Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File:                     eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier:          LDcjxbIeYmw/Inz4bVKd/P8UYkfkE/q/1TeYZFC+IoA=
Subject key identifier:   BC:D4:19:4D:DE:B3:4D:54:7A:89:69:DC:30:2F:7D:BF:21:42:E5:9F
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer:       /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial:       01987DC11E16A8288F4CE2482EFE74AE29BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 05:01:04 +0000
Manifest this update:     Wed 06 Aug 2025 05:01:04 +0000
Manifest next update:     Thu 07 Aug 2025 05:01:04 +0000
Files and hashes:         1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
                          2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: u5x3hOTZAGN3l1EcU3PUcTSuBJbgV8+xwiTTFzs7Sa0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:c1:1e:16:a8:28:8f:4c:e2:48:2e:fe:74:ae:29:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
        Validity
            Not Before: Aug  6 05:01:04 2025 GMT
            Not After : Aug  7 05:01:04 2025 GMT
        Subject: CN=bcd4194ddeb34d547a8969dc302f7dbf2142e59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5e:f6:04:1f:2f:69:d5:8c:15:40:52:a8:90:
                    f7:45:b1:fe:b6:4d:13:f8:fb:0a:b9:0e:12:65:34:
                    1c:b7:ed:e8:16:87:f1:1e:0f:9c:a4:f9:37:26:d7:
                    85:4a:1d:e5:18:7c:e0:33:7b:a1:f2:6c:36:92:92:
                    52:35:1f:bc:95:bc:cd:b0:f4:4b:6e:fe:63:3c:ef:
                    92:d8:35:36:10:c4:cb:f6:f0:bc:ea:70:5e:5a:04:
                    61:16:36:95:b8:c7:66:54:e7:81:ea:e7:1c:fe:a1:
                    56:c8:f6:62:6d:d0:4d:5c:20:60:61:93:02:54:56:
                    28:78:c0:a3:29:a1:3d:76:0b:e3:94:9e:89:67:ed:
                    fb:95:af:2f:de:ea:d8:f9:da:c7:29:73:0e:02:a2:
                    21:a1:0e:58:b5:d3:5d:c5:71:5b:a1:2c:c9:b6:0a:
                    71:0d:96:87:f9:6a:a6:80:2c:cf:db:75:85:57:bd:
                    fd:66:28:05:bd:72:65:8e:4c:51:70:e4:f0:bb:66:
                    34:03:ef:ba:6c:c4:8f:d4:2a:01:3d:f0:f3:32:aa:
                    63:f1:82:30:94:9c:19:20:42:2d:17:16:34:27:a7:
                    2c:b3:74:b3:db:b1:7d:59:de:ff:dd:6d:1c:64:2f:
                    d2:85:a4:bd:b1:b7:75:08:24:c6:d7:25:44:1c:0e:
                    fc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D4:19:4D:DE:B3:4D:54:7A:89:69:DC:30:2F:7D:BF:21:42:E5:9F
            X509v3 Authority Key Identifier:
                keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:dd:5a:2e:12:72:1d:7e:89:32:e0:ba:25:cc:94:45:dd:6d:
         42:79:15:e4:69:4d:b0:35:f0:cf:c6:f4:43:c2:3b:ce:dc:d5:
         07:93:b4:26:1e:2d:ff:2a:42:9a:7e:dc:60:f4:0b:85:04:2d:
         f0:be:f2:96:83:31:8f:3c:b2:45:2a:a8:e4:17:8e:f2:ce:e6:
         59:84:67:42:43:99:ad:69:9d:df:d1:23:6a:1f:11:fb:70:6e:
         da:2a:91:89:60:6e:3e:6f:77:48:10:60:82:45:a5:04:59:39:
         43:9d:b9:34:20:20:82:2d:2a:28:01:b7:e4:85:a7:a9:e4:f4:
         bd:6c:3d:cb:50:31:cb:c3:93:03:f5:d9:16:8c:19:ec:90:d4:
         e5:b0:b3:cd:1a:97:f4:0c:b4:6f:3a:4e:17:7c:0e:93:fc:49:
         07:da:fa:cc:f6:63:4d:e0:74:65:00:f5:90:24:7c:44:13:5d:
         bb:bf:2b:62:0e:ec:df:20:9c:14:91:24:0f:61:07:d4:2b:4b:
         ba:07:b4:94:76:eb:92:92:14:ac:39:52:05:23:97:4f:2b:43:
         48:82:0b:02:42:51:9e:25:4d:63:36:2a:9a:33:0f:43:36:27:
         4b:46:31:be:54:fc:6b:f0:ed:5b:6e:e8:39:ef:7b:54:48:c3:
         99:6b:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:47:06 2025 by rpki-client