Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
File:                     EBIhZFi9dgX_lVQP0gTrk6R385M.mft (raw, json)
Hash identifier:          qXfXa+8vQ18F1Gq0cFuRRrzeN8hVRMM8bZF1tH5jP6Y=
Subject key identifier:   31:0F:01:A8:D1:11:22:89:E7:84:9F:53:EF:CF:71:CD:1E:57:B2:45
Authority key identifier: 10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93
Certificate issuer:       /CN=1012216458bd7605ff95540fd204eb93a477f393
Certificate serial:       019880F8FF649DF4E37A6A273C5DC0B4609F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
Manifest number:          0BD3
Signing time:             Wed 06 Aug 2025 20:00:58 +0000
Manifest this update:     Wed 06 Aug 2025 20:00:58 +0000
Manifest next update:     Thu 07 Aug 2025 20:00:58 +0000
Files and hashes:         1: EBIhZFi9dgX_lVQP0gTrk6R385M.crl (hash: BR+hUod1/dTIBZa0RXFF8sN6PTSDK+Xmyg0a1i6euTc=)
                          2: hMWp2eYYKaaUSIum5EmKLwWKUa4.roa (hash: 8+yLsr+nQz8cs8V3LX83Tse1Iso+npvbmYLm0xnhp94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:f8:ff:64:9d:f4:e3:7a:6a:27:3c:5d:c0:b4:60:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1012216458bd7605ff95540fd204eb93a477f393
        Validity
            Not Before: Aug  6 20:00:58 2025 GMT
            Not After : Aug  7 20:00:58 2025 GMT
        Subject: CN=310f01a8d1112289e7849f53efcf71cd1e57b245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f6:25:ff:33:bf:44:43:d9:09:f1:02:05:4a:
                    3f:63:78:9b:b0:fe:b2:b0:e1:60:3f:3b:12:2c:7b:
                    6e:9a:42:47:3c:39:5a:74:c9:3e:76:98:5b:9f:e5:
                    a1:5e:80:e6:f5:1b:35:98:37:7b:41:0c:d8:7f:20:
                    0a:01:ed:3b:c0:7e:92:a0:ce:00:dd:9e:3a:63:b4:
                    ca:56:01:4a:21:26:db:3e:0e:68:87:42:d4:b3:d8:
                    3c:a8:3a:84:ed:b9:48:86:a3:14:8a:6d:26:3a:0d:
                    f7:c4:b1:40:a5:57:ff:06:ca:7a:7f:94:52:0c:d8:
                    22:d6:2b:ff:64:47:63:11:2d:c2:6c:3d:1d:16:40:
                    73:cd:79:09:02:a8:68:5a:2f:b0:c0:f8:c4:5b:31:
                    a4:af:6e:c7:43:c0:b4:4a:ab:9c:fa:c5:8e:9c:61:
                    65:64:a0:47:1b:34:08:32:8f:10:f3:2f:9a:c4:10:
                    3b:74:b4:60:8a:18:a9:12:c9:53:0c:52:46:4f:2f:
                    5f:c6:c9:28:ae:fb:47:50:8c:34:3b:4c:1b:19:09:
                    8d:9f:df:32:db:2c:4f:d2:b5:c3:5e:71:39:a2:a3:
                    8a:6f:e5:cd:1d:9e:aa:4d:8c:95:a3:74:32:0f:2a:
                    6e:7d:92:5d:f6:1c:07:80:c3:b9:bd:d3:ab:db:b7:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:0F:01:A8:D1:11:22:89:E7:84:9F:53:EF:CF:71:CD:1E:57:B2:45
            X509v3 Authority Key Identifier:
                keyid:10:12:21:64:58:BD:76:05:FF:95:54:0F:D2:04:EB:93:A4:77:F3:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBIhZFi9dgX_lVQP0gTrk6R385M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/52be56-ec7b-4434-93eb-09feaa14e31e/1/EBIhZFi9dgX_lVQP0gTrk6R385M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b4:62:5a:1d:0f:da:37:d0:54:9d:e5:8e:09:58:55:3d:25:
         4d:9e:b6:53:dd:1e:61:8d:ca:61:48:c3:c7:fd:75:ed:bd:a3:
         a6:96:a3:39:42:9f:be:f8:40:69:99:ed:a1:1e:d4:62:19:65:
         37:0a:7b:d0:b4:d9:37:4e:18:ec:e5:d4:ee:d5:cc:a9:8e:59:
         5b:33:f3:bb:57:24:55:7f:10:ee:12:d4:17:e6:4d:c3:bc:94:
         1b:32:40:74:8f:6c:e1:02:35:69:73:57:e8:ce:a8:bd:36:0d:
         4a:fe:72:22:00:29:4d:c1:e0:47:b9:10:4f:f8:ac:7d:ec:43:
         98:af:80:03:17:5a:d9:d3:cb:72:c7:0e:85:f5:7d:29:47:a1:
         6d:af:59:b2:eb:05:5d:95:f0:45:6a:3a:41:92:22:a2:9a:39:
         9f:cc:c9:89:d6:4e:b8:4a:91:f8:57:6c:c5:1b:a1:5e:92:57:
         7a:ef:a6:6d:6d:dd:61:4a:c2:cd:3f:60:cd:63:2b:69:2c:d0:
         7e:7b:f5:57:9e:27:3a:25:14:d6:e2:6e:18:86:9e:62:74:90:
         65:4e:5a:2c:d1:19:bc:28:5e:7c:bc:03:14:bb:10:a8:e5:9f:
         d5:4b:24:31:26:e8:6c:b3:eb:b4:13:fb:4f:a9:fd:b0:ec:ae:
         ec:47:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:13:43 2025 by rpki-client