Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          Hk++j5MlAthuwL+O6nlfHS66kYcUd9QyTy0NAmOKxow=
Subject key identifier:   48:75:83:25:4D:6D:B3:C4:CC:63:80:B8:1A:AC:8A:93:8D:C2:D2:35
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       0198D4E012F5F3196AA1F882CBFCDABCDAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0AF3
Signing time:             Sat 23 Aug 2025 03:01:51 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:51 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:51 +0000
Files and hashes:         1: 5ie8JF4KKXSrM93JlPn2dV4V6Yw.roa (hash: voEtz6mEruRpxmdJ50z2YHPNPHZIPj+18ktBBGi8uuc=)
                          2: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: p+sl2dAAFCj7BlIhobe7o4phKjAimhZUo5l9QiOLxo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:12:f5:f3:19:6a:a1:f8:82:cb:fc:da:bc:da:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Aug 23 03:01:51 2025 GMT
            Not After : Aug 24 03:01:51 2025 GMT
        Subject: CN=487583254d6db3c4cc6380b81aac8a938dc2d235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8d:25:cc:8f:3e:83:66:99:1b:21:c1:ff:51:
                    82:83:3b:4b:62:5b:ee:b8:a9:7c:57:27:d5:51:9b:
                    6d:93:da:c3:63:1e:f1:d9:ec:39:da:47:07:e3:3b:
                    44:9e:0f:7a:be:69:bc:38:4d:35:18:bb:4f:f4:55:
                    5b:1a:c1:7d:60:80:13:73:c3:16:94:83:99:59:49:
                    d3:7a:08:6d:89:73:27:48:03:54:52:58:ee:97:9d:
                    4c:50:44:11:e1:7b:09:1b:c3:eb:4f:c8:e5:a3:60:
                    39:c1:f3:84:05:29:b5:e6:cb:fe:93:57:23:ed:64:
                    bc:51:1f:1a:1e:04:4a:94:30:1c:57:32:24:b7:72:
                    3e:29:53:73:5c:01:57:3a:48:c9:37:5c:f6:66:26:
                    36:96:85:c2:5e:5f:7d:5a:56:e0:a1:6a:4d:94:1c:
                    b9:7e:27:a6:de:ab:1c:88:48:19:6a:fa:4c:d9:f2:
                    10:4e:4b:5b:2b:dd:61:cb:ac:d9:72:63:49:1b:49:
                    22:16:cf:b2:2c:af:93:28:38:92:bd:a7:df:5e:70:
                    40:b6:5f:30:99:db:61:be:98:b2:2f:fd:95:8b:51:
                    23:17:50:7e:2a:b5:23:f6:ca:a8:6e:b9:fe:a2:fe:
                    bd:b7:2a:3b:ff:6e:cb:b7:e1:34:96:03:be:fe:bd:
                    34:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:75:83:25:4D:6D:B3:C4:CC:63:80:B8:1A:AC:8A:93:8D:C2:D2:35
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:31:fd:ed:24:39:fb:3a:5a:3a:97:94:50:d4:9d:9f:df:
         64:b6:11:37:5c:97:ea:88:be:e7:ef:d7:fa:1a:e8:ac:5b:e8:
         3d:fe:73:74:d7:19:ba:e9:75:f4:4d:f0:b6:a3:ca:8b:39:ab:
         ec:98:04:6d:3e:52:b5:95:10:73:93:93:04:b8:16:e0:f1:42:
         89:01:d4:ef:f2:fd:13:08:7b:4c:ce:31:19:b0:bb:7b:bc:cb:
         a9:0e:db:be:ac:60:3b:67:49:f8:20:29:4d:30:60:a1:16:4f:
         27:11:0f:1a:4f:64:88:4e:62:8e:ad:35:d1:28:f1:54:b5:68:
         89:77:e9:b2:b8:68:38:fd:dd:a6:76:fd:5d:59:1d:22:78:80:
         ad:40:c4:b4:e4:5b:05:e2:0b:34:06:ca:78:2e:77:9f:e2:4d:
         30:70:d4:6f:14:51:6c:bf:5c:ad:80:2c:d6:ff:ae:5f:f7:e3:
         c0:4e:9e:35:a8:bf:a8:cd:d2:50:5b:3f:bd:62:aa:36:a1:3e:
         c1:21:22:80:03:e9:fb:b9:ad:97:9a:dc:00:1a:dd:b0:0a:90:
         ab:df:10:a7:2d:22:05:b6:84:3e:e1:07:4b:7d:9f:49:e1:f9:
         d5:59:83:91:01:44:c5:45:fb:c6:f8:5c:e4:06:0f:ff:65:3a:
         f0:73:da:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:08 2025 by rpki-client