Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File:                     67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier:          t60oJ+7d5AwWi5B4WYBdMwMolw3qMh/o43pvhz/5dFQ=
Subject key identifier:   E7:0A:64:8D:6C:A9:27:5A:A9:66:FA:90:2D:17:1E:7D:36:87:66:50
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer:       /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial:       0198D5157CC932928B17D00F29ABBA5BB92C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number:          01D2
Signing time:             Sat 23 Aug 2025 04:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:11 +0000
Files and hashes:         1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: SnMmYhGk4VCy2v0rTAB/5YZanT2K5Ryy0GvXD3D9tM0=)
                          2: s5l9rjSPorbmJ6DV5XzzuHrSRWc.roa (hash: j3es1QhJ3BxNSOr+OOVs21FGOEaNLK9nKvgzFCuGlpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:7c:c9:32:92:8b:17:d0:0f:29:ab:ba:5b:b9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
        Validity
            Not Before: Aug 23 04:00:11 2025 GMT
            Not After : Aug 24 04:00:11 2025 GMT
        Subject: CN=e70a648d6ca9275aa966fa902d171e7d36876650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ff:42:c7:67:c9:26:cc:34:89:c8:72:29:34:
                    3f:df:85:13:f5:43:cb:bf:00:10:15:b9:94:6d:ea:
                    58:e9:87:97:9d:96:a3:b9:7e:4d:43:be:13:9b:f6:
                    d2:63:66:73:88:67:e8:db:0a:94:6b:95:49:71:25:
                    cf:8b:5a:e9:a3:59:e4:78:99:df:39:19:ab:f0:fd:
                    34:68:fa:db:41:a9:ba:8c:63:d6:e4:b4:0a:12:57:
                    fc:a0:25:63:55:4a:cf:30:57:a0:f2:79:f7:b1:10:
                    37:9a:21:92:60:ef:fe:9c:72:9a:22:cc:fc:85:92:
                    2b:86:61:a0:b5:f0:35:86:3d:92:0d:52:c4:f9:08:
                    eb:1e:f2:ab:47:76:92:02:23:56:44:4c:df:6a:04:
                    72:c6:41:de:00:96:2e:a5:3c:89:bd:8a:dd:80:86:
                    15:8e:e4:10:72:bd:2e:15:37:72:e4:2b:ad:1f:b0:
                    e1:19:56:be:25:6a:81:0e:1c:1c:5d:80:d0:e9:c0:
                    cd:fe:3f:c9:21:f5:85:ec:15:f4:07:3b:18:6f:9c:
                    7b:0f:c1:5f:9b:37:46:b5:03:bb:0c:e2:e0:08:26:
                    fa:38:fb:1b:c3:96:c4:3a:4b:f8:54:ec:58:60:aa:
                    03:bd:a7:a4:f7:4f:8a:04:76:d4:84:87:72:bd:24:
                    d0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0A:64:8D:6C:A9:27:5A:A9:66:FA:90:2D:17:1E:7D:36:87:66:50
            X509v3 Authority Key Identifier:
                keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d5:f4:02:13:bf:57:83:92:0c:c9:0f:4b:c4:47:87:57:9b:
         55:15:c8:80:d2:ed:79:9e:22:60:e3:f2:0b:81:c7:80:da:51:
         86:10:89:8c:97:3f:43:98:6e:3c:bd:ae:0f:59:0d:86:a2:4a:
         ff:3a:8c:13:a9:d0:a4:3e:71:c4:1a:c4:cd:2d:02:29:62:89:
         48:d8:ca:9b:b1:76:b3:5d:42:83:a5:2f:31:39:e6:f6:63:87:
         e1:be:f1:92:4e:c1:39:63:bf:3c:9f:ad:b4:8e:77:1c:e8:30:
         32:27:dc:d1:9d:38:91:73:17:94:0b:5b:e9:40:f5:85:fc:b5:
         1a:8e:63:09:d2:4c:a0:e4:12:fd:4d:27:96:ab:10:5e:b3:4f:
         81:f7:6a:ce:59:8d:27:ae:74:15:f5:ce:8d:55:f0:ee:0d:c8:
         0b:fc:7f:30:ae:fc:51:4e:44:97:28:23:08:03:65:9c:43:de:
         ca:c6:05:a2:09:b9:1d:a9:f4:0f:20:b8:1b:2b:29:f0:4f:73:
         e1:b7:fb:43:02:ab:06:68:df:81:6e:0e:15:2f:e0:91:c3:62:
         0b:d2:8d:3c:9b:6c:e3:a2:57:68:ba:3e:e5:91:e9:20:ef:0f:
         c9:2c:0b:53:a2:8f:87:cd:3a:69:b6:94:a0:c8:05:9b:62:39:
         b8:aa:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:31 2025 by rpki-client