Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
File:                     eyqKwwKLcJEcthEf_aOi7-VYhi0.mft (raw, json)
Hash identifier:          zIX1J0xsW7463FOwRPXN+etwE4f9mZeTz3S7eVlf57s=
Subject key identifier:   0E:61:00:CC:C0:6D:E1:E1:6E:AC:F9:4B:8D:B6:D6:B4:0F:B6:F0:17
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Certificate issuer:       /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial:       019893A40C0FB2B9E2C7FFAB9DED0C1FE611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
Manifest number:          1628
Signing time:             Sun 10 Aug 2025 11:00:58 +0000
Manifest this update:     Sun 10 Aug 2025 11:00:58 +0000
Manifest next update:     Mon 11 Aug 2025 11:00:58 +0000
Files and hashes:         1: 28jtotP5jGQZrgfC9dom7mrNVOE.roa (hash: +R2UdyAmdhQ60Iz9EtidL+r8pWbpFwk4nS1Wd9Nv/qg=)
                          2: eyqKwwKLcJEcthEf_aOi7-VYhi0.crl (hash: auAPo5tEWQXbX4FRUCD1oQ0iAo6wkRpi/Ig7vF0enAE=)
                          3: vATjzltUGioFbSXszC6eHKiVm04.roa (hash: WrQvWZYHEUU0CIT92ou0xvlqebX8rZt2J+7+etH+4hA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a4:0c:0f:b2:b9:e2:c7:ff:ab:9d:ed:0c:1f:e6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
        Validity
            Not Before: Aug 10 11:00:58 2025 GMT
            Not After : Aug 11 11:00:58 2025 GMT
        Subject: CN=0e6100ccc06de1e16eacf94b8db6d6b40fb6f017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:8c:60:3b:55:b4:ef:63:c5:36:93:2b:85:
                    25:ec:05:13:e9:49:b1:0d:c5:ab:d7:8b:23:3c:2a:
                    2c:8a:08:9b:05:09:d4:97:46:4e:bb:aa:66:0e:2a:
                    26:58:7c:69:30:ca:96:58:ea:b5:1b:d9:d4:a2:3f:
                    90:70:b4:3b:13:c4:d9:13:6f:6a:73:9e:26:6f:b5:
                    75:b0:c7:b3:32:08:7b:38:93:a4:1a:b2:cd:c7:ed:
                    87:aa:17:15:b4:a9:64:2e:a6:56:bb:8d:5d:2a:7c:
                    56:3d:d1:d9:09:01:51:92:46:74:f5:62:1e:c7:3f:
                    57:90:87:51:22:76:0a:7e:16:17:8e:3f:3b:9e:aa:
                    34:0a:b5:59:f6:10:9d:ba:d5:66:0f:15:28:2a:6a:
                    98:2f:cb:40:41:4f:38:c7:3f:25:ad:6b:9a:80:dd:
                    3d:65:ed:0b:ba:ef:9c:41:87:c0:d0:a5:5d:55:61:
                    84:18:96:1f:68:ab:38:2b:e7:57:7b:05:3a:85:70:
                    08:b5:b9:43:4e:e7:f0:93:95:56:63:f0:19:ec:3c:
                    af:a9:d5:46:92:a1:66:d7:aa:a3:3a:2b:9b:e0:f0:
                    cc:fa:e4:b8:eb:aa:51:a6:62:26:60:9b:94:7f:5a:
                    0c:32:50:cd:95:d9:3a:ab:42:92:d8:f7:96:fd:76:
                    0a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:00:CC:C0:6D:E1:E1:6E:AC:F9:4B:8D:B6:D6:B4:0F:B6:F0:17
            X509v3 Authority Key Identifier:
                keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:2d:23:26:52:0f:86:c7:c2:a7:0d:32:e2:fa:05:4f:08:
         17:b6:24:08:54:bb:12:e6:8d:9e:e1:ea:a5:54:7e:1f:0b:f2:
         8d:09:24:d7:1a:31:a4:61:d5:34:5d:46:ef:40:34:8d:4b:22:
         33:2c:63:d2:20:e7:ef:77:18:6b:30:e3:b5:08:32:7e:ed:46:
         f7:b3:2f:48:ab:54:1a:6c:ed:bc:eb:bc:11:a5:81:6d:c3:fd:
         50:04:fa:25:3a:20:dc:34:a9:e9:4b:3a:f0:fb:a7:61:f1:67:
         64:08:42:30:1f:49:bd:fa:90:d7:cd:92:76:1a:65:8c:f3:08:
         55:5f:22:1c:b9:10:da:df:e4:08:ed:66:10:a6:50:96:70:40:
         f9:b7:7f:e4:14:24:c6:19:61:1f:a5:ed:14:dc:aa:65:68:6a:
         0d:46:55:83:a9:fb:c2:1b:c8:b2:33:1d:c5:f9:fa:a7:ed:78:
         ad:b6:7f:66:33:55:34:b4:60:0e:05:0d:b4:70:92:ff:a1:50:
         b3:18:49:6c:f8:e5:72:03:8c:01:7a:be:b8:61:43:54:c5:f1:
         70:1b:b1:61:47:ea:5a:fc:d8:1e:b3:89:c6:16:1b:33:67:6b:
         fd:f6:90:ca:e3:46:1d:bf:fc:63:f7:b9:99:1e:02:0e:2a:2e:
         a7:4e:e4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:00:22 2025 by rpki-client