Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          BM49GW4VtlGPob/S8e04l3UMVRNo8U8dvTbCLR6wKQY=
Subject key identifier:   A9:17:E8:97:EA:D2:A4:A8:1A:D4:BA:E6:A6:18:1E:1C:74:53:72:B1
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       01987B9C87094685D755E1B683C8082ACA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          134E
Signing time:             Tue 05 Aug 2025 19:01:52 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:52 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:52 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: Csv0H/Ekt7p2u3gVnOWdHKWPnPgfXnNfhdTl4eDuQQ0=)
                          2: jr4b-Rf0xfPafQWq2uvd9nWvLEg.roa (hash: Xv/PqNN2xhkW4QGTc+jzafFg6jr4IL/yGvEj1fBOV08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 19:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:87:09:46:85:d7:55:e1:b6:83:c8:08:2a:ca:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Aug  5 19:01:52 2025 GMT
            Not After : Aug  6 19:01:52 2025 GMT
        Subject: CN=a917e897ead2a4a81ad4bae6a6181e1c745372b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:a4:ed:c8:8f:e6:0d:d9:34:ff:24:24:12:
                    ed:00:d3:c4:0f:48:b2:ad:48:44:6d:1a:2d:fc:20:
                    29:34:9f:34:80:f4:4e:27:09:01:51:66:43:d9:ca:
                    ce:b7:14:8a:48:22:5d:fa:f3:e8:5b:c4:1e:44:5c:
                    14:60:67:37:57:92:54:28:67:3f:2d:e8:7c:32:97:
                    e2:60:6c:0a:e8:c0:24:6d:63:f7:8b:a9:5f:a2:37:
                    be:e6:a0:2f:0f:20:0f:d9:d6:40:4c:b2:a6:63:7b:
                    e9:42:e3:76:35:2a:b4:3b:c8:da:94:14:b2:66:eb:
                    62:f3:24:82:57:97:8d:97:14:39:2d:b7:19:0e:10:
                    e3:f3:b0:c8:95:5e:ec:b4:b4:47:ab:0f:15:4e:d6:
                    c0:1a:fe:e4:3f:ef:c0:72:fe:0e:42:4a:89:1a:b6:
                    8a:74:a3:14:c4:d7:a0:b3:5d:ed:7c:3d:ca:90:cd:
                    47:62:fb:04:0e:6d:98:e4:58:de:a2:73:c5:be:8f:
                    18:b1:1f:d5:43:a2:d9:38:d9:8e:9b:cd:c3:b9:90:
                    6a:5d:1b:0a:27:ce:8c:18:eb:73:12:80:74:29:aa:
                    05:1d:2f:8d:1b:9d:0b:87:df:2b:75:cc:a0:cf:43:
                    d4:42:da:f2:00:6a:a0:5c:47:3c:1e:ff:0d:08:10:
                    14:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:17:E8:97:EA:D2:A4:A8:1A:D4:BA:E6:A6:18:1E:1C:74:53:72:B1
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:17:b7:d5:e1:e7:07:9c:1d:c1:5c:2c:c8:1b:70:b4:c2:35:
         88:90:03:42:3c:4f:af:5f:01:6e:77:00:dc:15:9e:61:9e:67:
         32:18:81:3f:ea:d9:7f:c9:27:a1:74:1e:c2:1a:61:ac:04:5d:
         5b:61:c0:25:92:37:2e:d8:93:1a:72:98:3d:56:43:32:c9:d0:
         e6:7c:a3:83:a2:13:da:c5:67:a6:ae:0e:79:68:dc:5e:eb:bc:
         52:da:2a:0a:28:b3:ad:f0:7b:d6:e2:1d:41:20:22:bc:0e:de:
         54:de:00:df:24:ee:69:67:11:b3:4a:b1:78:b9:8b:0d:90:02:
         f3:fb:a9:0e:5a:7d:12:3c:3b:78:0e:d2:62:f3:1d:76:b0:9a:
         88:91:0d:1c:cd:4b:32:d2:5f:e4:94:c3:50:14:28:e9:72:07:
         ea:77:dd:23:57:73:ff:42:07:c6:b3:0b:77:53:8c:7b:a3:ee:
         75:e8:82:41:3a:7f:b9:1f:1a:37:5e:99:ba:1f:97:01:e9:67:
         86:6b:5a:38:c3:da:9d:30:7a:0e:30:43:a6:17:3d:17:fc:0e:
         d5:d7:11:88:15:cf:5c:4f:24:0f:5b:89:96:69:fc:9b:46:c6:
         dc:c0:4e:60:10:fa:1b:99:85:44:82:55:a2:29:0f:2a:c3:d9:
         b0:c7:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:06:39 2025 by rpki-client