Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
File:                     eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft (raw, json)
Hash identifier:          twsvctHaZsGtz57GWn5fH2885hAPqLKV/lBOBDOobBc=
Subject key identifier:   B0:8D:7C:4E:E7:D9:C3:8A:99:50:1D:AB:77:8F:DF:C5:D4:44:0D:31
Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C
Certificate issuer:       /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
Certificate serial:       0198D4A7E0F5CBA0275EE17F8AE29E355A7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 02:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:28 +0000
Files and hashes:         1: eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl (hash: i75aF7C7dIyVnH7+gnjefbCxet1M3vMLGDBG8LR3fCE=)
                          2: kvDA2uJCxtsf_iJspEUKkErzpBw.roa (hash: JEVQ/faqvkDHRCLDsyE8tNxf+ZkvCVkbrXJ5aSPcJrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:e0:f5:cb:a0:27:5e:e1:7f:8a:e2:9e:35:5a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c
        Validity
            Not Before: Aug 23 02:00:28 2025 GMT
            Not After : Aug 24 02:00:28 2025 GMT
        Subject: CN=b08d7c4ee7d9c38a99501dab778fdfc5d4440d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:c5:c2:d9:d5:7a:ce:2d:08:e0:8c:e4:0a:
                    0b:d5:f4:3b:d6:94:7a:0d:34:fd:e2:4d:4a:85:10:
                    c6:d6:87:4d:b9:e5:0a:c4:f8:cf:66:76:fc:dc:4a:
                    74:d3:d4:ab:43:2a:8a:4e:81:ff:36:8c:5b:e3:02:
                    b2:6f:34:71:20:ee:d3:b1:be:36:79:03:b3:a1:0c:
                    5e:98:fc:ad:80:67:e8:6d:8a:81:e4:e0:fb:4c:c7:
                    31:81:22:fd:d9:27:9a:48:5b:0f:d2:1a:63:b6:b4:
                    47:5d:9a:c6:71:19:36:8b:ae:de:11:fe:0e:46:4c:
                    af:11:f6:5a:0f:ef:8a:d1:a3:e7:a5:2f:61:fb:70:
                    f7:e5:33:4e:fb:84:17:9a:47:12:c7:0c:d7:f2:4b:
                    39:83:16:75:c1:bb:6a:86:02:cf:be:8d:15:dc:f1:
                    65:71:9d:89:41:f0:41:57:e1:bb:9f:97:d6:bb:4c:
                    80:07:35:3b:a1:6e:07:b1:16:ee:1e:a4:b2:83:cf:
                    08:af:7f:38:09:11:48:5f:d7:5d:40:9e:eb:2e:47:
                    46:04:6b:75:ad:9b:59:eb:d5:85:11:3e:90:90:2c:
                    2e:a2:da:30:91:13:e5:84:63:57:c4:02:13:f7:c8:
                    4e:40:da:de:39:d0:4b:4d:d2:42:27:76:1a:ce:21:
                    ac:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8D:7C:4E:E7:D9:C3:8A:99:50:1D:AB:77:8F:DF:C5:D4:44:0D:31
            X509v3 Authority Key Identifier:
                keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:73:13:12:0d:09:eb:3f:da:b1:c6:cb:7d:f6:f0:31:26:b9:
         15:8d:df:28:3e:bf:89:03:f7:6b:68:af:0b:78:12:41:a8:17:
         99:df:c4:1b:b2:34:1f:bc:b9:3c:0c:47:2e:6d:07:1a:5a:64:
         56:92:dc:88:ae:10:30:79:78:ff:6b:d2:62:37:c9:dc:1c:94:
         49:2f:79:33:47:e4:6b:4b:6a:58:59:1c:b3:ed:20:d9:4c:ba:
         15:a3:02:77:b8:a6:88:b6:ac:eb:a6:ee:67:2f:0a:82:44:f9:
         0c:57:ae:57:1c:79:22:08:71:b2:e7:42:f6:35:ff:a7:3a:bb:
         d3:02:fb:45:75:69:95:64:d2:e0:20:a2:0b:63:a0:2f:ff:82:
         42:4c:70:54:54:83:b0:e5:5d:29:25:9d:f1:93:5f:06:59:c7:
         a1:7b:49:53:96:88:91:0f:7f:eb:ce:bf:e9:07:17:2b:bc:7a:
         55:85:06:1c:9a:28:75:bd:48:59:e5:93:1a:4a:e3:b7:72:02:
         4d:86:3c:23:fd:dd:0f:c4:70:df:23:9b:2d:2b:ee:57:12:28:
         ac:75:9b:74:ce:51:65:c5:ba:8e:70:9d:ea:8b:73:e2:84:ef:
         61:82:20:eb:4f:93:87:6b:0e:12:75:79:d1:3c:b1:5e:dd:9a:
         1a:c0:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:56 2025 by rpki-client