Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
File:                     eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json)
Hash identifier:          CpHkEVfZVsjgH9OkXnJ35QD2udlNWyes/EcuwWuId6Y=
Subject key identifier:   72:39:73:A9:6B:FD:5D:54:31:B0:46:03:DC:CF:B0:0A:EA:AC:BD:CA
Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55
Certificate issuer:       /CN=78e7ba8c08853be554c594ded156a6983eba1055
Certificate serial:       0198A083DC25E4EFDC221D99483093AFDC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
Manifest number:          12CB
Signing time:             Tue 12 Aug 2025 23:00:52 +0000
Manifest this update:     Tue 12 Aug 2025 23:00:52 +0000
Manifest next update:     Wed 13 Aug 2025 23:00:52 +0000
Files and hashes:         1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=)
                          2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: 9rPPBGrPTfxdUtasP1dxN/c41M8cVUL6CRtTxnyOo6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:83:dc:25:e4:ef:dc:22:1d:99:48:30:93:af:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055
        Validity
            Not Before: Aug 12 23:00:52 2025 GMT
            Not After : Aug 13 23:00:52 2025 GMT
        Subject: CN=723973a96bfd5d5431b04603dccfb00aeaacbdca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:45:f3:61:3c:13:08:b7:1f:6e:f6:21:34:
                    b3:dc:73:bf:d1:95:88:16:8d:43:9d:0c:78:a3:7c:
                    8b:e9:dd:ac:d2:df:bf:61:0b:64:0e:d8:fd:c2:79:
                    66:ac:55:9c:a3:6f:c6:2f:88:9b:09:e6:74:60:b7:
                    17:9c:0d:6f:1f:19:80:a3:60:54:2c:88:cf:fa:21:
                    71:9b:c3:0f:74:90:e7:81:f3:29:e2:95:98:4b:dc:
                    2c:25:cb:c8:98:93:37:43:3c:ee:08:37:ef:47:50:
                    6f:18:31:d2:f5:5c:30:bc:1e:8e:0f:34:af:e8:d0:
                    86:c3:97:29:36:f8:8d:66:15:28:b2:a1:a8:6f:d8:
                    bb:5a:b7:b7:6d:5a:9d:6b:e8:f3:0b:85:2b:12:e6:
                    b1:3c:b1:c1:2c:2d:85:3a:3f:cb:d1:15:8f:11:38:
                    4e:5b:9f:f7:e0:b0:43:fe:bd:12:98:9b:30:65:f3:
                    5c:c5:77:dd:4c:30:63:80:fa:42:84:22:25:8b:dc:
                    da:93:83:fa:fa:de:e9:f0:01:ed:36:6b:44:32:25:
                    16:a9:e4:9e:97:ef:bb:4a:3d:1a:68:6a:8b:61:f6:
                    1d:35:b9:8d:08:3c:4d:d5:0e:4f:87:68:75:e0:74:
                    ad:11:a3:a9:fa:e7:4a:45:39:6c:ca:5b:53:93:1d:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:39:73:A9:6B:FD:5D:54:31:B0:46:03:DC:CF:B0:0A:EA:AC:BD:CA
            X509v3 Authority Key Identifier:
                keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fa:5f:4f:42:40:ff:ec:07:85:4a:92:40:26:63:4d:e2:00:
         a0:66:b8:dc:1c:5f:d1:09:ad:6e:47:6a:ce:42:6d:b7:12:ee:
         58:b2:51:2e:20:a6:52:23:26:42:05:cd:f9:7c:33:9e:a6:c6:
         f0:21:6f:77:36:fe:92:6a:cf:cb:f1:f8:0d:dc:bd:ad:7c:b1:
         6b:f4:ed:3e:3d:b8:7f:b0:d1:f1:5f:36:d0:e3:9a:a8:2e:20:
         cb:1a:06:cb:3c:e6:7c:c4:a4:0c:10:25:b6:bf:dc:bd:63:0f:
         42:2f:3d:23:81:16:74:a2:72:d7:d4:ee:06:a2:36:b2:25:50:
         6f:5e:f3:df:d4:8f:da:d6:d4:23:4a:d4:0d:4c:47:25:93:8e:
         72:ea:73:99:cf:27:a5:87:20:59:e9:3d:5b:9e:24:27:1d:6e:
         69:aa:f7:8b:05:ae:4a:ec:c1:45:ac:a0:ee:40:63:07:e0:a5:
         3b:3d:46:d8:97:04:d8:d7:2b:b9:ab:ad:34:58:1c:36:39:73:
         61:cc:d2:38:86:44:a2:7a:6a:2d:23:9f:35:a4:10:17:30:96:
         38:9a:c2:41:6a:77:81:40:b7:45:8f:14:85:7e:cf:8f:b6:48:
         ae:d6:76:5c:fd:55:3c:06:37:45:7d:f3:ad:13:59:c4:4e:de:
         b5:fa:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:01 2025 by rpki-client