Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          fO/BHL+zPJ53MGECkeEoJ1bmqQ1qMubPQ2XYc4dm634=
Subject key identifier:   E6:08:B8:9F:4B:C0:6F:F2:64:D5:2B:B4:1D:3E:58:AD:BA:48:05:93
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       0197C86FBB0967A002251BB5438D02A1C776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0A68
Signing time:             Wed 02 Jul 2025 00:00:54 +0000
Manifest this update:     Wed 02 Jul 2025 00:00:54 +0000
Manifest next update:     Thu 03 Jul 2025 00:00:54 +0000
Files and hashes:         1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=)
                          2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: pF3vOIDgozPcsIL8kjvXQdCmFKX5+F7gNyA8Noucctk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:6f:bb:09:67:a0:02:25:1b:b5:43:8d:02:a1:c7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Jul  2 00:00:54 2025 GMT
            Not After : Jul  3 00:00:54 2025 GMT
        Subject: CN=e608b89f4bc06ff264d52bb41d3e58adba480593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a2:53:57:0d:c5:a4:57:53:e0:3a:8c:be:03:
                    67:3e:79:04:41:22:e7:2e:fd:c4:db:fb:d2:58:df:
                    63:60:43:62:da:de:5d:d4:4f:dd:91:d6:e7:a5:af:
                    5f:be:fe:26:d5:38:cd:b1:74:30:b9:9f:ea:fb:fb:
                    d1:f8:f5:f8:05:e9:3a:01:09:2f:ec:53:69:b2:d5:
                    7b:29:25:82:e9:f4:1d:0e:8c:cb:b0:9b:f9:82:6c:
                    b1:64:a3:62:91:45:e3:ee:d1:66:ab:6a:f1:ec:71:
                    54:4b:65:a9:87:49:e6:fb:db:52:90:a9:9e:99:0a:
                    48:16:60:9e:20:3d:6b:f6:9d:64:d1:3c:e3:d3:f7:
                    c5:7e:77:b6:0d:a5:98:4a:fe:83:10:af:5a:7e:5b:
                    9c:e2:b9:02:d4:91:58:59:12:0d:81:bf:e4:8f:a7:
                    31:59:ab:43:8f:d1:42:72:f2:cd:d7:db:b6:18:8f:
                    6e:10:6a:f5:1f:a4:d9:04:0a:18:da:93:a7:7b:25:
                    0e:8f:7a:68:31:9b:be:ab:b8:ac:bf:69:96:25:f9:
                    82:ea:8f:92:bd:5d:35:47:4a:6c:6e:51:20:67:0d:
                    3f:37:f4:45:e6:ea:78:4a:2b:a5:d4:f1:a6:aa:ee:
                    d3:31:83:30:5f:f7:00:20:34:74:7e:b2:a1:a9:02:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:08:B8:9F:4B:C0:6F:F2:64:D5:2B:B4:1D:3E:58:AD:BA:48:05:93
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:4f:05:93:78:ed:18:06:a3:d6:22:83:d3:d2:e1:c5:f3:
         27:c6:8b:e8:2f:e9:e8:42:35:cb:2e:28:7c:35:af:d6:ca:0d:
         ea:a8:40:e5:43:89:65:85:70:35:36:33:ce:22:5b:63:0a:18:
         29:f9:b2:5b:f6:3a:06:d1:8d:f3:15:9d:30:db:66:ff:06:0c:
         f7:27:50:7f:2c:6c:de:a8:d2:82:f4:85:17:0a:37:79:fd:79:
         db:e1:d1:7a:ff:a8:41:cc:92:de:d5:a2:63:9a:45:6a:76:ee:
         63:96:97:5a:94:2b:07:0a:dd:f1:06:01:22:30:67:44:b5:b8:
         a7:fe:bb:f9:e8:6b:3d:be:5a:52:ff:fb:9c:b6:47:3c:f2:b4:
         24:50:03:ac:ce:e4:d7:c2:04:aa:8e:dc:79:39:e6:87:0e:31:
         53:a0:bf:fd:03:05:00:3b:fe:10:9e:d7:d0:17:ad:17:93:f6:
         53:ac:b2:fd:8f:15:72:52:51:c6:56:7c:4d:d6:ae:27:12:c8:
         ae:e3:dc:17:36:07:e7:3b:d0:60:a1:4b:26:69:ff:07:ac:3d:
         b4:fe:92:43:47:af:f3:93:e2:ac:92:24:69:47:bf:a1:7a:70:
         88:67:24:dc:f6:e3:ef:1d:2a:42:65:15:bf:91:d9:8b:89:c0:
         70:73:11:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:06:49 2025 by rpki-client