Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
File:                     EceeiifN6ZEb19pjhzxcxVjb1TE.mft (raw, json)
Hash identifier:          8irnL6FN7sDKan0KZBVi8QPWF0aAbXn2SjSY8MyLQ8A=
Subject key identifier:   B9:74:6B:E9:E7:3F:CD:E2:EC:C2:95:E0:DB:04:A4:C6:8D:80:86:3F
Authority key identifier: 11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31
Certificate issuer:       /CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
Certificate serial:       0198D54E393FDFB6F478E55BDFAE1B448785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
Manifest number:          13E8
Signing time:             Sat 23 Aug 2025 05:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:09 +0000
Files and hashes:         1: Bsu-qd4Hb1vqVvGW20Zp4q_1pjc.roa (hash: QTaT900DWiFMyweSz6j2MycvkkhCzcM06pjuvp5Vqnw=)
                          2: EceeiifN6ZEb19pjhzxcxVjb1TE.crl (hash: CnrSNK2LdzSJkM3zh/89d467zldfyOIPIpnWQjCYqm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:39:3f:df:b6:f4:78:e5:5b:df:ae:1b:44:87:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c79e8a27cde9911bd7da63873c5cc558dbd531
        Validity
            Not Before: Aug 23 05:02:09 2025 GMT
            Not After : Aug 24 05:02:09 2025 GMT
        Subject: CN=b9746be9e73fcde2ecc295e0db04a4c68d80863f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:c0:77:6f:99:48:cc:13:99:2d:fa:84:a3:
                    f1:f7:e3:f8:26:0c:c9:ef:54:9c:67:a1:c0:2f:dc:
                    33:39:b1:0c:cc:ee:60:7c:8c:de:e4:ee:ec:d3:04:
                    ee:54:96:84:f9:ea:66:2e:42:fb:b1:77:87:3d:b8:
                    0d:98:2e:02:ed:5e:d6:ea:6b:f0:ab:fa:46:dd:91:
                    20:0b:c2:fd:d3:6b:11:40:c3:b2:02:af:af:a1:c9:
                    c6:60:d2:e5:ba:b6:54:c4:99:c8:a8:14:c9:21:4f:
                    47:fb:ba:fd:b5:2c:34:bf:4b:c2:cb:6a:01:4f:e7:
                    75:c6:dd:67:39:72:09:2f:60:84:78:78:93:04:2e:
                    5d:35:f5:9f:99:77:ed:99:48:9b:50:67:1c:2d:50:
                    2f:18:b9:e8:67:1d:14:25:4f:9a:9a:bf:60:a2:c1:
                    8a:c4:4f:41:c6:8a:15:ed:06:4b:cb:45:1c:19:de:
                    6f:3e:27:75:87:18:cd:36:cc:8c:82:ea:83:df:a7:
                    ab:61:0f:dd:08:88:9d:ea:ef:78:6d:08:8d:0b:ad:
                    7f:a1:7d:50:f1:e6:d9:e2:6c:21:c3:2f:e1:e9:21:
                    41:00:1c:2e:56:df:df:d0:77:93:4f:a5:b4:70:b1:
                    44:70:ea:5d:18:56:6c:3f:6f:f7:26:09:3b:b4:37:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:6B:E9:E7:3F:CD:E2:EC:C2:95:E0:DB:04:A4:C6:8D:80:86:3F
            X509v3 Authority Key Identifier:
                keyid:11:C7:9E:8A:27:CD:E9:91:1B:D7:DA:63:87:3C:5C:C5:58:DB:D5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EceeiifN6ZEb19pjhzxcxVjb1TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/414e5a-52f8-4845-b1bb-b9930510d0a0/1/EceeiifN6ZEb19pjhzxcxVjb1TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:07:e5:21:97:8f:c1:b5:56:67:5e:50:90:ef:bc:d1:d5:0f:
         f9:aa:ef:36:09:d1:33:d9:2e:df:64:aa:03:43:e4:4e:bb:ab:
         e9:b4:ed:ab:a1:30:e1:39:b0:7c:7d:08:a6:35:c9:9b:22:0a:
         a5:bc:8c:12:0c:28:68:4d:11:c7:ac:0c:6f:d7:ad:02:5c:ad:
         30:c4:d7:7a:5b:35:35:ab:b4:09:e3:06:c5:3c:86:ad:cf:97:
         2f:47:c9:6e:72:6d:d4:2c:a7:df:42:85:57:8f:c2:ed:0f:56:
         9c:2e:27:0b:40:7c:bb:e5:4c:2b:91:62:a0:4d:1f:31:f9:f0:
         31:7d:6a:f3:c3:47:be:af:af:11:81:75:13:04:79:a2:e3:25:
         6b:9e:2b:90:91:fb:99:56:40:0d:88:6c:3c:f6:10:60:1e:b7:
         6d:b6:35:15:2a:81:9d:1d:e6:fc:4f:88:a6:4e:a8:6a:b0:3f:
         ff:f2:cf:76:6e:e2:1a:63:83:f1:e2:9d:e6:3b:e0:dd:81:36:
         e1:64:8c:e5:cc:97:35:ba:b4:66:cd:e3:d0:59:f3:91:2f:d9:
         0b:30:f3:bf:05:03:81:4f:7e:4f:14:da:a9:b6:2d:3d:10:d2:
         0d:76:5e:68:78:52:bb:7f:87:da:f0:bd:df:2a:de:ed:e2:37:
         13:a5:10:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:00 2025 by rpki-client