Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
File:                     eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json)
Hash identifier:          Nw7ueNAvXaOFh0wlPhTrzEAZ05felxgiRE6HmOR0onY=
Subject key identifier:   ED:08:EF:5E:63:EF:8C:3E:A9:26:34:1A:94:2B:85:B0:46:02:D8:14
Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19
Certificate issuer:       /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
Certificate serial:       01987306C459D1E2171A1C336233CEEC73CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 03:01:19 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:19 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:19 +0000
Files and hashes:         1: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: dPVPX0uNJx5DxrbD/d+2z6Sn58zG1nPuAPvFjG6u86s=)
                          2: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (hash: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:c4:59:d1:e2:17:1a:1c:33:62:33:ce:ec:73:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519
        Validity
            Not Before: Aug  4 03:01:19 2025 GMT
            Not After : Aug  5 03:01:19 2025 GMT
        Subject: CN=ed08ef5e63ef8c3ea926341a942b85b04602d814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:81:cc:04:b4:2e:89:ac:17:b9:e4:52:d2:
                    03:05:79:7f:f8:80:97:5a:c8:66:b6:ca:80:d5:d2:
                    31:ad:e7:36:26:86:95:17:25:c5:16:f3:8d:fa:99:
                    f4:66:1e:cd:30:ad:b0:8a:b6:f1:60:ee:5c:e1:ad:
                    43:7a:19:99:bb:1b:d8:9b:14:a0:cf:9c:bd:ca:00:
                    1c:e6:71:3f:c5:38:af:01:e7:3b:7b:d5:02:c6:f8:
                    04:bf:3a:48:14:b9:7d:11:83:a8:71:ce:67:72:9a:
                    22:61:8b:da:2c:a4:09:a5:17:5f:92:0f:63:6b:25:
                    5b:c1:5e:d4:42:54:27:21:a3:13:8b:f7:94:f3:43:
                    b0:00:35:7f:6a:2e:3c:4d:2e:e6:2c:44:7c:dc:a9:
                    c0:a6:f1:ab:21:fa:f5:0e:09:0b:4a:27:9b:dc:8a:
                    40:fd:fa:dc:b3:ae:91:bf:b4:93:b4:8a:9b:fc:b8:
                    47:9c:c9:a0:cf:2c:c8:da:d9:27:1b:05:67:50:63:
                    7a:13:f6:26:21:78:6e:40:f8:18:45:ef:a1:f1:9d:
                    e1:71:a0:8d:b0:13:10:b5:99:4d:f1:a6:3f:3b:87:
                    73:81:8f:42:bc:e1:5c:95:05:d1:6f:a1:ad:e4:1e:
                    40:a4:b7:34:bd:21:9c:40:00:d5:45:27:c8:fc:6d:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:EF:5E:63:EF:8C:3E:A9:26:34:1A:94:2B:85:B0:46:02:D8:14
            X509v3 Authority Key Identifier:
                keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:da:61:5c:ba:26:b6:d5:7c:19:df:e9:58:2e:c7:29:45:63:
         ba:26:37:89:c6:be:88:c1:59:e4:69:18:a0:12:8e:7f:25:cd:
         23:07:1c:c7:1c:93:6f:04:fe:22:c6:9b:49:82:a1:ae:98:bc:
         2c:58:88:fe:23:ed:28:90:9e:d7:40:2f:dc:64:56:c2:f1:f8:
         90:df:87:fc:27:91:ab:c3:7a:5a:f4:78:22:02:fa:6c:a9:c9:
         34:bd:7a:09:8d:54:0f:be:e0:97:3a:ac:84:c6:8a:34:b0:70:
         30:62:45:06:8d:16:92:29:93:bd:e9:4e:94:c0:74:94:4a:66:
         f0:30:f1:54:0b:7b:13:ae:22:1f:4a:59:f1:1b:96:5f:c0:9c:
         8e:61:4e:16:f4:3c:9b:64:f9:1a:c1:4b:b7:6e:d9:9b:0a:58:
         13:04:ce:85:87:fa:9f:f6:79:7c:d1:53:fe:47:a8:30:a0:7d:
         1e:e2:4b:f1:24:69:80:38:0a:d6:dc:f3:dd:d1:30:fb:a6:5a:
         dd:29:b6:53:45:87:44:d0:7a:f4:c3:33:c0:96:13:5a:9b:34:
         b8:ee:b3:ff:18:d0:ca:72:f9:45:db:dc:4a:e1:db:e4:b8:dc:
         50:c5:d5:63:47:d5:26:26:4b:6f:a5:b6:2e:1b:34:1e:38:d8:
         01:47:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:28 2025 by rpki-client