Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
File:                     eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json)
Hash identifier:          rCZvKgfk/pQ9T1KJ7n/Kei05K4MDg3Ah5kRES9DFqKY=
Subject key identifier:   55:34:15:6E:0C:51:7E:74:15:AE:A1:55:AC:7D:3C:DB:CE:E4:CA:93
Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9
Certificate issuer:       /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
Certificate serial:       0198D73BBC56330433486D1048ACBD391004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
Manifest number:          0C26
Signing time:             Sat 23 Aug 2025 14:01:12 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:12 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:12 +0000
Files and hashes:         1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=)
                          2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: I6XkwKriP/IAOdoVWsAtSi43WGJKgcYnkRdxlg+vG+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:bc:56:33:04:33:48:6d:10:48:ac:bd:39:10:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9
        Validity
            Not Before: Aug 23 14:01:12 2025 GMT
            Not After : Aug 24 14:01:12 2025 GMT
        Subject: CN=5534156e0c517e7415aea155ac7d3cdbcee4ca93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:00:fb:a4:97:db:65:66:7a:2f:75:f3:35:
                    e0:5d:f5:0b:05:3c:2e:a7:e7:dd:45:17:9e:40:6b:
                    83:34:8d:cf:8d:be:43:3f:69:da:c2:bf:97:c7:94:
                    49:07:8b:97:77:ee:04:96:b6:8c:e4:af:89:e5:7d:
                    6b:80:bd:f3:79:64:00:3e:3c:95:d2:17:60:e2:3a:
                    2b:38:42:1d:72:ab:22:33:40:6c:e4:3e:3c:92:f9:
                    da:8a:5d:ff:b3:d9:6c:ce:90:6e:ba:32:d0:bf:f0:
                    fd:3e:59:4d:30:40:4c:98:b7:60:ec:f0:0e:e7:3b:
                    83:73:2c:67:1c:3c:0b:c7:19:96:86:ed:08:3a:5f:
                    a5:5d:90:0b:a7:e6:c3:46:53:ac:0d:54:b3:5f:ae:
                    82:fa:c2:28:ff:3b:d1:52:81:83:bf:b6:e4:3f:b5:
                    d5:88:5b:05:4c:97:8d:49:cc:aa:59:d2:7c:c9:89:
                    75:cf:c1:fd:fa:cf:fe:a9:1d:6e:42:d0:a0:6a:3b:
                    09:b0:ee:59:33:a4:61:ae:71:3c:7d:0a:ac:df:ff:
                    76:43:8b:f2:d4:60:69:c6:db:89:d3:5b:65:3c:64:
                    82:4b:47:7a:96:d2:7e:4f:b5:f9:f9:2b:ee:15:e7:
                    b1:b2:24:8f:2d:02:a6:11:fd:1d:d5:fb:33:df:9b:
                    27:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:34:15:6E:0C:51:7E:74:15:AE:A1:55:AC:7D:3C:DB:CE:E4:CA:93
            X509v3 Authority Key Identifier:
                keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:11:8d:1c:65:e6:83:31:7f:02:b9:5a:16:42:f2:e6:ac:d7:
         f7:e9:03:c7:c9:8a:f7:a8:4d:19:b7:2d:63:c2:36:5a:2c:d5:
         d6:f7:45:1e:b6:6b:00:20:46:34:66:3f:48:b0:ed:39:fb:77:
         30:f8:58:08:1c:27:0b:9d:bd:54:b8:3a:c2:78:70:10:45:d6:
         9a:2d:39:be:89:a5:23:45:1c:8c:a9:5e:bd:3c:80:84:32:fb:
         b8:6b:3c:26:1e:9b:ce:8d:1a:d1:45:63:11:0f:6e:65:b2:e5:
         85:53:09:bf:19:0f:2c:56:ee:db:39:00:96:e2:df:2a:11:fa:
         c5:2f:e5:d7:74:82:af:55:20:71:4f:03:45:43:3d:75:79:f0:
         2a:ab:c2:a5:ed:45:7a:9f:68:06:aa:7b:87:f8:75:46:72:ef:
         d6:c3:63:5a:39:c8:2c:fe:96:ba:50:9f:86:4a:a0:24:4e:c2:
         a4:9e:e3:93:79:17:4b:4a:6f:d0:39:f5:a2:ff:5c:50:d9:0a:
         65:4e:8b:39:2e:56:ac:6c:55:98:db:c9:a2:3e:ea:74:8c:da:
         f9:7f:66:8a:31:8a:3a:20:ed:2b:39:15:b3:62:9e:78:b8:23:
         24:34:03:b0:25:69:41:30:e3:49:0a:7f:65:ec:08:9b:8e:46:
         28:fb:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:36:07 2025 by rpki-client