Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          V3FOyBYzcQ4k41qf3tcarJkwyuHbpJjRqE6Ob9xz8LM=
Subject key identifier:   B3:0A:2D:C4:A3:E6:0B:6B:60:AF:C6:2D:3A:D1:20:89:14:4D:27:FA
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       0198D515767B506E6E627D1B3AAE6F1CD8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          15C7
Signing time:             Sat 23 Aug 2025 04:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:10 +0000
Files and hashes:         1: VNYCVzbiU_3jbeJ25u2hye6LJrc.roa (hash: fFv8A65gc1twwkAZ87BZHCT4KPuUQXD/tqltH8mgh/g=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: G6ww+7mtZmFZ1LTf3uhP/wNwmBakkUokwL6xFD0+Kbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:76:7b:50:6e:6e:62:7d:1b:3a:ae:6f:1c:d8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: Aug 23 04:00:10 2025 GMT
            Not After : Aug 24 04:00:10 2025 GMT
        Subject: CN=b30a2dc4a3e60b6b60afc62d3ad12089144d27fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7a:b9:b8:58:c2:aa:29:74:e2:7c:fa:53:78:
                    1f:eb:33:76:d1:8d:6a:fa:10:b5:89:0e:74:6c:e0:
                    af:ad:4a:7b:f6:05:96:62:a2:2d:ec:a1:77:b3:b0:
                    b7:ef:3b:6a:fa:e9:25:9b:b5:2b:a2:48:78:3d:bc:
                    0e:01:64:be:bc:06:c9:39:6c:e6:15:dc:64:20:c8:
                    85:73:7e:7e:29:2c:f3:f4:27:53:c5:69:b4:8e:43:
                    5f:bc:87:bd:15:27:6a:a8:67:21:41:b3:eb:54:0c:
                    30:ca:62:f1:39:3f:14:5d:5f:0e:90:fb:fd:8b:5c:
                    38:0c:3e:3e:d5:18:fd:e2:58:04:83:4f:9a:00:d3:
                    61:af:b8:57:a8:6d:3e:89:4a:8e:16:3e:38:6b:2e:
                    00:f6:d4:d4:43:17:0b:30:19:d9:4f:3c:bd:24:4e:
                    d4:93:9e:e7:a8:7f:a8:f1:c1:5c:ba:b9:e5:17:76:
                    82:25:4d:10:a0:ff:0f:e1:65:48:37:e1:14:46:2e:
                    41:26:ae:1f:ff:84:f7:84:9a:61:55:e1:e2:13:4c:
                    1e:64:db:75:a6:7e:5f:c4:84:0d:ac:e3:d0:97:7c:
                    3c:de:02:70:b4:e8:71:c0:e7:5f:63:36:ec:3b:df:
                    eb:58:dd:ce:71:b9:03:c7:a7:7c:3e:9a:dc:7c:02:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0A:2D:C4:A3:E6:0B:6B:60:AF:C6:2D:3A:D1:20:89:14:4D:27:FA
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:45:62:bf:f4:6f:89:e6:8b:af:9c:88:65:a0:3a:d3:3c:
         53:f6:e9:ac:e2:89:18:5f:5c:92:ea:b7:0f:4e:86:d3:35:58:
         41:de:1c:9a:2e:83:93:16:9a:15:14:b0:ad:cf:71:e2:dd:72:
         77:f9:df:1d:2b:02:1e:e4:f9:49:0d:47:42:6c:82:31:76:f2:
         f3:e4:bf:76:3e:60:21:49:be:08:0d:88:e5:a8:ed:6c:a3:3c:
         75:a4:fa:fd:ce:5b:16:55:0a:35:d9:d7:2e:87:1f:e5:20:39:
         6e:c9:92:dd:81:34:12:26:34:72:34:a7:43:56:f5:76:3b:7a:
         5c:6c:04:16:ff:ea:4b:7c:19:39:a8:47:ba:1d:cb:80:55:bf:
         2e:a3:7f:43:33:c0:71:61:23:1d:9c:d6:77:1f:87:c7:8c:93:
         08:c4:8d:c5:40:51:ae:6d:71:e1:72:15:7c:38:69:99:e8:9e:
         f5:42:ca:4e:fa:b2:60:3b:90:8b:a8:50:ab:b5:00:ec:51:9e:
         83:27:f6:c5:95:74:52:5e:86:22:7c:21:6b:37:4b:89:e5:93:
         30:80:b4:1c:06:24:7c:7d:f3:9a:3f:2e:0e:2b:19:0d:a9:5e:
         e3:77:3c:72:35:50:d9:f8:bb:cc:ff:86:ef:6f:1e:cd:ec:6e:
         75:9a:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:10 2025 by rpki-client