Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
File:                     EhUb9X9TFrLdXNij95hSfqwUt3Q.mft (raw, json)
Hash identifier:          IrA2FPV6Thj3HxWTpFFQIZ8giRKmTst2IYAVvwj3Cf0=
Subject key identifier:   D5:72:B4:F2:B2:74:75:CC:EB:28:42:38:5C:C6:99:49:27:58:87:E3
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Certificate issuer:       /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial:       019873071B77921D5A1BD7046B3186ABB52A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
Manifest number:          15A9
Signing time:             Mon 04 Aug 2025 03:01:42 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:42 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:42 +0000
Files and hashes:         1: EhUb9X9TFrLdXNij95hSfqwUt3Q.crl (hash: Hd318IS35uxz9yQcavoiV1YWC5A3bKAzTtNKh65b/u0=)
                          2: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (hash: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:07:1b:77:92:1d:5a:1b:d7:04:6b:31:86:ab:b5:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
        Validity
            Not Before: Aug  4 03:01:42 2025 GMT
            Not After : Aug  5 03:01:42 2025 GMT
        Subject: CN=d572b4f2b27475cceb2842385cc69949275887e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:19:f8:37:c0:5f:1d:f3:a1:d4:98:1a:4f:
                    a9:f9:6b:84:23:3c:17:48:8f:d0:26:b6:a9:65:f0:
                    40:10:db:6b:36:dd:7a:fa:0e:fe:c5:40:f0:c9:04:
                    64:ad:62:3b:65:93:87:44:ef:31:e7:86:c1:6f:ca:
                    48:30:bc:35:55:6c:d5:93:1b:5d:65:fd:20:d5:96:
                    2a:5b:f5:f7:14:36:d7:ec:39:06:5d:a2:d3:17:60:
                    a0:11:8f:b0:4a:7e:8b:7a:4c:76:03:41:3e:d2:2d:
                    10:c2:74:ee:a4:99:3e:ff:3a:15:e3:4e:78:6f:f7:
                    1f:d0:60:c6:77:34:4a:66:7f:4c:6d:0c:38:15:1a:
                    d3:41:e9:24:a5:ae:9c:2b:6d:9e:07:53:a8:41:1d:
                    cb:77:54:1d:f3:22:24:fc:3b:61:63:f5:a9:e2:28:
                    b1:d5:4f:7c:0c:e8:68:38:fd:67:ad:e1:ff:01:d5:
                    d3:f6:de:de:d4:28:72:ac:04:09:69:68:ee:3d:f1:
                    b0:93:b0:99:34:09:03:a6:a3:67:f2:37:b9:b8:1c:
                    47:d4:44:f1:fc:46:11:55:b5:ef:38:c0:10:8d:4c:
                    f2:57:f5:2b:30:f7:cc:4b:8f:56:f2:b2:ae:0a:ce:
                    f9:37:b9:b1:31:5c:93:9a:34:48:32:46:18:7f:54:
                    78:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:72:B4:F2:B2:74:75:CC:EB:28:42:38:5C:C6:99:49:27:58:87:E3
            X509v3 Authority Key Identifier:
                keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:29:e2:05:1d:04:cd:09:fb:ce:81:2d:28:3b:ca:a5:aa:
         b2:76:a1:0d:66:86:6e:9d:0c:c5:69:86:d5:eb:48:76:71:df:
         b8:a2:50:40:a3:8e:f3:13:26:13:f6:53:e0:4b:4b:76:34:d6:
         93:46:d1:fa:70:c8:29:81:c8:02:89:94:3d:31:04:66:51:91:
         38:90:2f:d1:d4:70:55:b5:cc:78:7e:39:2e:9e:2d:b0:06:0d:
         e8:30:e7:60:03:43:75:17:83:d1:bc:af:c9:f2:16:de:27:58:
         99:5c:a9:82:73:0e:9c:fb:f1:c8:ef:d5:6a:ac:59:e3:76:66:
         6c:aa:87:e3:0b:f3:ca:9d:17:c4:9c:cd:a9:12:70:3b:c9:5c:
         41:31:3a:8a:d7:13:3b:25:89:34:96:8e:b4:ba:a6:44:a7:7a:
         04:20:8d:75:5a:9b:b6:21:ca:88:ff:aa:1c:7e:34:df:6d:94:
         e1:a7:ba:51:ba:9e:c8:95:b3:22:b1:91:f3:a0:08:79:02:58:
         e8:66:9e:2c:c7:87:73:2d:9d:6b:2b:a2:a8:37:f7:e2:90:31:
         87:fb:f8:46:2e:f2:c2:85:da:b8:1c:9b:8c:1c:63:73:ba:27:
         48:8b:d9:b4:5f:e8:ba:a7:b7:a6:aa:58:54:cd:86:2e:ac:12:
         86:fe:26:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:07 2025 by rpki-client