Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          alz+5mJfAegURw51oeS2MuHflcAgzZhauwQtFbXaCCY=
Subject key identifier:   A8:9F:6F:7E:85:A2:5E:B9:B8:97:03:D8:35:73:47:7E:B6:AC:28:6A
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019874194C40A3FF2050DA9E48352239F919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0564
Signing time:             Mon 04 Aug 2025 08:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:11 +0000
Files and hashes:         1: 2EE5sI-lHxPW-m95GPnlbkqBGKw.roa (hash: rZX0WbnFMbiHv4Iw7Uo3xd9gD2qfAlVmi5TezkAjKms=)
                          2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: nimL9lB0VbfPsj0K4MO5epZnyPlVkBap5AY8wtO0r2c=)
                          3: KrFC8vftolRYYVGlWxQEDucfneg.roa (hash: WbXRjMLjuUXZYVIN7TrN7bIgxSN4E7sTfe9bhtA4Hjw=)
                          4: UohPfLpYQFWq1aE3FZr-DrIx55E.roa (hash: KnJXUEOwlaB/y/AXpGglu/TyZvgBRRpzdQU4qGeto24=)
                          5: iCDvku3m5w_U1YbhR5731sLz3Jk.roa (hash: HSMFpcX3vFuZLy6ku/T5MzZVValf2apsDIQyRtjYsiM=)
                          6: jQsi8_J6MipHdOC1QKp1lfX5Chs.roa (hash: uddD5zpzhQFsrCHhylF2R9AbBmGVjfPgJdzZ7Ufh37A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:4c:40:a3:ff:20:50:da:9e:48:35:22:39:f9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Aug  4 08:01:11 2025 GMT
            Not After : Aug  5 08:01:11 2025 GMT
        Subject: CN=a89f6f7e85a25eb9b89703d83573477eb6ac286a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:8d:b0:84:02:0f:c7:52:0d:d4:61:51:b0:
                    3a:04:a1:83:bd:91:0a:13:18:93:09:49:04:ef:3a:
                    df:8e:b5:f1:25:75:1e:c8:5c:10:ff:55:63:63:16:
                    f8:67:b5:65:c3:33:b6:f8:cc:36:8d:eb:5c:b8:06:
                    68:5e:9b:4c:af:9c:7d:6d:29:44:e2:69:f6:99:ee:
                    d7:13:ac:d6:d4:06:98:88:15:40:de:5f:7a:5a:40:
                    4e:ee:ef:7f:e0:b8:d5:16:3f:f5:e1:e0:2f:02:5c:
                    6e:9c:e7:6f:0b:fa:05:5b:db:0d:9e:3d:a6:de:40:
                    6f:20:e4:a4:4d:8a:bc:20:70:a1:a8:c8:5c:62:73:
                    57:eb:85:e0:b9:65:64:5b:0c:d9:e0:11:30:59:fd:
                    8b:47:90:a5:33:d7:e6:ef:43:96:47:f5:ac:f7:e8:
                    f4:54:e0:27:de:ae:51:fd:34:87:b0:83:bf:01:8b:
                    3a:bb:b2:c9:2e:af:7a:d1:79:6e:be:e2:e3:e9:8c:
                    5b:51:49:b3:74:ad:e4:09:64:5b:6d:80:7e:55:c7:
                    2c:f2:92:bd:73:43:c6:ef:ee:df:f1:f6:ec:f3:a6:
                    a6:71:a8:de:8f:24:17:40:c7:57:49:e8:81:de:05:
                    99:b9:d4:de:af:de:cc:1d:05:36:bc:70:9a:66:34:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9F:6F:7E:85:A2:5E:B9:B8:97:03:D8:35:73:47:7E:B6:AC:28:6A
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4b:a5:ce:f4:6f:aa:bd:78:fa:3a:a9:e9:91:69:7b:48:ec:
         7e:34:66:db:a1:83:34:c6:30:34:f3:60:fe:7f:af:a7:d0:59:
         ba:c6:31:29:11:fa:a7:fe:94:7c:8a:38:f6:01:91:92:7a:71:
         0f:6d:1d:f1:dc:8b:d0:66:2c:8b:99:f9:67:2b:bd:c5:7d:d6:
         b7:79:68:11:53:db:ac:23:2e:76:3a:84:91:c3:96:23:d1:f1:
         ad:dd:f8:cb:1b:bf:94:20:04:34:c9:ee:d1:28:2c:1f:d6:31:
         ec:db:3b:11:67:3a:42:c4:fc:45:62:6c:86:52:8c:58:d6:9f:
         81:57:7b:a6:48:b9:81:bd:3f:f3:bb:d0:c1:3a:5e:7c:4a:d2:
         8d:49:3a:da:42:27:d9:f9:93:39:ef:12:79:08:70:06:55:07:
         16:50:41:17:13:93:5e:0e:3a:79:01:e9:f1:dd:44:bf:c4:9c:
         5d:ac:f5:ba:e6:a8:2b:6a:f7:d4:21:ac:4f:06:11:f5:27:ff:
         c0:81:7f:fd:5b:bf:d8:ba:32:01:82:2b:31:43:51:86:eb:df:
         d5:1a:e9:bb:f3:59:d9:87:1c:18:42:b8:b7:a7:22:25:45:3e:
         a2:c4:e6:4e:38:e5:3e:f2:b2:55:e5:7f:c0:04:ea:55:16:e3:
         4a:25:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:01:02 2025 by rpki-client