Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          LWoV6513aYrgpSDrGRcPLs/26md/NKpFZqOdM3+EOhw=
Subject key identifier:   08:44:AB:D8:FC:95:FC:11:BC:C4:1E:C8:D2:F3:3A:DA:21:5F:3A:BE
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       0198D5F153F81DBBFEEBF7D6828832ADAAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          1667
Signing time:             Sat 23 Aug 2025 08:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:19 +0000
Files and hashes:         1: A-CITLCzJtdw39wtm0dLTltUEFM.roa (hash: c5iWUzoFE3kjILTe2m5OWQi3zSByNEE2KpMzxgoNxeI=)
                          2: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: AfG7X3KwdCyXf4REhbulHA73treezGNORdkOtjDH3tQ=)
                          3: VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa (hash: qUqfQH6HkkXqxIuCFL1oijtckoAAoRaIonlYxeFElKw=)
                          4: f-Juu6-6GY6L6jxX6W7h7A1eHrk.roa (hash: ZfWB0QSC1JhyWEDFyE7CZ6ZmAqPQnN6XecILZVAnstM=)
                          5: kh5T0eGIG6pki0AMnhy0w9eCTLQ.roa (hash: SgO20AkeVjqIkes5Gz4s0ZXBoQPcPhpf8s/VjNKSJAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:53:f8:1d:bb:fe:eb:f7:d6:82:88:32:ad:aa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Aug 23 08:00:19 2025 GMT
            Not After : Aug 24 08:00:19 2025 GMT
        Subject: CN=0844abd8fc95fc11bcc41ec8d2f33ada215f3abe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:0e:1a:1a:35:40:55:8f:9d:44:e6:f3:e2:
                    3d:a8:3b:d5:55:39:47:e3:e7:1e:8d:f4:3a:08:c7:
                    4d:2b:d1:31:d7:c9:15:6e:cd:1a:2a:13:52:c1:6c:
                    d2:67:d4:a6:85:45:c3:85:7e:32:05:c4:31:d2:d2:
                    d0:3a:39:d2:87:d7:8c:bb:36:a1:29:bf:e7:f0:2f:
                    ed:f2:56:53:a4:18:ad:fa:3e:34:57:4b:52:78:ca:
                    36:4b:4c:14:b1:e3:36:1c:6a:b8:a2:18:45:c5:fa:
                    21:a2:83:11:22:1c:c2:0d:01:a7:90:64:e3:d6:5d:
                    04:f1:59:10:68:f7:3c:da:22:13:6c:e8:05:65:e1:
                    05:ed:48:72:eb:a2:d3:11:d7:8e:ee:36:1e:7e:a2:
                    25:0f:51:50:39:02:7e:02:c5:e3:88:9e:51:b0:36:
                    e5:8c:cf:ab:ee:32:4a:e8:6d:f6:b7:1a:82:12:91:
                    c2:7e:5d:69:14:6e:66:c0:36:a9:4b:e7:2a:65:97:
                    77:b7:d1:f8:72:df:0c:e1:17:71:03:7f:64:2b:92:
                    c7:66:df:56:a9:03:89:4d:a9:97:4c:7e:19:2f:c8:
                    2c:83:8d:f1:3e:e2:a6:17:d1:bd:6c:cc:dd:39:ac:
                    e7:08:17:36:be:09:b8:2a:bd:e3:1b:15:4b:c5:a4:
                    ac:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:AB:D8:FC:95:FC:11:BC:C4:1E:C8:D2:F3:3A:DA:21:5F:3A:BE
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cc:1a:eb:9d:93:3c:d3:c0:e7:cf:9b:1a:10:a3:88:97:b7:
         cd:1a:79:55:0f:13:cb:bd:3e:66:c7:5a:2e:c8:8f:f8:05:bd:
         1c:9d:2a:fb:5f:be:74:46:0c:7a:c1:8a:33:6b:e1:a0:a9:09:
         37:d5:02:25:b0:eb:de:84:94:1e:b9:b1:6e:27:19:0e:2c:05:
         76:5d:15:d5:05:75:f1:1f:a3:c7:f0:ff:af:62:cf:06:0d:89:
         89:d9:77:62:6c:9a:24:f2:70:e9:58:a7:69:ae:88:cc:e1:39:
         19:47:cf:79:ac:d7:74:12:0a:d4:4a:48:85:ff:84:63:56:96:
         a0:9f:8d:cd:64:a5:c3:13:80:c1:4d:35:82:48:db:48:62:70:
         45:ea:3d:80:91:3f:ca:72:c9:29:31:c3:44:39:38:47:bb:9c:
         8b:9f:57:f3:1f:17:e4:fb:a8:a6:1b:7e:ef:cf:f5:72:3f:3f:
         a1:bb:b2:69:40:c0:d1:b1:8a:82:3e:b5:f0:a8:2e:dc:af:8e:
         04:d9:c9:18:33:5e:be:6b:54:70:00:f6:ce:c1:31:62:cb:de:
         b0:05:a6:cd:be:47:6b:a5:33:61:95:c9:50:47:3b:ec:97:4d:
         5e:c6:be:d8:a8:5c:c9:f3:bb:c1:1c:64:3d:20:e1:0a:8c:a1:
         62:f2:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:28 2025 by rpki-client