Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
File:                     fi3yT4V3zASMPHn7jbFIPnt14l0.mft (raw, json)
Hash identifier:          fHr3r8ShUiXImTnQKXWnOwYH+jkrIYUsDt56eiWpWXM=
Subject key identifier:   E1:78:7C:85:A2:B7:E0:EF:26:0A:7B:0E:7A:68:F7:9C:7A:38:CF:2C
Authority key identifier: 7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D
Certificate issuer:       /CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
Certificate serial:       0198D404521CCA8CD4B99D0A27C98A40CD68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
Manifest number:          D1
Signing time:             Fri 22 Aug 2025 23:01:49 +0000
Manifest this update:     Fri 22 Aug 2025 23:01:49 +0000
Manifest next update:     Sat 23 Aug 2025 23:01:49 +0000
Files and hashes:         1: fi3yT4V3zASMPHn7jbFIPnt14l0.crl (hash: 8vx0s3V1yUhaBtVHBuXA1+gn6/Gfidz7+iWC57gkptg=)
                          2: hyvVkmYmp_Y-JQm2DlccYLeH864.roa (hash: VaFEZ5cWbIO/7jTIbMlqrCVV+YCmqTrdOrKl1z8IWMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:52:1c:ca:8c:d4:b9:9d:0a:27:c9:8a:40:cd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d
        Validity
            Not Before: Aug 22 23:01:49 2025 GMT
            Not After : Aug 23 23:01:49 2025 GMT
        Subject: CN=e1787c85a2b7e0ef260a7b0e7a68f79c7a38cf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:77:48:b4:2f:4b:72:d5:2b:d1:0b:ed:3a:
                    75:12:0e:e5:4a:a7:8a:d8:55:3d:21:9a:57:26:03:
                    06:d3:42:93:e5:5f:58:e8:ec:1f:6d:44:3f:97:b3:
                    9c:2e:3e:9a:68:01:27:2f:06:b2:99:a3:5e:44:a0:
                    04:79:8a:1b:81:65:95:95:70:1a:ae:cf:fc:ed:96:
                    20:7a:c9:ac:e6:5a:8e:50:0b:eb:74:b9:d7:c7:5f:
                    4d:98:6f:2a:2d:f8:6d:7a:a4:93:61:e7:3d:be:0f:
                    fa:53:b8:e4:25:65:8b:94:3a:56:15:ce:63:f0:1f:
                    fe:4f:6a:4a:f6:9c:35:56:c5:07:6b:18:4b:da:3a:
                    42:7d:82:f2:c9:39:c6:59:1a:40:32:8e:93:26:c9:
                    ff:36:31:0e:8b:f9:1e:09:32:c5:90:0e:60:83:b5:
                    aa:5b:f1:c7:c2:31:06:9b:1d:96:86:4c:73:6f:d1:
                    7c:33:6b:a0:a7:8f:6d:f5:1c:ba:52:c4:d6:a0:50:
                    8d:c8:16:73:80:65:5d:6b:46:a6:0b:83:fd:a5:04:
                    2c:0f:15:f7:a6:bd:b0:60:6f:88:46:3a:79:44:b6:
                    55:f9:84:73:e9:dd:a8:02:d5:b7:54:38:7d:11:bb:
                    b1:3c:e9:56:f7:20:04:8f:f3:62:46:33:cc:12:e7:
                    4f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:78:7C:85:A2:B7:E0:EF:26:0A:7B:0E:7A:68:F7:9C:7A:38:CF:2C
            X509v3 Authority Key Identifier:
                keyid:7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:32:54:01:0f:10:2c:fc:91:ea:7c:fc:dd:33:2d:fc:38:bc:
         03:83:7f:c4:98:72:4c:19:3c:32:c1:f3:34:84:e6:26:f5:50:
         2d:6b:11:43:b5:02:03:0c:ee:db:b8:a4:1a:ec:ea:19:0e:d5:
         43:70:1d:25:a2:4b:c4:9d:56:24:a8:b9:f6:a6:1a:81:df:aa:
         8f:be:15:79:fd:3d:6f:be:1a:ad:6c:10:b9:43:8a:18:c0:c3:
         80:ca:d1:40:54:80:69:0a:4c:8e:24:54:00:f8:5a:ad:8c:9d:
         fb:b1:d9:c3:4c:64:cc:3e:1f:44:cf:88:7d:48:6b:95:6f:3b:
         3e:20:f8:aa:2d:62:1c:aa:f4:bc:ec:75:89:99:68:23:1e:77:
         a8:d2:73:5b:4d:08:fd:21:f3:c2:79:20:9a:c2:4a:a2:77:8d:
         0c:5f:71:e4:8e:df:74:9b:2f:3b:fa:4b:cb:25:45:72:b4:b8:
         21:f4:51:60:ae:38:bb:47:d6:09:07:2f:da:ca:d3:0b:b4:b5:
         74:1d:03:83:c9:a5:44:97:49:10:2b:3d:e3:24:a1:88:0e:0f:
         a7:84:20:20:0e:7f:0e:cd:ad:d4:e3:62:88:43:41:a7:a8:0b:
         b4:1f:4d:e0:37:4c:8c:f2:f2:09:4a:71:2e:10:63:8d:a2:aa:
         9f:55:f5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:20:10 2025 by rpki-client