Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          zA9MNecolSW7g1R3OKX3KIxGjB+2XzMj86wS0YB1bck=
Subject key identifier:   DB:D6:95:83:8C:6E:B1:7F:6E:64:C7:82:AF:34:B4:72:82:03:67:FE
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       0198D584069073D0D81DDB40073358AB9924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          0530
Signing time:             Sat 23 Aug 2025 06:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:55 +0000
Files and hashes:         1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: z9CPaRth7AzWuz/6cAtcNqOuZ4SFbQydxTpkCWn+zjY=)
                          2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:84:06:90:73:d0:d8:1d:db:40:07:33:58:ab:99:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Aug 23 06:00:55 2025 GMT
            Not After : Aug 24 06:00:55 2025 GMT
        Subject: CN=dbd695838c6eb17f6e64c782af34b472820367fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:18:bd:73:01:5e:29:4c:d1:d6:d8:65:53:5e:
                    a9:ba:90:b2:7d:1b:72:26:a6:7d:bd:42:74:20:8e:
                    7f:06:47:00:ff:4c:aa:b2:4c:29:56:24:77:42:ab:
                    0a:e1:3d:3b:e8:59:c3:cb:28:c8:e5:9f:c6:ff:55:
                    60:79:2b:69:61:e9:67:93:f7:27:73:26:da:10:e5:
                    f1:d0:09:4c:8d:c9:4f:c2:aa:90:e5:13:01:49:f3:
                    8b:9f:c6:f0:b8:27:fe:24:db:9a:7b:dd:80:73:69:
                    79:34:ea:3b:de:d0:7a:29:3d:82:24:d9:19:e3:1a:
                    12:c6:e9:bf:90:12:78:90:c6:8c:5e:84:ad:bd:dd:
                    25:f4:e0:0b:01:a1:f2:5e:96:55:41:7c:90:a1:a6:
                    e4:58:f6:5a:ac:97:6e:21:29:8c:d1:7a:e9:40:11:
                    05:7a:71:b0:74:4c:21:f5:d4:19:a1:9b:8d:64:96:
                    16:f6:dc:47:81:66:23:6c:ee:4c:d7:cb:05:bd:0f:
                    e7:b6:10:57:c6:6e:80:7b:33:cc:3d:08:2f:90:e7:
                    5e:e6:6f:8d:e7:83:9e:f7:c4:e8:1b:21:29:75:a6:
                    9b:ba:19:56:60:8f:ee:21:70:de:3f:d1:9e:6f:21:
                    2c:41:56:26:24:81:74:db:b3:7a:a3:29:63:1f:26:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D6:95:83:8C:6E:B1:7F:6E:64:C7:82:AF:34:B4:72:82:03:67:FE
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:ec:d3:8d:73:a3:bf:11:5a:8e:33:b7:6c:64:4d:28:c4:
         3b:c3:91:b8:f9:d3:46:ec:c5:59:aa:47:d3:19:e3:d8:9f:2a:
         58:5d:46:32:89:8c:a8:71:0b:14:de:37:84:da:b7:6e:d4:3f:
         2d:c0:9b:f0:fc:0a:b1:21:f1:6b:24:8a:94:bf:d1:5e:09:18:
         e1:a7:9f:c4:2e:62:ef:62:82:94:cf:9b:55:06:52:d4:94:ea:
         56:05:7f:57:cd:32:35:c7:b2:01:0f:90:de:b7:5c:94:3b:08:
         0d:55:50:28:c3:7d:23:7e:3e:41:67:30:cc:76:e0:e8:99:ae:
         d7:d1:04:b2:cb:90:08:81:8b:72:dc:7f:66:ab:b8:de:a3:68:
         d4:4f:5f:92:d0:0d:ce:a6:bf:c9:05:fd:31:00:63:24:ae:f0:
         a6:39:0f:94:dc:96:e7:22:76:8f:73:9c:93:4b:77:e4:d5:ec:
         47:e0:77:83:1d:3b:15:2d:d9:10:e7:65:e5:2e:90:e2:9c:3c:
         4f:27:8e:1a:88:b0:8e:1f:0d:ac:a6:9f:ac:5e:77:87:3e:b6:
         44:4e:8b:df:0c:71:c5:07:7b:ed:2d:d0:22:36:6f:3a:e0:4f:
         cd:63:24:eb:33:96:75:d9:35:e2:ee:ae:97:a5:fd:e8:a5:c1:
         3f:0c:f0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:00 2025 by rpki-client