Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
File:                     0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json)
Hash identifier:          yVA6DoLmCFXmV71WKgaiyTHATtCZOa79juITEIUBOuE=
Subject key identifier:   FE:4B:E3:91:1C:63:09:43:47:47:E8:ED:A7:22:13:45:4E:64:CC:60
Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68
Certificate issuer:       /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
Certificate serial:       0198D4A843C30D9AC7B42E3F68785312691D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
Manifest number:          0D0A
Signing time:             Sat 23 Aug 2025 02:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:53 +0000
Files and hashes:         1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: nf0lDAuTO1YDburhcMXIeeUlUly5wXp/vOokHB7rZic=)
                          2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:43:c3:0d:9a:c7:b4:2e:3f:68:78:53:12:69:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68
        Validity
            Not Before: Aug 23 02:00:53 2025 GMT
            Not After : Aug 24 02:00:53 2025 GMT
        Subject: CN=fe4be3911c6309434747e8eda72213454e64cc60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:46:de:64:72:cb:05:4b:23:e0:04:4c:40:
                    10:cc:af:7e:48:94:55:19:bb:eb:67:63:73:bf:72:
                    45:a3:c6:97:cb:9a:6d:e0:46:5a:66:e9:98:cf:d1:
                    ca:ca:88:6c:cb:cc:c6:c2:41:d1:65:45:98:dd:82:
                    2d:ca:da:ec:2e:8f:b8:99:bf:c2:82:3f:de:6d:04:
                    74:90:cd:ea:9f:ee:21:c0:63:fc:d5:aa:d0:6e:b4:
                    63:13:aa:9e:4b:06:3e:50:c1:47:e2:24:b4:2c:07:
                    04:d8:dd:d1:2b:b7:dd:e7:57:9a:f8:9f:b8:9a:9b:
                    ab:b3:ce:61:f1:6f:d4:61:57:08:7c:0d:33:8d:7b:
                    b0:49:4a:db:8a:90:44:06:e4:e6:a8:cf:46:09:bb:
                    4a:87:84:88:47:f0:7c:f9:1d:4c:c4:3e:df:ce:ed:
                    aa:e2:d8:28:58:51:99:84:ce:9e:41:c1:85:07:4a:
                    4e:56:cf:6c:43:ab:6f:fb:40:de:bd:72:86:14:70:
                    12:f5:32:65:82:2c:96:60:66:45:3d:c7:2e:ab:fb:
                    28:d6:9f:92:ba:54:69:86:56:f1:b7:88:06:4e:e4:
                    01:ac:7d:b5:f6:85:e1:68:42:37:17:6a:b3:35:ad:
                    7f:92:0e:d9:6d:39:de:6f:65:e2:95:92:9c:81:89:
                    6e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4B:E3:91:1C:63:09:43:47:47:E8:ED:A7:22:13:45:4E:64:CC:60
            X509v3 Authority Key Identifier:
                keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b3:3b:1f:69:8a:df:13:72:9f:1d:c7:a5:8e:38:dc:0a:dd:
         98:41:56:9a:a7:09:0c:a0:bd:7a:b0:0b:bb:be:23:76:7e:1f:
         2a:e9:15:d1:db:62:96:ea:ae:3d:a1:bc:dc:8c:d2:9a:1f:93:
         9b:28:32:83:0b:52:4e:05:bc:cc:d3:c7:a8:eb:75:ab:93:d2:
         44:13:41:5f:cb:81:4b:7e:83:c0:25:d1:cc:20:ff:7e:39:1f:
         dd:c4:39:5c:33:c0:26:71:32:c0:47:43:45:31:bf:da:af:9b:
         93:86:d7:68:1f:35:a3:8f:f4:0a:69:e3:6f:30:80:84:78:a0:
         dc:2a:c0:16:f8:f7:40:a9:56:41:64:5b:63:e7:f7:1a:7f:d9:
         2e:86:19:c6:69:c7:7c:b4:ae:de:4c:97:88:00:24:cc:c6:04:
         7b:ae:b3:3e:28:87:74:29:40:00:3d:b5:55:c2:d7:4d:d6:65:
         29:69:09:66:4b:75:95:61:b4:2f:bb:f1:18:d5:17:50:ed:b2:
         dc:33:c0:54:fa:47:92:11:1c:dc:38:8d:8d:fb:fa:05:68:3c:
         22:58:bf:92:e8:a2:2b:e9:43:2b:2c:1b:9b:86:80:77:e0:f5:
         17:44:6f:e2:cf:e8:ec:13:bb:b3:8d:b7:ae:6b:1d:0c:e4:7e:
         20:c5:98:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:17 2025 by rpki-client