Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          YujQ6r74YYzSOnAFrJzqw1J71spJsEDAycRn+aDWjyM=
Subject key identifier:   24:C3:68:2A:BA:E7:CB:ED:73:48:25:EF:9B:55:E8:BB:B9:7A:BC:04
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       0197B6325C6EA4409AD2FCC09FC5460BB718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          05ED
Signing time:             Sat 28 Jun 2025 11:00:43 +0000
Manifest this update:     Sat 28 Jun 2025 11:00:43 +0000
Manifest next update:     Sun 29 Jun 2025 11:00:43 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: 5aZ1v+GLhF689OEsQ/WudInvR5GYg1Va4RRAk+85mOA=)
                          2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:5c:6e:a4:40:9a:d2:fc:c0:9f:c5:46:0b:b7:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Jun 28 11:00:43 2025 GMT
            Not After : Jun 29 11:00:43 2025 GMT
        Subject: CN=24c3682abae7cbed734825ef9b55e8bbb97abc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cc:72:85:36:7b:49:1f:63:dd:aa:be:ab:4d:
                    50:40:60:6b:00:b3:2d:c5:de:b4:c3:43:10:1f:29:
                    89:38:21:21:6f:ce:12:50:24:ce:23:9f:32:eb:df:
                    2a:b9:17:9e:79:9b:c9:ad:6f:62:14:94:c8:e5:87:
                    b2:d6:1e:69:f0:3c:cc:16:e4:40:e2:e9:18:13:73:
                    9f:1d:0f:d7:6e:ac:4e:f2:de:38:87:fb:36:64:27:
                    8a:d7:72:86:93:8a:6f:66:19:a3:d7:f4:c3:2f:da:
                    a5:b3:42:80:ba:5d:77:cc:07:28:6c:e1:ea:41:21:
                    32:12:ba:37:af:b7:71:96:b1:dd:9d:e3:13:bb:ce:
                    3e:12:56:bb:e8:d3:a8:bb:31:1c:d4:2b:43:0b:0e:
                    43:a9:a9:f5:60:c2:23:e5:83:6c:59:04:9f:f8:ff:
                    16:f4:1b:12:1c:77:2e:a6:b8:dd:0a:ec:cf:2b:c5:
                    55:21:41:e1:b2:fd:c7:4c:8d:8b:43:0e:ea:16:7e:
                    a6:b2:c2:0b:0a:1a:c4:64:80:4a:15:b7:a4:ef:99:
                    60:19:02:cb:3e:b4:3b:56:51:82:c2:8a:d9:98:f4:
                    3e:24:a2:e7:ec:1e:e4:01:3f:5a:af:66:2a:3e:38:
                    a1:ea:dd:ea:3b:24:8c:50:7a:4f:81:05:e3:73:a8:
                    82:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C3:68:2A:BA:E7:CB:ED:73:48:25:EF:9B:55:E8:BB:B9:7A:BC:04
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:70:78:7b:18:c6:01:e3:1c:08:a7:12:c1:68:8b:97:0a:2b:
         eb:2a:5a:4d:09:49:45:22:ca:0b:bc:96:2f:86:85:b1:3a:f2:
         d2:43:66:8f:38:d4:61:d8:80:59:d6:ea:0b:13:07:d7:c3:09:
         6c:8b:50:be:f5:89:be:ac:1e:6f:93:6b:9a:8d:ba:7b:9f:53:
         78:2c:ce:1c:3b:ff:b6:64:0e:bb:e6:3e:18:b8:f0:c9:28:64:
         83:bb:c5:0d:80:e8:c4:19:ec:6d:4a:e5:1f:b0:65:1f:55:12:
         f4:e1:74:69:a0:93:71:e7:a6:15:f0:80:1b:69:44:ce:6e:76:
         3a:25:2f:e0:4c:b0:46:0f:73:74:cd:89:09:43:be:cb:67:54:
         51:97:50:75:cd:89:42:6f:87:c7:c8:17:28:ec:3e:34:60:df:
         73:55:d2:5e:01:47:40:c2:d6:35:3d:b9:cd:aa:7e:f5:bf:c3:
         40:e8:1b:25:02:bc:bd:f0:f9:eb:b8:62:cf:24:82:43:d5:26:
         ed:19:95:b1:16:cb:46:e8:5e:38:9d:0c:21:7c:4a:a4:c4:90:
         3e:db:d5:cc:73:3c:53:16:97:1c:21:58:0a:49:16:6f:5f:a1:
         93:65:39:76:96:3f:3c:a1:58:8b:e0:4d:8e:1e:f0:1e:89:70:
         93:d9:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:43 2025 by rpki-client