Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          CQ9aPH0hErEUd9SO89+JBO1jAeHdwPy3gJ/xeNUBUfs=
Subject key identifier:   2F:6A:9B:A4:BE:D6:E5:3F:C7:2F:92:A8:4D:F4:64:48:AD:6B:5D:28
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       0198D5161DF4F65FF378F74C4D1AC1BEF7EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:53 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: /OtKPN7+SklyfJgRq6H93S7lki4ustv3VaUJmDGnM8I=)
                          2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1d:f4:f6:5f:f3:78:f7:4c:4d:1a:c1:be:f7:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Aug 23 04:00:53 2025 GMT
            Not After : Aug 24 04:00:53 2025 GMT
        Subject: CN=2f6a9ba4bed6e53fc72f92a84df46448ad6b5d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:05:31:8f:aa:39:77:d1:41:74:98:3a:1e:
                    ae:72:e2:0b:f8:1b:25:ba:ab:c4:1e:77:7c:d6:e0:
                    b3:93:f3:78:0f:36:6b:a9:3b:ee:59:52:9b:07:6a:
                    73:74:b1:2c:64:3f:fd:fe:43:55:36:91:70:75:f9:
                    9e:e2:fe:0c:eb:e0:3f:0d:7f:d3:53:ea:84:e6:db:
                    ee:45:22:7f:fd:4a:c7:4d:95:b8:28:5c:28:cc:6d:
                    e3:1f:31:d0:93:f0:b4:ee:70:a6:ad:79:6e:bf:c0:
                    0c:9b:ea:23:46:66:cf:50:a0:36:ff:a1:4f:52:e4:
                    d2:1f:dc:54:98:d0:27:91:39:20:32:e1:b4:8f:e1:
                    89:24:42:be:c7:07:17:fe:e7:e7:13:56:6e:6a:e3:
                    f7:e7:47:ae:f8:f6:44:0c:da:4a:4e:7a:6e:79:41:
                    09:a0:07:77:f7:d3:80:81:22:f4:cc:71:51:77:55:
                    ea:37:3f:4b:1d:b6:b8:b2:9a:2c:d0:a8:07:4d:30:
                    09:81:6a:55:a4:9d:08:78:91:4a:a7:b5:e2:df:d4:
                    0e:8a:67:1e:f4:2f:c6:d8:f1:f5:0a:76:c8:a8:88:
                    0f:ee:96:91:1c:57:79:55:d3:29:3d:03:47:6f:5f:
                    11:bc:fa:5a:fb:fb:0b:b8:3b:60:8b:f9:ca:b6:0a:
                    31:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6A:9B:A4:BE:D6:E5:3F:C7:2F:92:A8:4D:F4:64:48:AD:6B:5D:28
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:b8:0c:4d:d6:a4:1a:11:85:3d:85:e6:45:6c:4b:c6:25:
         9b:40:b5:37:db:5e:40:0c:fc:8b:f2:fb:14:a1:1c:97:73:c0:
         9c:53:42:ef:5f:da:b4:e7:88:63:9f:b0:9c:c1:14:8d:22:fc:
         60:fc:6d:80:a0:81:b2:df:28:7a:9e:6c:76:55:5f:66:ff:42:
         b2:e4:00:91:38:67:0f:a8:54:dd:12:55:90:57:76:38:34:ef:
         40:fd:33:2c:7b:6a:ed:5d:47:e1:a4:66:70:2b:3a:76:bc:d6:
         80:4f:42:37:c9:4f:e0:1a:ec:0c:9d:42:4c:d6:b9:ff:a6:10:
         03:30:46:3a:0d:dc:5e:49:62:9b:8a:b6:e6:e6:c2:57:b8:61:
         49:bd:a2:4f:26:87:5e:0c:41:d0:a2:c1:b8:a3:7f:d4:a8:10:
         80:09:64:1f:1f:0b:b3:d3:6a:0e:8d:1d:3b:8d:01:6b:f0:f1:
         32:66:7b:b7:7f:64:64:a2:70:20:b2:80:11:45:38:52:c7:1e:
         87:1f:3d:07:89:c9:74:39:a8:5d:35:08:d8:bd:46:7c:4c:10:
         fb:94:5f:30:5a:c0:09:2c:aa:21:fa:af:b0:19:da:9a:d5:33:
         93:25:b5:fe:45:c7:4b:82:1b:71:1c:e4:f6:ad:cc:db:20:41:
         da:98:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:12 2025 by rpki-client