Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
File:                     eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json)
Hash identifier:          kOWljjw9GEE8wz5pZy7Bp2DWVBEAi15n8j7kNsLkwio=
Subject key identifier:   AE:D9:E8:F7:08:42:63:94:84:16:D9:DC:F1:88:75:17:EA:76:17:CF
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Certificate issuer:       /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial:       0198D4731E20EC77FFA80E66FBD87533C33C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 01:02:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:50 +0000
Files and hashes:         1: bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa (hash: 3xaBBKosMJSpzXSuRQMz4T/JTkCvN7b+xo0iaMV0UsA=)
                          2: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: xqoVZ3U/3w+UjLrbqUENw7byIVKLUMVHYmpqmd7KyEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:1e:20:ec:77:ff:a8:0e:66:fb:d8:75:33:c3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
        Validity
            Not Before: Aug 23 01:02:50 2025 GMT
            Not After : Aug 24 01:02:50 2025 GMT
        Subject: CN=aed9e8f7084263948416d9dcf1887517ea7617cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:61:95:92:da:4e:26:2b:6a:85:50:6c:65:
                    51:87:3a:1f:06:fd:c1:30:cb:35:c0:c3:59:ee:4f:
                    b3:d5:7b:f4:8b:b2:46:98:a0:97:67:0a:79:93:75:
                    c2:d8:44:ff:dc:91:b7:bf:1d:9e:b5:a2:fc:17:92:
                    1d:93:f4:b1:a8:a0:d5:ef:d7:b4:55:0e:cb:58:be:
                    32:ff:3a:8d:59:c1:84:0a:03:b4:84:8a:3e:d0:f6:
                    80:16:9f:ec:7b:cd:11:d8:d9:d4:9c:c9:22:c3:2c:
                    29:0a:c3:88:d5:bc:83:90:ad:d9:7d:aa:de:9c:b7:
                    b9:00:38:0f:72:34:99:f1:2a:06:9b:03:03:a3:83:
                    8a:a8:25:f9:6b:0e:17:7d:e1:c4:28:09:2c:4d:96:
                    97:11:2d:8e:08:ec:4e:b7:14:db:59:f8:43:ec:d6:
                    3a:35:aa:73:f8:31:bb:87:b1:0c:8e:21:e2:53:9f:
                    ce:c4:97:63:21:fe:a3:90:97:71:3d:e7:76:05:68:
                    2b:b2:15:85:26:94:2c:a3:4d:dd:5d:7a:a2:2c:df:
                    e8:1a:58:b6:52:2c:51:9b:15:a0:27:84:93:31:5a:
                    3a:4c:df:e6:aa:63:89:1e:2b:ad:5e:cb:17:00:06:
                    b6:b1:69:e4:b4:a4:95:77:ff:36:ef:2a:08:5b:64:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D9:E8:F7:08:42:63:94:84:16:D9:DC:F1:88:75:17:EA:76:17:CF
            X509v3 Authority Key Identifier:
                keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:32:35:c3:40:97:03:24:78:85:49:f1:92:09:54:ef:ff:
         b5:f6:1e:d1:34:db:c4:9c:b5:1c:1b:8b:65:d8:f0:83:08:74:
         9e:0a:cc:a3:35:3a:b3:0d:51:d8:6b:84:29:95:dc:c4:b8:3f:
         46:7b:79:f1:d3:60:6b:76:4a:32:b7:8b:0c:97:7b:ab:a9:35:
         09:60:03:cc:7a:9e:75:a2:27:db:75:3a:ec:1f:48:4b:ae:96:
         e1:f5:6c:cd:ca:2c:d8:47:c0:8a:60:21:48:a4:70:88:17:c8:
         8a:f3:60:a1:6e:c7:8d:c0:78:08:b4:53:f8:1d:d8:43:df:e2:
         0c:91:3e:9c:78:4e:1c:ed:72:90:50:7b:25:a9:66:04:53:61:
         8d:47:ba:f1:02:d5:f7:97:52:9f:57:50:f9:40:6a:a6:e8:ca:
         d0:ec:57:f5:be:af:e4:26:13:f8:b1:26:8e:d0:00:e4:ee:cc:
         63:6b:9d:8a:7d:3f:ef:6a:a7:d5:a2:6d:5f:6b:d2:1a:44:a0:
         4f:a4:cf:9f:b8:81:1c:3a:b2:ed:19:dc:5e:a7:07:36:07:f2:
         66:bb:f4:c2:23:cb:fc:e6:13:a5:0d:6f:21:9a:fa:91:d3:12:
         ca:31:c8:78:21:13:fb:ab:fe:1e:e7:d3:ba:82:2c:55:92:2c:
         6b:e1:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:17 2025 by rpki-client