Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
File:                     EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json)
Hash identifier:          gAAmIzMpaYTxgUGIPYGqzc3nTLXBD3faHODWlYJi01I=
Subject key identifier:   C2:1D:9A:FA:69:A0:8F:F9:5E:76:E2:A2:00:1B:A8:CB:49:1B:A5:04
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Certificate issuer:       /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial:       0198D516336882C27236CA72B1E033F0B62D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
Manifest number:          1358
Signing time:             Sat 23 Aug 2025 04:00:58 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:58 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:58 +0000
Files and hashes:         1: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (hash: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=)
                          2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: pm3ja8uaVSORlxCQevm7xgaSLV+2U0G7PTla1aEDJys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:33:68:82:c2:72:36:ca:72:b1:e0:33:f0:b6:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Validity
            Not Before: Aug 23 04:00:58 2025 GMT
            Not After : Aug 24 04:00:58 2025 GMT
        Subject: CN=c21d9afa69a08ff95e76e2a2001ba8cb491ba504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:57:26:d9:7d:0c:34:d2:69:c2:6e:85:82:1a:
                    e6:5d:98:3b:de:f4:6f:fe:ff:c6:cd:09:1f:5e:81:
                    29:0f:24:92:a6:65:d8:29:08:39:86:b7:41:0b:12:
                    3a:f5:5e:fb:41:09:3b:20:09:ee:9f:1f:db:be:41:
                    8e:24:84:0a:4f:5f:2c:7f:97:7b:0a:59:98:49:5a:
                    ed:d8:c6:a5:52:36:bb:79:96:79:f1:bb:3d:5d:4a:
                    39:63:99:a1:4e:7d:b8:57:25:20:85:17:de:5d:00:
                    68:43:7a:08:46:5d:3d:9e:ad:48:31:75:89:bf:f3:
                    e9:56:07:fb:f4:38:06:da:86:3e:1c:49:b9:34:1f:
                    d3:b6:c1:9b:ea:e2:31:26:a2:9a:b2:34:83:fa:fa:
                    83:b9:04:67:20:45:ca:70:e1:82:40:98:50:03:c7:
                    95:63:7b:67:b5:54:dc:ad:14:54:b4:3e:bd:e9:10:
                    80:86:c7:42:18:ca:bf:e5:0d:91:ac:17:35:cc:d3:
                    38:e3:e8:bb:1f:6d:1c:28:59:e0:a4:7a:f1:64:47:
                    79:30:35:1b:bc:ef:33:bd:b6:0b:d7:27:1b:28:ec:
                    e5:65:49:02:06:52:37:60:15:a6:0d:9f:8f:d3:64:
                    dc:5b:61:68:a0:06:4b:96:ee:08:27:87:12:2b:5b:
                    c7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1D:9A:FA:69:A0:8F:F9:5E:76:E2:A2:00:1B:A8:CB:49:1B:A5:04
            X509v3 Authority Key Identifier:
                keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:10:29:ef:0c:62:0a:be:ec:14:90:7c:08:f2:f9:01:1e:
         c3:ef:69:da:ae:e4:41:e9:73:c2:90:ed:43:97:28:b1:f9:c4:
         5b:1f:f3:20:9b:26:f2:78:d1:e0:95:b3:37:5b:56:cc:45:cd:
         43:04:fa:60:4e:06:ec:4c:bf:25:35:4d:df:4b:97:39:4c:d7:
         15:97:1e:91:2b:e0:9c:1e:bd:ab:b9:ed:7c:c8:79:05:75:d9:
         fa:6a:f1:29:a2:a3:57:62:98:86:85:e9:4e:6e:8f:c5:50:f2:
         80:95:31:04:d9:04:2a:e4:ce:41:db:c0:4b:c4:cc:8a:b4:a1:
         87:6f:99:0c:e7:d2:cb:7b:be:9b:99:1a:5a:d5:73:9d:c2:ab:
         db:73:48:e1:d4:97:ad:54:e0:17:82:62:90:4c:10:b1:84:7a:
         f2:ad:79:06:c3:54:33:e0:38:34:b7:47:a1:e1:84:f1:fc:98:
         fd:ad:0a:f3:3e:ff:c6:76:83:84:aa:c7:e2:06:ad:86:e3:7a:
         11:75:b5:3d:4b:ca:75:13:f1:c6:6d:f4:3d:68:22:39:50:c2:
         a2:7e:5e:34:42:8f:f9:cf:7d:53:d6:2e:8b:84:78:59:37:dd:
         a5:f1:00:fc:36:91:e1:04:1b:62:37:63:e9:67:d9:ec:b9:78:
         a4:f0:4c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:46 2025 by rpki-client