Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
File:                     eNMexT3EQF1pFeGCWWS5fXoRb4E.mft (raw, json)
Hash identifier:          xI+6MFyuD6jnIsK2d0RleI8oE2SBBkSY97N0bGmXqyY=
Subject key identifier:   60:7A:60:E6:07:44:2D:A3:CC:74:BE:5F:8C:F0:7B:23:CE:81:FB:4B
Authority key identifier: 78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81
Certificate issuer:       /CN=78d31ec53dc4405d6915e1825964b97d7a116f81
Certificate serial:       0198D583DE7EDB957A9FA98C39DDAD617CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
Manifest number:          11B7
Signing time:             Sat 23 Aug 2025 06:00:45 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:45 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:45 +0000
Files and hashes:         1: 5gEGlVwVZrqZpPnotBCu9f34jtg.roa (hash: haUW51qrmH8OlsZcre9A2kx3gtQnJaSmXQISoIixtmo=)
                          2: eNMexT3EQF1pFeGCWWS5fXoRb4E.crl (hash: 9zNOSze1phuRPiVFIoDxiawjAXoe37u4BOTa3PvBuOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:de:7e:db:95:7a:9f:a9:8c:39:dd:ad:61:7c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d31ec53dc4405d6915e1825964b97d7a116f81
        Validity
            Not Before: Aug 23 06:00:45 2025 GMT
            Not After : Aug 24 06:00:45 2025 GMT
        Subject: CN=607a60e607442da3cc74be5f8cf07b23ce81fb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:89:a9:51:00:9a:3f:6a:0a:38:ca:d6:db:
                    30:39:8b:a1:2c:d1:69:31:11:9b:d4:24:87:7a:da:
                    7e:28:88:7a:75:bd:ce:36:75:32:f8:ed:c2:e0:3f:
                    32:c7:83:b2:6a:d8:0e:4a:2b:42:9f:70:62:14:25:
                    f8:b6:11:b1:75:0c:9e:ae:75:8e:07:ab:cf:bc:8e:
                    fc:80:47:78:6b:3b:24:56:b5:89:c0:cc:ab:30:e9:
                    70:15:10:95:50:71:f9:05:d7:0a:17:c3:4b:dd:ad:
                    89:9d:62:99:80:59:51:45:f5:aa:80:16:8b:c7:de:
                    22:ad:b9:9f:d0:29:ab:49:b2:95:8b:cd:37:8b:d5:
                    3e:bb:a1:d0:45:fb:94:52:d2:73:4a:f7:c1:cc:87:
                    44:01:b8:ad:b4:63:97:b0:24:66:48:37:57:92:4f:
                    08:9e:89:02:3c:01:d4:d0:70:47:ca:8e:56:6e:bb:
                    4e:35:47:21:06:44:10:26:20:6c:e2:00:5d:40:95:
                    27:da:6d:69:c8:f3:57:2a:de:5d:d4:c0:05:c5:b4:
                    23:02:4b:92:da:79:02:3f:65:29:d9:8a:66:ef:7c:
                    c7:17:b1:87:4a:18:e3:0f:6a:a1:25:59:c0:20:43:
                    ac:9e:2e:b4:16:34:e5:2c:3c:e2:a1:48:27:c3:f7:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7A:60:E6:07:44:2D:A3:CC:74:BE:5F:8C:F0:7B:23:CE:81:FB:4B
            X509v3 Authority Key Identifier:
                keyid:78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:67:03:69:ee:d6:7f:1d:80:63:10:f0:89:ab:5a:3e:5a:
         b7:c2:75:f8:68:cd:de:83:84:e5:1d:44:20:70:a7:da:78:26:
         53:ef:cb:30:e9:b2:be:13:36:21:ad:ab:c7:7e:ce:7e:68:35:
         f7:62:e8:08:0f:e8:62:64:84:7c:6c:d3:7d:be:c9:0a:1d:58:
         02:e9:fc:e7:01:ae:7a:fc:51:00:dc:14:58:5e:bc:33:48:49:
         a9:05:be:c1:55:8b:45:80:0f:9e:a5:26:7b:73:b2:5c:b9:26:
         8a:23:fa:35:f9:54:fc:ef:17:5b:cf:03:40:69:ae:fb:d5:e2:
         45:6c:55:4b:46:77:e1:8d:35:c0:56:c5:e9:48:67:25:41:9f:
         d8:75:b1:fd:3a:14:43:48:f8:6f:ed:5e:8a:53:b2:06:4f:11:
         81:54:83:61:f9:0e:6a:13:86:45:4d:16:c5:ed:35:5b:4c:12:
         7a:11:30:30:5f:08:65:2e:a8:4b:05:0d:72:90:3f:de:ba:cf:
         3e:da:7a:29:8e:66:f4:6d:70:2a:10:62:52:53:06:c4:ee:0b:
         06:cf:e2:e3:54:90:8b:7d:c9:c8:bf:b2:53:49:f0:51:c2:5e:
         ec:63:4e:60:3f:43:95:16:06:32:71:4e:83:1d:7e:77:59:f0:
         4e:a4:70:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:47 2025 by rpki-client