Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
File:                     euxtTzVbc4ad_qGnkYDIoheN8f0.mft (raw, json)
Hash identifier:          3LB/g8N784uBpRJq0dtzCoC3VMrwMHI9HeDXGZH2ySM=
Subject key identifier:   64:5D:7C:5D:B8:3D:18:01:79:C9:5F:00:2F:3E:2E:C0:9E:99:DC:5D
Authority key identifier: 7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD
Certificate issuer:       /CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
Certificate serial:       0198D7A9597D89A74B9DF2F0F2EAA05BEC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
Manifest number:          01F2
Signing time:             Sat 23 Aug 2025 16:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:56 +0000
Files and hashes:         1: GlERHStnJxWQurcUkrnzvUsZBvQ.roa (hash: 2BqHZp4aDN03bLESoTVqSnJeyUSck+7eAGoy0G/N7ws=)
                          2: euxtTzVbc4ad_qGnkYDIoheN8f0.crl (hash: l+T37sVftOx1nPpk+cjw2GsnnkRlFTsB2sTgD/kFJsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:59:7d:89:a7:4b:9d:f2:f0:f2:ea:a0:5b:ec:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd
        Validity
            Not Before: Aug 23 16:00:56 2025 GMT
            Not After : Aug 24 16:00:56 2025 GMT
        Subject: CN=645d7c5db83d180179c95f002f3e2ec09e99dc5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b1:af:4e:7f:f2:4a:ac:de:1b:96:aa:8f:53:
                    21:41:e0:ca:a4:b8:fa:28:fb:fc:4c:7f:59:9d:b9:
                    d3:c0:ac:9b:15:09:5f:36:02:ab:75:1e:33:f4:a9:
                    b0:b6:1a:19:7d:f1:70:54:6b:2a:86:03:76:5c:5b:
                    24:a0:29:d1:8d:dc:37:42:4e:50:53:68:9d:a7:59:
                    a1:6e:3c:43:d9:9a:36:1d:6b:84:60:b6:f3:e5:f4:
                    7e:c2:bc:88:36:5d:c0:04:4c:40:2f:20:a9:4a:38:
                    41:d0:92:dc:e1:e8:a3:05:0c:97:f0:74:eb:6b:4b:
                    fe:36:fe:f8:85:23:34:7e:8f:fd:2e:17:a9:2c:0e:
                    6b:d4:77:e6:2e:b3:7f:fa:61:2f:74:ee:0b:8e:06:
                    2c:2d:b2:98:bb:fb:08:77:c6:c4:1f:44:2b:dd:c0:
                    44:6a:7b:fe:b0:41:40:5b:4c:67:ad:e2:be:50:d9:
                    73:78:44:48:0f:13:4f:ca:25:c4:54:71:27:fd:7d:
                    ab:d7:75:ca:09:04:cf:22:22:9f:c1:8d:f8:9b:e9:
                    9b:f9:15:e2:37:47:ef:9a:bb:f5:59:d2:82:94:bc:
                    28:75:e9:2c:30:a1:58:5e:71:61:b6:72:ff:a5:39:
                    b0:66:c0:a3:3f:2d:47:b0:54:dd:f1:0e:95:62:e3:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5D:7C:5D:B8:3D:18:01:79:C9:5F:00:2F:3E:2E:C0:9E:99:DC:5D
            X509v3 Authority Key Identifier:
                keyid:7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fb:fa:7a:97:da:6b:62:76:de:6c:67:22:44:a8:3a:ea:6c:
         09:74:62:55:dc:3c:15:86:b1:36:21:f0:53:d4:4a:42:ee:6f:
         4e:16:00:f1:57:87:90:6f:0f:6a:e8:d6:d5:a8:9d:94:00:78:
         7d:ad:c6:79:9d:74:2c:79:ed:5b:48:3e:cd:33:93:5c:18:52:
         f2:a7:67:52:17:fd:78:96:3d:b4:af:1b:62:b6:8a:d8:c2:22:
         00:ba:75:2f:24:8c:e6:78:75:42:21:a0:61:04:c3:4d:51:1c:
         2e:2e:4d:44:1d:4f:0a:c3:76:65:7c:2e:3f:20:77:da:0f:e2:
         4c:13:99:32:23:61:25:9b:17:77:3e:8f:73:c4:90:4b:e9:b9:
         14:3b:59:c5:70:e1:c4:05:51:9d:87:13:a8:5c:11:20:ef:96:
         08:3a:be:05:24:02:cb:24:08:11:b8:85:04:04:ea:e2:ae:63:
         36:ff:9e:e4:5a:73:49:c5:17:dc:5d:0f:17:38:68:70:73:7c:
         42:1f:2e:2a:74:e3:a0:ea:5e:62:7b:ce:2f:f6:e3:96:ff:5f:
         04:6f:00:dc:ee:e7:9b:7e:33:e6:a1:dc:93:bb:80:f2:4a:47:
         5a:65:90:ec:a9:b7:fd:18:38:cb:3b:28:2c:15:68:95:02:9e:
         43:f6:f5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:00 2025 by rpki-client