL6rlmZ7oG6sWqE3/UqSsTnjMU=)
                          2: eVsxnntbAEAd-YBbCV6_WuLOlZw.crl (hash: o8rsjabj/EMu3CeDvaYxIHA1MSn2/7HY+BaqJ2vDql8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:ac:6a:ae:48:ec:c4:11:7a:ba:cc:cb:58:74:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795b319e7b5b00401df9805b095ebf5ae2ce959c
        Validity
            Not Before: Sep  7 04:01:03 2025 GMT
            Not After : Sep  8 04:01:03 2025 GMT
        Subject: CN=a95a9b74f1439fed09e2b9f7917dd92291e53965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:89:db:19:c0:57:1e:2e:f5:cd:d7:58:df:
                    b9:89:6e:07:53:20:3f:80:0f:cb:12:76:e5:8a:9b:
                    10:4c:49:09:a9:6c:bd:33:d7:43:e5:cd:6d:9f:02:
                    44:2f:8b:8a:28:db:d2:61:a3:4e:5c:2a:c0:0d:7d:
                    4c:c2:b7:44:9c:4d:d2:1e:24:43:39:0b:cf:63:eb:
                    7e:6f:ff:71:69:4f:1c:47:4b:47:31:78:82:fa:39:
                    e0:ec:05:bf:c9:18:fd:76:91:8b:8b:53:97:83:e5:
                    a8:db:fe:7f:2e:58:b7:96:05:86:63:58:c7:f4:16:
                    c8:e3:b0:18:f6:39:61:e5:31:71:9f:ad:03:aa:9d:
                    d2:82:6f:c1:9e:24:f6:1a:d1:10:51:70:d3:dd:6e:
                    b1:3f:b3:f0:c8:ea:88:5f:52:d4:20:c3:fd:0d:44:
                    c9:9a:10:f2:23:f7:22:18:40:72:05:7d:4b:d9:68:
                    80:5f:69:97:bb:41:9e:ce:81:75:70:0d:04:cc:ae:
                    b3:4e:d8:43:88:53:a0:7e:f0:ab:fe:2c:21:ef:72:
                    1d:e4:3a:3d:f7:f9:59:f6:9c:72:a7:aa:1a:fa:b4:
                    d2:ce:19:28:ef:57:4d:91:31:bf:90:99:4c:51:c6:
                    a9:b8:99:c3:5f:19:a0:b1:c2:f1:4c:50:99:33:19:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5A:9B:74:F1:43:9F:ED:09:E2:B9:F7:91:7D:D9:22:91:E5:39:65
            X509v3 Authority Key Identifier:
                keyid:79:5B:31:9E:7B:5B:00:40:1D:F9:80:5B:09:5E:BF:5A:E2:CE:95:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVsxnntbAEAd-YBbCV6_WuLOlZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/81a79c-b90f-4050-b21c-78d169e3df1f/1/eVsxnntbAEAd-YBbCV6_WuLOlZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:05:01:2d:c6:cd:ee:b5:e2:46:14:bd:04:bd:9c:17:eb:bc:
         55:f7:9c:09:33:8d:87:42:75:5d:90:d2:d1:52:82:de:65:f4:
         18:c1:75:d8:dc:17:33:d7:2c:85:5b:03:9c:4a:80:3d:c4:ec:
         0f:c8:c0:4a:96:69:9a:81:ae:38:85:27:d7:09:27:f7:89:7b:
         36:36:c4:5a:91:c9:d3:ef:98:7c:09:9d:f4:24:b3:8b:ee:c3:
         6e:95:4b:97:54:cc:03:cc:b3:73:c0:20:db:19:1c:ae:3d:65:
         a3:ef:bf:fa:b3:0f:b4:99:e2:33:0e:5e:3d:c4:42:ac:4a:8b:
         2a:c6:81:3b:f8:32:3c:e7:2f:98:d2:33:8f:c7:9c:7f:22:57:
         62:6e:bc:d7:e2:4b:a2:df:58:5b:a8:55:5f:49:b6:e0:94:7c:
         92:58:23:ca:60:f5:62:5e:84:3b:bf:28:1a:5c:92:55:e4:97:
         bb:48:00:e8:da:46:35:97:fb:cd:9c:e4:d5:a5:ec:27:00:d6:
         2c:dd:73:0f:4a:4f:f0:13:c2:fc:56:9f:e7:1c:4c:29:7c:eb:
         25:e8:0c:a5:ff:d7:4d:f0:3f:27:95:be:c9:39:01:5c:e6:aa:
         3b:12:c2:49:55:3f:a1:1c:39:4d:47:0d:aa:c8:d5:1a:57:8a:
         ff:16:d5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:27 2025 by rpki-client