Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          YhRFUc70jgXfaCElvRzVNMlmu+gQJsSynbt4rLNESTo=
Subject key identifier:   6F:3E:39:43:55:75:91:04:51:AC:F6:25:C4:20:08:95:BD:A0:99:75
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       019896DC50A5B431B6498DC8E5FB41B6AF62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          1273
Signing time:             Mon 11 Aug 2025 02:01:17 +0000
Manifest this update:     Mon 11 Aug 2025 02:01:17 +0000
Manifest next update:     Tue 12 Aug 2025 02:01:17 +0000
Files and hashes:         1: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: TqqoLtSeqZJSxYkTMUGG5GM+3LI2IfdNYWbEmZJ7eNo=)
                          2: yuuro4DZVKBcq4qfaMzuK_H9btI.roa (hash: vk4eiNew6fQF6RCXYVJFZr4P4ma9BlPB3UnJJEu4bKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:dc:50:a5:b4:31:b6:49:8d:c8:e5:fb:41:b6:af:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Aug 11 02:01:17 2025 GMT
            Not After : Aug 12 02:01:17 2025 GMT
        Subject: CN=6f3e39435575910451acf625c4200895bda09975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:72:ac:58:4e:0d:9e:11:4c:9a:b5:04:df:
                    27:1b:3f:ea:da:8b:27:7c:52:89:8f:51:37:e3:0d:
                    fb:ba:69:29:59:6b:04:2e:ea:78:b2:0e:8f:8d:fd:
                    89:99:7d:26:b9:3e:41:b0:07:58:65:2a:c1:0a:6a:
                    6a:13:55:fa:41:65:f1:fb:26:1b:2f:63:cf:66:55:
                    20:6f:fe:cb:b6:73:2a:04:11:fd:bb:f2:79:6e:ff:
                    98:14:2e:93:60:72:89:66:9d:71:16:0d:28:62:3e:
                    a5:57:3c:3c:b7:c0:62:24:69:c7:d2:23:67:3d:88:
                    aa:12:3a:6e:84:cf:18:cd:f0:70:4b:79:38:c7:4c:
                    d1:51:52:82:01:82:c9:4f:86:e7:cf:5f:0a:d5:2d:
                    37:2c:89:6b:82:ad:b4:4f:fa:a5:9d:ae:de:49:62:
                    81:8c:b2:a3:09:c8:68:45:1b:1f:1c:86:ae:3c:57:
                    b9:f7:2e:06:5a:28:3e:b6:b4:85:47:e2:cd:bc:b6:
                    33:6b:bd:44:72:73:b4:14:1b:1d:fe:36:50:54:9c:
                    a8:b7:6c:45:0d:c6:8d:8d:20:0d:57:2f:e8:9c:f1:
                    6c:b6:8b:b1:f2:c1:f5:c7:0e:d5:44:df:98:bc:03:
                    4c:dd:dc:72:1f:46:22:e5:a0:07:1c:05:2e:f0:62:
                    39:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3E:39:43:55:75:91:04:51:AC:F6:25:C4:20:08:95:BD:A0:99:75
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d2:83:ac:08:af:c8:2d:83:4b:22:5b:aa:b0:30:6f:28:89:
         55:82:42:78:9f:dc:67:26:11:d7:6c:76:0e:56:26:07:b0:8a:
         b4:09:3c:9b:85:ec:a2:6a:2a:d4:18:e2:8e:8e:c5:49:17:93:
         a9:bb:f9:81:8d:c0:f4:cb:f2:17:b8:d1:27:02:02:7b:bf:19:
         d8:ea:75:14:1f:b1:89:14:f0:49:62:24:6f:b7:1c:ad:58:1f:
         b9:13:9f:08:bb:04:2d:8a:ef:9b:a4:57:1f:2d:fa:74:e7:51:
         cf:69:ba:4e:4a:f8:5a:e2:0b:b6:aa:a2:a0:e0:c2:59:98:f3:
         6f:9f:23:a5:61:27:39:28:af:e2:6b:25:6f:90:f7:32:92:98:
         d7:a4:5d:07:af:b9:69:98:df:a4:86:3a:be:88:3f:35:ac:fd:
         7a:1f:3b:b4:a2:e4:7c:b1:90:65:6f:5f:45:d6:d4:d8:70:f3:
         96:04:c8:25:45:b5:5e:a6:14:96:4a:ec:a8:22:99:06:a9:d5:
         b2:7d:0c:33:c3:59:9f:c9:0e:7e:0a:e2:85:73:13:98:d2:b2:
         a0:45:d0:0c:bd:be:1c:e5:5a:af:93:27:48:fb:27:70:a6:56:
         39:03:c1:32:63:be:eb:c3:97:f1:72:ab:e5:34:bd:94:c4:79:
         0c:e3:bf:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:09:15 2025 by rpki-client