Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
File:                     EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft (raw, json)
Hash identifier:          FGqnDXIXFZxSQSxhi+uns8xpUd7YGaA0oxvQQA7kReI=
Subject key identifier:   F5:F8:DD:E7:4F:E6:7A:B5:DB:29:CF:43:37:04:5C:B5:AE:13:40:53
Authority key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Certificate issuer:       /CN=1170356135adf47ed9708cb0a13680894c2339ea
Certificate serial:       019881691FBE29390D46C98A556DD6B3C202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
Manifest number:          15B0
Signing time:             Wed 06 Aug 2025 22:03:26 +0000
Manifest this update:     Wed 06 Aug 2025 22:03:26 +0000
Manifest next update:     Thu 07 Aug 2025 22:03:26 +0000
Files and hashes:         1: 8u57ArQxKO_4JRsiP8ig9E_nJLs.roa (hash: ifzsEyICQHhNmNaBIhgOvnazrnhVrug9jj3mLB5h7cs=)
                          2: EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl (hash: vL1WXchJiwJwjP0YtOfWuYqNnKliPI8PQj4okMsylmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:69:1f:be:29:39:0d:46:c9:8a:55:6d:d6:b3:c2:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1170356135adf47ed9708cb0a13680894c2339ea
        Validity
            Not Before: Aug  6 22:03:26 2025 GMT
            Not After : Aug  7 22:03:26 2025 GMT
        Subject: CN=f5f8dde74fe67ab5db29cf4337045cb5ae134053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3d:08:1f:ce:fb:cb:be:79:cf:34:8f:64:85:
                    35:33:a8:c1:c7:7b:98:6e:1f:b8:57:73:38:c2:65:
                    4b:4d:a9:89:a5:96:4c:63:9a:82:52:ff:ce:f2:5c:
                    71:d2:9c:dc:89:7f:eb:e2:f9:b6:97:de:1b:a8:1e:
                    11:2a:9a:72:8f:1d:ba:27:63:7f:66:d5:b7:e0:00:
                    a7:a5:b2:fb:3b:65:51:07:df:73:d2:d0:7d:c3:f3:
                    f3:73:71:7f:92:75:a4:04:8d:4a:14:b2:6c:25:91:
                    67:15:50:2b:41:c1:b0:96:4e:72:84:3e:83:cb:da:
                    08:1a:11:cd:bc:07:85:eb:e8:c4:e4:79:72:c3:96:
                    6c:48:25:43:72:ef:ef:28:d3:ee:fa:95:de:1c:82:
                    7a:6c:cd:b5:8e:29:44:91:09:ed:ba:b8:eb:79:fb:
                    0f:d4:03:0b:a3:38:39:af:35:49:25:1c:fe:70:63:
                    f7:bb:a9:e2:8b:38:6a:73:56:0d:db:c5:72:e7:2b:
                    63:1b:5b:93:2c:3c:5b:2c:f0:4b:98:88:c3:eb:54:
                    6c:54:d5:c3:2d:8e:0a:74:6f:ff:9c:9f:51:ce:d6:
                    38:e8:0c:42:5a:e0:59:af:1e:ac:82:5e:2e:0b:1f:
                    c4:83:a1:7e:4f:84:8e:b7:26:c1:80:27:dd:1c:70:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F8:DD:E7:4F:E6:7A:B5:DB:29:CF:43:37:04:5C:B5:AE:13:40:53
            X509v3 Authority Key Identifier:
                keyid:11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:0f:9b:65:3a:8b:2b:70:33:87:7a:b0:f6:2f:8d:03:c2:
         45:db:4e:b3:96:a1:10:04:cd:29:e4:3b:4c:7f:e8:ae:87:31:
         23:32:6a:31:fc:f4:f8:62:df:26:fe:62:b4:4d:e5:5e:39:c6:
         31:37:02:de:c3:b7:2f:1e:0d:15:01:b7:99:50:97:e5:fb:e0:
         d4:17:e2:9e:fe:be:92:1e:03:9a:2c:d1:23:5b:90:50:49:aa:
         ec:56:a4:ca:e4:74:39:a0:46:61:42:ba:31:53:68:41:bf:1f:
         5f:1a:a5:29:48:0e:9b:b2:6c:cd:9c:e4:1d:f8:63:b9:c6:82:
         e2:94:d6:2e:8a:99:9a:49:0b:0e:4f:23:ec:7e:6c:d2:2e:9c:
         54:07:f5:e2:00:8b:1b:f5:4d:d2:68:02:e8:30:44:f4:5b:3c:
         12:55:46:4f:9e:3a:d1:fb:30:5e:a4:d1:a8:79:7f:82:75:82:
         d8:72:ac:e8:f9:51:a9:c8:dd:63:f5:5a:91:54:e9:7f:b2:72:
         2a:cd:25:1a:11:5a:55:96:fe:a8:e9:25:fe:18:dd:fd:d4:a8:
         d3:de:21:06:cb:96:c1:5e:a2:12:ac:b6:0f:49:55:fe:5b:9d:
         84:2d:e8:06:5d:32:5c:06:5e:2e:94:43:b8:b4:c6:51:c2:a5:
         fb:0e:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:52 2025 by rpki-client