Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
File:                     eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json)
Hash identifier:          62vVxFBJx8wLhBRJELg9HRummazTRC/1BVzwqiWIi9k=
Subject key identifier:   EE:45:14:65:BA:42:6E:92:25:8A:FA:79:12:57:AB:E3:A4:3C:F8:BB
Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B
Certificate issuer:       /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
Certificate serial:       0198D4A81823E4FDB5C1860683FB105E8AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 02:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:42 +0000
Files and hashes:         1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: X77r2MERZj+X4kRfqB86fmUdbPklp9toMxzTZrZrXP0=)
                          2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:18:23:e4:fd:b5:c1:86:06:83:fb:10:5e:8a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b
        Validity
            Not Before: Aug 23 02:00:42 2025 GMT
            Not After : Aug 24 02:00:42 2025 GMT
        Subject: CN=ee451465ba426e92258afa791257abe3a43cf8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0f:2d:39:15:a8:b5:28:af:88:9a:3b:e1:0e:
                    60:c4:98:1d:c5:8d:fa:16:68:f2:75:7c:cc:d3:e2:
                    1c:07:51:32:2b:8c:4c:e0:cf:9c:b8:04:38:50:fa:
                    b5:5c:fb:8a:c0:56:6f:22:83:ba:16:fe:a7:35:f4:
                    36:25:f3:7b:59:e9:d4:c0:32:13:e9:7b:92:7f:ab:
                    cd:89:ea:16:ae:c1:34:83:86:87:0d:d6:34:ed:ad:
                    80:8b:62:2a:39:7e:13:4a:e3:ae:e5:b1:f9:de:3b:
                    26:e1:a1:b0:dc:02:b5:2b:9c:42:81:a3:5c:72:5f:
                    f0:48:30:f8:d7:35:e7:3d:d6:05:49:ee:12:54:2b:
                    e7:da:9a:26:95:2c:19:18:9a:b3:c4:f5:55:bc:8e:
                    82:37:96:b7:12:bf:f1:d0:08:31:15:5b:c7:99:07:
                    38:f8:91:fe:ae:40:75:fc:b5:9f:22:a7:35:b2:d5:
                    ba:d5:bc:78:9d:7f:d9:4a:21:49:36:ae:a2:2a:82:
                    c8:07:d3:8f:4c:5c:05:73:aa:c4:ad:17:05:6e:47:
                    71:5d:cf:de:c0:eb:49:93:66:25:fb:57:b7:fb:2d:
                    11:41:ad:7a:f4:81:44:fb:31:dc:7e:8e:e2:6f:28:
                    d4:89:9f:4e:2c:d1:9a:7d:01:bf:93:f6:49:c9:68:
                    5f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:45:14:65:BA:42:6E:92:25:8A:FA:79:12:57:AB:E3:A4:3C:F8:BB
            X509v3 Authority Key Identifier:
                keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:23:02:37:63:9a:b1:cd:57:f7:1c:db:fb:64:db:d8:b8:fb:
         c2:ba:b1:3b:de:d6:5f:7d:a5:01:3b:8a:28:c1:ec:01:5f:07:
         9f:c5:07:a6:24:19:1c:ed:ad:41:98:02:25:82:a2:83:00:87:
         15:ff:b4:ae:34:bc:61:36:9b:ca:93:61:b5:a8:a0:5b:9e:8e:
         52:e9:08:6c:cd:29:f5:db:6d:ed:8f:45:61:c8:e3:7c:31:01:
         a7:67:95:f3:92:69:7e:7f:69:13:25:65:40:d5:3f:29:c9:b7:
         a1:bd:f2:83:21:11:eb:c4:9c:bf:66:a1:a6:bf:7e:5c:bf:b9:
         6b:92:d4:b2:8a:ea:ba:4d:fd:f1:67:7f:e2:e9:25:d7:47:f4:
         e0:be:63:e0:ce:19:00:35:4e:97:00:83:f7:95:10:76:cb:45:
         36:e2:c2:02:bb:5c:06:e2:85:99:9e:5d:a1:a7:a0:6a:ce:df:
         d7:f9:42:2e:7a:66:f5:67:e4:d7:86:f8:dc:bc:aa:a9:97:2b:
         92:ed:a6:45:33:1d:1e:a3:96:80:18:17:b8:21:15:f6:32:f6:
         24:a7:48:4a:5c:c9:37:33:79:fc:0c:74:3d:6c:22:d8:cb:7f:
         ab:a1:d5:d5:71:66:98:b0:70:43:d2:69:5d:0b:fd:1c:62:47:
         df:80:e7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:30 2025 by rpki-client