Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
File:                     eodGp2zag2kAnSiUHvFWI5xqY6E.mft (raw, json)
Hash identifier:          +3mDNhJN+xXcoGmliDUelNhUNTHl7oqoYgpSlxWvCFk=
Subject key identifier:   17:1C:1A:9C:BC:06:96:63:C0:82:75:5A:22:01:51:0F:18:DB:B2:92
Authority key identifier: 7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1
Certificate issuer:       /CN=7a8746a76cda8369009d28941ef156239c6a63a1
Certificate serial:       0198D6298D0A23EC553A01500CFD7D363BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
Manifest number:          1540
Signing time:             Sat 23 Aug 2025 09:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:43 +0000
Files and hashes:         1: eodGp2zag2kAnSiUHvFWI5xqY6E.crl (hash: 2JXxDdfpg4MCfbbahqfX4utEXPEEQ02O3R3+xuEDky0=)
                          2: s-bDYCGCjCjUPmyEVSICZj5TEf8.roa (hash: IEVRYz/taTkrd2G+bX9ohVYwHQOyM6OopMfemqtv+rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:8d:0a:23:ec:55:3a:01:50:0c:fd:7d:36:3b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8746a76cda8369009d28941ef156239c6a63a1
        Validity
            Not Before: Aug 23 09:01:43 2025 GMT
            Not After : Aug 24 09:01:43 2025 GMT
        Subject: CN=171c1a9cbc069663c082755a2201510f18dbb292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cc:42:1f:3d:4b:6a:ea:29:37:ea:b0:d0:c6:
                    da:f5:db:d0:ec:8a:bb:6e:79:84:21:a7:4f:c3:96:
                    ef:d7:8a:52:47:1d:f3:2e:ad:67:64:91:a1:9f:35:
                    f2:46:59:e2:02:39:e3:94:2e:8e:83:9a:41:f6:01:
                    9b:0c:2d:58:35:42:4c:65:cf:8a:51:82:b2:35:21:
                    4e:7b:63:15:f6:7d:05:23:5e:d0:18:36:8f:eb:a8:
                    cb:f4:58:b3:09:26:82:52:02:59:f5:be:15:1f:cc:
                    22:4a:a3:99:79:29:d2:31:9c:ee:1f:39:9b:27:70:
                    45:3d:7c:8d:fe:0c:d5:5c:fa:c8:e1:b9:8b:ba:33:
                    27:f7:4c:7b:fd:0c:38:57:77:ea:be:49:b7:0a:9f:
                    a4:01:ef:d3:d7:ea:71:cd:8f:84:ca:15:b6:14:d9:
                    af:26:db:d2:49:d6:72:3e:c2:06:af:d7:9e:fd:18:
                    51:4a:fc:32:38:98:b7:b5:c0:e5:4a:3e:b3:66:72:
                    2f:54:56:9c:7d:bd:6b:ce:e6:56:22:a4:de:d5:13:
                    66:bc:d7:dc:1e:8a:6a:8e:1e:7a:6e:f2:a8:ed:d5:
                    22:17:0d:93:7d:ef:2a:b7:7f:f0:be:bc:b3:ce:00:
                    17:16:1c:2c:b0:a1:21:b4:06:c3:0c:b0:0e:e5:49:
                    d4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:1A:9C:BC:06:96:63:C0:82:75:5A:22:01:51:0F:18:DB:B2:92
            X509v3 Authority Key Identifier:
                keyid:7A:87:46:A7:6C:DA:83:69:00:9D:28:94:1E:F1:56:23:9C:6A:63:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eodGp2zag2kAnSiUHvFWI5xqY6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/913e12-f5ed-46f4-982c-52dedddee393/1/eodGp2zag2kAnSiUHvFWI5xqY6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d5:c6:1d:31:5b:56:2b:49:be:70:d2:a8:0d:17:d8:e4:39:
         56:3c:67:24:6e:c3:36:7c:6f:96:b0:11:30:80:4c:3e:6d:f5:
         fc:d3:0b:16:70:34:4a:a6:c1:3a:59:60:11:1e:82:e9:b3:73:
         2b:99:9f:f1:01:6a:e6:fa:e8:77:b3:56:be:fe:ea:49:07:c2:
         01:2a:3d:d2:86:6d:09:ac:ae:d4:d0:f9:3a:3f:dc:ae:7e:1b:
         3e:76:91:92:fd:cd:5a:25:f6:b9:e3:36:0a:85:1c:ed:fd:c9:
         6f:15:36:90:4c:b9:0e:ea:88:1a:a0:c9:d2:4f:ff:86:cb:8e:
         c7:68:da:08:49:21:c7:80:83:3d:10:e3:b0:b2:78:54:2c:24:
         8b:7e:e4:02:21:57:7a:50:7f:00:fc:99:a8:3f:ad:94:cd:aa:
         57:db:a6:57:8a:8e:94:69:9f:35:d9:75:cb:df:48:4e:65:90:
         64:44:65:72:62:35:2f:8d:f3:0d:46:99:4e:f3:c1:ac:37:3e:
         0e:53:0f:e7:58:94:1d:48:90:e2:02:7c:6c:6d:21:50:07:2d:
         4f:62:22:10:e2:39:93:0c:70:58:3d:64:fe:14:c9:b9:96:c8:
         0a:25:18:be:ba:83:1f:4e:99:2e:e9:2f:f0:e4:e6:1f:5e:21:
         4f:e2:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:35 2025 by rpki-client