Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
File:                     EmCsDOT0xtDo2rrIOva4aYvEjpw.mft (raw, json)
Hash identifier:          u1ZVAl4yqnk94VNMz32pklAT85Og8zCu86sNWs9FQZI=
Subject key identifier:   25:31:C2:4F:1F:84:69:13:CF:FA:48:6F:A3:51:73:E1:2F:D5:C0:E6
Authority key identifier: 12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C
Certificate issuer:       /CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
Certificate serial:       0198D8166BFE1C5FCC533655392008095171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
Manifest number:          66
Signing time:             Sat 23 Aug 2025 18:00:04 +0000
Manifest this update:     Sat 23 Aug 2025 18:00:04 +0000
Manifest next update:     Sun 24 Aug 2025 18:00:04 +0000
Files and hashes:         1: EmCsDOT0xtDo2rrIOva4aYvEjpw.crl (hash: HEZCj2AspHfumCIl795wsP0Yfqhg5cyVz8/Uk/VAb2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:16:6b:fe:1c:5f:cc:53:36:55:39:20:08:09:51:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1260ac0ce4f4c6d0e8dabac83af6b8698bc48e9c
        Validity
            Not Before: Aug 23 18:00:04 2025 GMT
            Not After : Aug 24 18:00:04 2025 GMT
        Subject: CN=2531c24f1f846913cffa486fa35173e12fd5c0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a1:42:f0:89:68:48:11:cc:25:eb:ad:c6:89:
                    d2:f0:d0:d1:a6:03:39:1b:75:28:eb:b1:d8:e4:af:
                    9b:a1:00:8d:0e:fa:7b:c4:c0:56:bf:54:6f:77:d7:
                    68:3b:e6:c9:88:09:86:54:1b:10:44:04:4d:b2:39:
                    c9:59:fd:77:ad:e0:1c:9e:5e:6a:d2:76:d9:5a:13:
                    87:60:da:73:a2:7f:fa:a8:69:2f:ea:2d:10:ee:18:
                    6e:93:e6:1b:2f:9e:16:67:39:1e:83:70:66:8c:6e:
                    62:86:47:5e:68:bc:c8:75:82:12:15:ea:7c:e7:d1:
                    96:51:e8:48:80:c2:da:10:7c:aa:ae:4e:66:2a:05:
                    6d:a7:4b:ca:b2:f3:cf:85:91:05:bf:22:ea:8c:c8:
                    84:5f:ce:19:93:b6:d1:4f:24:c4:d9:88:3e:0a:0d:
                    c4:39:3a:9c:bb:1a:e4:6f:6e:d4:a7:6a:62:ec:98:
                    0e:f8:e7:5b:a6:0a:b4:b2:3e:2c:27:be:20:b1:0f:
                    cf:9a:63:cf:b9:09:aa:41:f2:ef:2e:bb:6e:28:57:
                    15:e4:08:44:ae:2e:de:b7:29:16:6b:0b:64:8a:c0:
                    e9:8f:9a:27:df:5c:eb:db:07:84:ee:d6:81:75:be:
                    9d:62:80:a8:09:39:3c:61:e3:e8:13:03:db:76:10:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:31:C2:4F:1F:84:69:13:CF:FA:48:6F:A3:51:73:E1:2F:D5:C0:E6
            X509v3 Authority Key Identifier:
                keyid:12:60:AC:0C:E4:F4:C6:D0:E8:DA:BA:C8:3A:F6:B8:69:8B:C4:8E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmCsDOT0xtDo2rrIOva4aYvEjpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/551a1f-1542-443b-a5f4-b06dac357966/1/EmCsDOT0xtDo2rrIOva4aYvEjpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7a:83:bc:ac:36:76:9e:74:d3:dc:6d:64:16:2b:3a:9a:be:
         f4:02:01:b9:21:7a:61:97:33:c7:1a:2b:bb:60:a2:da:40:23:
         8b:ff:8e:66:22:65:b4:de:54:95:cd:ee:36:e6:95:83:c2:83:
         c3:8a:30:9c:7e:e4:8e:f2:41:b4:cf:d7:11:49:71:b9:d8:9d:
         51:c7:ec:96:20:fb:4f:ec:81:2a:41:d4:53:ff:93:90:0d:a0:
         e2:18:81:89:84:64:5d:01:31:63:bf:84:ba:9e:1e:8d:ee:8f:
         66:b1:ea:cc:04:43:7e:51:46:43:07:a5:20:fd:0a:60:37:5c:
         38:3f:1b:2e:17:f3:b0:28:b6:af:5d:c5:00:79:78:e3:33:c1:
         d4:09:a3:ed:82:3f:3b:ad:6c:6e:c9:cd:75:12:45:6f:f6:4a:
         99:a5:dd:6b:e4:b7:dc:25:83:c5:c2:ff:43:bb:4f:4d:fb:b2:
         e4:14:b6:48:e5:de:00:a8:b1:ff:fd:ef:e1:92:de:a7:95:39:
         5c:8a:72:f7:96:25:17:4a:b5:f8:05:27:27:4c:f9:6e:49:83:
         73:e0:e6:c9:01:aa:55:35:34:a6:21:93:c4:6f:cd:e2:46:e8:
         2c:d5:3d:f2:31:35:23:f5:b6:8c:dc:a9:8f:9d:29:85:85:a3:
         b8:d1:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:06:37 2025 by rpki-client