Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File:                     EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier:          N22nvZ5mV+11CxJtg8cCpIoTjWXjw/Nxb9DMxbB7Jis=
Subject key identifier:   43:EF:2D:DF:E9:8B:0D:4A:A7:F5:2B:E0:81:D7:FA:BF:78:77:99:3E
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer:       /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial:       0198D6CCE3A250296D1E88F174C5C2C2CE36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number:          062E
Signing time:             Sat 23 Aug 2025 12:00:08 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:08 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:08 +0000
Files and hashes:         1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: 1hRPoYAkHNJ195GyNfD1zspLcFvU9QYp8kye4TnG7Ks=)
                          2: JM7Diumu07DkwWLADgRxpUrBPAo.roa (hash: so2SddPtay/IxArEazOpnYcd0MRszDIHkgKGB+pzdZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:e3:a2:50:29:6d:1e:88:f1:74:c5:c2:c2:ce:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
        Validity
            Not Before: Aug 23 12:00:08 2025 GMT
            Not After : Aug 24 12:00:08 2025 GMT
        Subject: CN=43ef2ddfe98b0d4aa7f52be081d7fabf7877993e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e2:d7:81:80:54:2a:00:15:3f:7a:36:61:86:
                    3a:3f:c7:14:ef:66:5a:7a:38:fb:1e:af:21:29:83:
                    fd:19:58:83:61:d9:97:1a:fa:e2:70:c6:af:c5:fe:
                    16:6a:51:c1:dd:9e:a7:6e:de:f4:71:09:b7:c7:8a:
                    84:bb:18:c9:89:ad:2f:59:e5:0c:a3:a8:89:d5:69:
                    d8:c9:97:83:b9:ae:39:49:41:e4:4b:03:48:fd:00:
                    d4:ba:87:91:2d:c0:50:d0:8a:78:31:10:8e:34:e0:
                    da:b5:68:bc:82:81:c9:b0:00:72:81:35:f2:03:59:
                    5e:c7:26:e0:6f:5e:ac:59:47:e3:0a:7f:fe:da:05:
                    18:40:7e:39:e1:04:43:c5:43:b2:0a:5d:95:be:91:
                    d9:86:4d:f4:0f:cc:e4:32:3f:75:81:a5:d7:7d:44:
                    fb:36:51:33:a8:bb:e6:e9:9f:29:fb:4d:4e:a8:bc:
                    63:a7:96:70:99:ce:bc:7f:9c:a3:33:d0:64:e0:85:
                    14:04:37:12:36:85:a8:3e:3e:ee:88:72:3e:e7:40:
                    dd:05:50:4d:df:86:95:70:3d:8f:29:74:26:65:01:
                    4f:ec:7a:a3:a3:9c:af:9c:0f:6a:50:56:64:65:bd:
                    c0:bd:92:e6:c5:a2:18:f7:33:b4:93:a1:ce:87:ad:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EF:2D:DF:E9:8B:0D:4A:A7:F5:2B:E0:81:D7:FA:BF:78:77:99:3E
            X509v3 Authority Key Identifier:
                keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:fa:aa:32:31:86:f9:2c:ba:50:20:ca:0a:f1:5b:f1:ac:
         f5:61:cd:d2:27:54:4b:72:47:2f:b7:41:f3:ac:6e:5a:d0:df:
         5b:d2:b1:61:bf:9b:b2:a4:0e:c8:37:c6:5d:04:a5:a2:60:f2:
         ae:aa:43:e5:d4:b7:49:0e:44:66:5e:cf:e0:eb:c8:ee:05:22:
         a3:0d:05:dd:48:b9:66:ca:5f:50:36:46:32:32:05:7d:94:3a:
         d2:43:51:d6:1e:f2:8e:24:0f:5d:34:8e:ca:fb:93:6c:c8:4a:
         71:97:09:a5:43:ca:5c:54:38:af:dc:0d:e4:96:03:db:b5:e9:
         bc:07:e0:c6:62:33:70:18:21:a3:52:d4:c0:0b:30:68:64:77:
         07:2f:a5:74:eb:46:4c:72:c1:4d:bb:bc:80:66:07:18:a9:79:
         55:3b:d9:26:5d:9f:ba:c5:c9:0c:a9:95:e8:80:6a:fa:14:7c:
         95:c1:fe:f3:5d:64:77:0b:0c:ae:93:9b:70:69:eb:ea:b9:cc:
         53:c2:c8:d3:fe:5f:1a:b8:ce:91:95:29:22:94:88:65:1c:fc:
         64:e6:5d:d1:a7:da:10:3f:67:74:17:2d:be:fe:2e:2a:9d:5d:
         2a:84:68:d9:5c:79:19:63:cd:b8:ac:28:ba:37:5b:14:f9:c8:
         c6:a8:99:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:30:39 2025 by rpki-client