Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
File:                     Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft (raw, json)
Hash identifier:          wJ+WsWnWFwS6Cj96kXDXUjLhqoETgLQGCDR7g65pxYc=
Subject key identifier:   DB:46:B1:8A:1E:78:C9:12:29:E5:25:DB:C8:FB:38:B2:93:FE:D7:58
Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38
Certificate issuer:       /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
Certificate serial:       01987D8A320945FBEFA0175E16F10C101A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
Manifest number:          1621
Signing time:             Wed 06 Aug 2025 04:01:05 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:05 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:05 +0000
Files and hashes:         1: 5G5BM-esfF_6C_xQG_XyVMwxyOE.roa (hash: DTEsWku/je4v/TwdVnousshkC1Z9Nk6/Nslvyo2EP34=)
                          2: Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl (hash: Tta9xUOLiLMGTS0vk/CKOO0C/vuDWMYTnpoZUIsJ5PU=)
                          3: TETu_fLUe48vZB1pOjmaY0SlQQA.roa (hash: gDCE6MhOeAd0nfmLm0m4CAZB11EUzJkcQQpOLfihn0E=)
                          4: VngaLO49HwnzixCSQrMS5QePJOo.roa (hash: SORIRInRNS+ArP5XpLLGilyF1yJehSCjMcuXLbTFsfc=)
                          5: YSDMeB2OTSIw6d7x_-ya3YNBb4I.roa (hash: 5DEymavmL/Oqd88L6GTzb0QEXTGCoR8MdiyKdDZSrJI=)
                          6: drdL02MmNzHMMHIF4yacPWU2kg0.roa (hash: KhAY+4DUpLSPm7dfV38gtwL9yM7jnqqyzPFAlnLXewY=)
                          7: fTBhrrSBbBFDDDSeRz_t6BtiuYI.roa (hash: jsgnIPPUhjpCdO1fNL/ROC4wGawaLCPOPIUu0X3J2DY=)
                          8: qS-QZXFJVFLsxStfDN8QKYsFoWA.roa (hash: ub+puMkCknG+9jJcf4x1TFPFmm3wndXxu70WFu0aS+k=)
                          9: tCyUX7lLcCHL4Eg9b-YCZ8hKq84.roa (hash: ZHN59gKlvLQCayzjjY8TreGgGDaR4N6wRPXQfVrVtuk=)
                          10: vBseKRkIdbzZO1ddn-ofvdi2GJA.roa (hash: ND3FeKVlWj+XXYRRpKXvYZfwYIWF0c8k6ow+131ixZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:32:09:45:fb:ef:a0:17:5e:16:f1:0c:10:1a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238
        Validity
            Not Before: Aug  6 04:01:05 2025 GMT
            Not After : Aug  7 04:01:05 2025 GMT
        Subject: CN=db46b18a1e78c91229e525dbc8fb38b293fed758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:f5:4e:91:1f:a1:4c:1c:16:f8:5b:15:59:
                    52:b0:32:3a:48:66:90:08:c6:1e:73:21:1c:99:a8:
                    bd:ab:ea:31:a3:17:42:c4:85:12:92:ee:50:07:45:
                    a6:14:b0:ee:84:f4:0f:9c:62:1c:dc:96:1b:4f:0d:
                    b7:b2:b4:1a:27:58:18:82:cb:e1:e9:3f:23:b4:c5:
                    a0:93:2f:27:06:f0:c6:3b:2c:6c:56:2a:55:ce:40:
                    f6:21:6e:a8:41:05:54:e5:96:60:09:79:84:73:be:
                    9f:b2:cc:e6:3f:bc:0f:73:4f:3b:1b:c5:8f:43:3d:
                    18:bd:03:e1:fb:3f:80:5c:5a:38:9a:40:72:90:b2:
                    81:f0:ec:19:52:f3:22:10:9c:a4:82:5f:16:09:e9:
                    f2:ae:d3:a1:1e:46:63:3d:29:a4:28:4b:f2:8a:b6:
                    1f:cb:35:88:ec:9c:02:77:0a:26:02:5c:d0:7c:33:
                    07:81:31:5e:84:90:1a:a4:bf:f4:da:30:dc:1c:68:
                    08:d2:91:95:1d:b7:eb:f0:9b:27:3c:72:e0:dd:fa:
                    72:d8:ba:f2:47:68:d0:1d:f8:53:19:a0:80:a3:77:
                    51:c4:cf:0a:60:92:7c:44:d4:24:b3:e8:59:25:36:
                    b2:8a:d5:99:49:16:17:54:96:f6:cf:61:38:5f:07:
                    bd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:46:B1:8A:1E:78:C9:12:29:E5:25:DB:C8:FB:38:B2:93:FE:D7:58
            X509v3 Authority Key Identifier:
                keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:32:c8:1d:9a:67:72:01:5f:50:4a:30:0c:c2:12:86:41:19:
         fe:6d:a3:7f:c9:bd:16:ac:b4:ec:e1:08:70:e8:08:45:2b:d8:
         0f:b5:29:b3:ce:34:2a:cd:f3:db:7b:4d:98:57:f9:5c:f3:f8:
         0f:b0:81:91:69:70:de:99:c3:32:49:f6:3e:67:6d:86:1f:46:
         30:c7:2d:25:2b:54:d1:5e:1e:78:7b:94:48:78:32:30:4f:29:
         2f:dc:c3:12:dd:d6:ba:26:ba:f7:72:1f:d5:7f:3a:30:bf:35:
         32:3f:22:d8:e7:ae:d6:f4:b7:f8:30:3e:7e:1c:a4:4a:17:50:
         5d:9b:34:e4:af:b7:2b:4b:c5:f7:5a:4e:3d:fd:95:7f:29:84:
         db:5b:0f:0e:0e:17:ee:74:e1:bd:fa:6f:1e:17:87:45:f6:38:
         03:91:0a:fe:8b:f9:f3:95:6e:24:9d:79:e3:78:b9:bd:d4:09:
         0b:65:fc:39:4b:17:5b:bb:f5:d4:43:e4:7b:0f:d7:fc:23:a5:
         4b:90:df:b3:ba:4a:b8:d4:eb:f3:a8:6a:3c:da:38:04:d9:18:
         58:aa:2f:af:da:9b:3b:3a:d1:be:ac:46:dc:ed:32:29:6c:12:
         d6:40:14:37:39:20:73:1b:b6:6d:c9:4a:2c:bc:fe:90:64:7a:
         e7:fc:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:14:08 2025 by rpki-client