Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
File:                     pyEILICrr5X61-pg88XsDgXijtw.mft (raw, json)
Hash identifier:          FdW4JtvRC3BGIsi9ZXUdt3S44y4lQVo98yTJDgxJwMc=
Subject key identifier:   D1:39:20:B1:F6:54:02:CB:BF:8B:88:AF:0C:93:CB:44:F9:96:C1:99
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Certificate issuer:       /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial:       01988DA1E80C18BD5B0F0E9F9C83C1784A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
Manifest number:          0D0B
Signing time:             Sat 09 Aug 2025 07:00:54 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:54 +0000
Manifest next update:     Sun 10 Aug 2025 07:00:54 +0000
Files and hashes:         1: 3tu6ClYuvbDBR6KTKvf_i26_sNM.roa (hash: mscne+X+jfLaHAfi9bV23pNVKutqYHuT+pdDSC+aYJQ=)
                          2: pyEILICrr5X61-pg88XsDgXijtw.crl (hash: a+I6I6KBmN6xOXcjn2DvPkjOPOAfvOWUKfoGbRxgZLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:a1:e8:0c:18:bd:5b:0f:0e:9f:9c:83:c1:78:4a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
        Validity
            Not Before: Aug  9 07:00:54 2025 GMT
            Not After : Aug 10 07:00:54 2025 GMT
        Subject: CN=d13920b1f65402cbbf8b88af0c93cb44f996c199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:5d:b1:a3:ea:ff:3f:9d:67:45:62:17:f4:
                    3a:36:0f:c7:3b:34:74:7f:2c:f3:bd:97:6a:31:4d:
                    5f:e9:f7:7d:39:4b:3e:26:93:72:1c:8f:b3:c4:18:
                    35:0b:61:7f:ee:65:b1:52:08:8f:0a:20:d0:2b:a5:
                    29:df:ff:22:51:2f:fd:d8:64:fe:81:31:e7:ca:fb:
                    4f:62:fe:e3:a0:b3:23:37:b9:2b:01:10:e9:cf:54:
                    11:58:9a:d0:09:e3:18:e9:37:8d:3a:2c:1c:b4:6a:
                    43:a1:18:73:77:91:62:20:a7:ab:50:c1:6a:9d:36:
                    2d:ff:76:45:71:ee:bc:1e:d4:81:86:2a:b1:ef:b3:
                    66:33:89:6c:7e:e7:2e:59:90:ee:4b:58:f8:62:79:
                    82:e8:6c:e9:15:66:be:af:2a:c0:01:5b:4a:42:91:
                    b1:04:bc:f5:a9:5c:99:ae:5f:f3:65:d0:9e:1b:6e:
                    43:f6:51:d3:07:7c:37:bd:3c:85:60:0c:cc:80:5f:
                    2e:53:4f:d2:30:23:67:e4:3e:a9:f3:23:8b:2d:f3:
                    29:56:14:39:84:d8:b2:54:85:49:39:dd:f8:70:4b:
                    fd:27:84:3f:1b:93:40:44:a5:8b:4f:50:eb:a1:58:
                    54:2d:a4:7c:b8:08:8e:82:df:33:c8:96:e3:bc:38:
                    bd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:39:20:B1:F6:54:02:CB:BF:8B:88:AF:0C:93:CB:44:F9:96:C1:99
            X509v3 Authority Key Identifier:
                keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e0:e6:8c:03:fd:24:09:f7:c1:2e:87:39:0c:da:b8:31:0c:
         13:ad:48:f0:2b:eb:2a:8b:41:a6:3e:20:b8:ee:30:9a:ce:76:
         1d:38:4e:a1:ee:a0:e0:44:2b:91:5a:dd:15:b8:58:6d:b0:1d:
         dc:35:0c:d6:9f:ba:cb:29:c9:76:66:c7:58:d9:ce:8c:f8:0c:
         62:34:89:d0:a2:48:f5:ec:b8:9e:eb:fb:77:7d:8e:55:77:c9:
         f4:9f:04:bb:36:27:3a:6c:48:9e:dc:68:10:74:e6:56:0d:de:
         2e:4d:ef:e3:fb:18:25:1a:03:c8:50:3b:7e:c3:d9:9f:77:36:
         31:d9:1d:c3:10:50:11:55:5f:70:db:77:b7:6e:8b:e4:7f:f3:
         a4:58:b8:98:3f:26:29:a8:47:9e:dc:3a:ef:83:ef:ce:e1:cc:
         db:07:95:d6:17:8d:6e:a8:80:db:16:2f:3a:6f:c4:db:ff:b6:
         4b:e7:62:1c:d9:01:01:ad:58:7c:dc:d0:99:ea:b5:8f:56:12:
         7c:e7:5f:74:d9:af:05:de:a9:56:1b:c9:86:b4:e2:68:b1:a3:
         2c:fa:92:ef:ce:e6:8f:86:12:00:7b:bb:93:3a:1e:d7:3a:25:
         78:97:57:06:29:07:e1:86:37:07:e2:34:d2:c0:2e:3a:1f:90:
         f6:53:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:24 2025 by rpki-client