Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
File:                     eJaox-m6CdLx1EhjZwviE_wMohA.mft (raw, json)
Hash identifier:          Ua2buOVG2WAGphkrW7l2sh6SQefbnCQ5W5NpNlVCI5U=
Subject key identifier:   A8:39:9E:56:7D:A3:31:84:0E:B3:1C:2D:45:A5:F8:0C:EF:34:DC:55
Authority key identifier: 78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
Certificate issuer:       /CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
Certificate serial:       01989DF0DA4830EDA0F6E7B54A6A5326E44D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
Manifest number:          01D5
Signing time:             Tue 12 Aug 2025 11:01:04 +0000
Manifest this update:     Tue 12 Aug 2025 11:01:04 +0000
Manifest next update:     Wed 13 Aug 2025 11:01:04 +0000
Files and hashes:         1: eJaox-m6CdLx1EhjZwviE_wMohA.crl (hash: a2/XyI6ovxgdU7qsNQUAuL2aN7iSY612T/WAV/aWSgI=)
                          2: wduzAoCV3X_HT3SwkAkhVbUpjvk.roa (hash: xcQexB5syiRJfDRPxaM63gktKvSVatGww4DJIDGRPJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9d:f0:da:48:30:ed:a0:f6:e7:b5:4a:6a:53:26:e4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
        Validity
            Not Before: Aug 12 11:01:04 2025 GMT
            Not After : Aug 13 11:01:04 2025 GMT
        Subject: CN=a8399e567da331840eb31c2d45a5f80cef34dc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:10:7b:dc:ef:bd:39:2a:8c:f7:28:9d:c8:96:
                    b7:bd:d8:98:f9:a8:e1:f8:c8:a0:fa:c7:eb:5b:fe:
                    c2:1b:1a:89:99:f6:d9:4a:f9:cb:54:4c:44:2c:40:
                    b3:e8:26:35:0f:34:7b:16:09:91:51:7b:e0:b0:d6:
                    4f:07:b0:ae:d7:65:b1:f8:c6:49:6f:b2:f6:80:ae:
                    0c:0c:40:d6:09:27:1a:3a:3d:ab:51:21:15:fd:10:
                    86:da:04:d4:a0:fe:ae:1d:6a:84:f6:87:c4:aa:41:
                    37:df:2d:8f:cc:76:98:0f:32:e0:c3:d4:2b:e6:3f:
                    e9:fb:71:8e:0c:94:63:49:24:05:cf:fc:59:7e:f4:
                    a8:62:9e:5c:d3:fa:01:64:76:50:a7:c1:c6:fe:ba:
                    81:63:98:ee:5e:5e:65:30:01:64:b2:22:f2:49:7f:
                    74:f0:e7:a2:e9:6d:af:61:80:87:e0:1e:80:1e:2a:
                    ad:d1:96:a8:aa:6d:22:c1:23:4a:eb:80:6f:12:a7:
                    70:6e:15:92:49:22:94:02:0b:6d:4b:f1:85:2b:7c:
                    55:2f:0c:3a:f6:01:0c:e1:3c:ff:33:c1:e8:b6:74:
                    d4:0c:9a:c8:e8:26:fc:33:45:97:ce:2b:55:41:b5:
                    18:27:9b:97:fc:23:80:7f:35:4b:63:8c:d7:e7:3f:
                    a0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:9E:56:7D:A3:31:84:0E:B3:1C:2D:45:A5:F8:0C:EF:34:DC:55
            X509v3 Authority Key Identifier:
                keyid:78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:12:c3:89:c9:e5:dc:0e:8e:a5:17:3b:92:d0:2b:de:21:
         3b:a1:44:ef:d1:fc:3d:69:53:99:af:05:74:e7:23:15:7e:b5:
         62:e7:f5:b5:c6:df:6e:c9:c0:fb:76:b5:4a:e2:dd:59:61:ac:
         fc:e4:c8:dd:a5:f2:de:ce:d8:94:45:56:a3:36:86:3d:0f:60:
         d4:67:b6:ba:20:f5:72:7a:28:4b:04:31:41:f2:b5:0c:79:c9:
         99:22:45:18:d1:da:04:8a:de:a5:ce:aa:f8:b5:f0:a3:0b:d3:
         60:cb:af:fb:81:48:e9:da:ee:2c:c2:20:8f:d5:95:e4:a2:e9:
         bc:70:34:2b:fb:ee:13:b6:46:c2:ac:51:35:c6:83:68:a4:57:
         4e:88:88:f1:e0:87:98:15:0b:0a:73:73:ca:f0:5e:9d:1d:04:
         80:52:ec:58:3d:cf:5e:62:37:70:1c:ab:5e:e5:b1:31:a0:ef:
         c2:a9:98:2d:d7:ed:15:6e:e7:ab:54:71:7f:18:13:04:71:a0:
         e2:5d:68:84:d6:16:ee:7b:53:40:f6:ed:11:b1:90:db:a1:7c:
         b1:56:78:7c:76:0b:29:6e:64:56:5f:1e:b1:14:ef:20:0b:3a:
         37:8a:7e:fa:32:19:1e:72:43:4c:f1:b4:44:f1:89:95:e0:26:
         6e:6c:51:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZid8NpIMO2g9ue1SmpTJuRNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTZhOGM3ZTliYTA5ZDJmMWQ0NDg2MzY3MGJlMjEzZmMw
Y2EyMTAwHhcNMjUwODEyMTEwMTA0WhcNMjUwODEzMTEwMTA0WjAzMTEwLwYDVQQD
EyhhODM5OWU1NjdkYTMzMTg0MGViMzFjMmQ0NWE1ZjgwY2VmMzRkYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RB73O+9OSqM9yidyJa3vdiY+ajh
+Mig+sfrW/7CGxqJmfbZSvnLVExELECz6CY1DzR7FgmRUXvgsNZPB7Cu12Wx+MZJ
b7L2gK4MDEDWCScaOj2rUSEV/RCG2gTUoP6uHWqE9ofEqkE33y2PzHaYDzLgw9Qr
5j/p+3GODJRjSSQFz/xZfvSoYp5c0/oBZHZQp8HG/rqBY5juXl5lMAFksiLySX90
8Oei6W2vYYCH4B6AHiqt0Zaoqm0iwSNK64BvEqdwbhWSSSKUAgttS/GFK3xVLww6
9gEM4Tz/M8HotnTUDJrI6Cb8M0WXzitVQbUYJ5uX/COAfzVLY4zX5z+gLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg5nlZ9ozGEDrMcLUWl+AzvNNxVMB8GA1UdIwQY
MBaAFHiWqMfpugnS8dRIY2cL4hP8DKIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wOTBkNDItYjVmNy00Y2ZlLWJkNmMt
NjE3OGRiZmZmNTU1LzEvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8wOTBkNDItYjVmNy00Y2ZlLWJkNmMtNjE3OGRiZmZmNTU1
LzEvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoooSw4nJ
5dwOjqUXO5LQK94hO6FE79H8PWlTma8FdOcjFX61Yuf1tcbfbsnA+3a1SuLdWWGs
/OTI3aXy3s7YlEVWozaGPQ9g1Ge2uiD1cnooSwQxQfK1DHnJmSJFGNHaBIrepc6q
+LXwowvTYMuv+4FI6druLMIgj9WV5KLpvHA0K/vuE7ZGwqxRNcaDaKRXToiI8eCH
mBULCnNzyvBenR0EgFLsWD3PXmI3cByrXuWxMaDvwqmYLdftFW7nq1RxfxgTBHGg
4l1ohNYW7ntTQPbtEbGQ26F8sVZ4fHYLKW5kVl8esRTvIAs6N4p++jIZHnJDTPG0
RPGJleAmbmxRfQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:29 2025 by rpki-client