Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
File:                     EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft (raw, json)
Hash identifier:          T+pf33Bgh0bdM1j1GLd9RuuXIrGKQN8B8Jx/fFqsghU=
Subject key identifier:   23:03:2C:2C:00:2D:0C:12:A2:8F:50:00:07:7C:59:2E:90:AB:1E:03
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Certificate issuer:       /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial:       01988CFD5D23362D0E26462F548F16D02E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
Manifest number:          143E
Signing time:             Sat 09 Aug 2025 04:01:11 +0000
Manifest this update:     Sat 09 Aug 2025 04:01:11 +0000
Manifest next update:     Sun 10 Aug 2025 04:01:11 +0000
Files and hashes:         1: APdV8HOuK_baV9w8xFhYPy7-2P4.roa (hash: IitULqtIj0Y4YtBexT7yVT81AkWjJbb2T56Qs1uC9QM=)
                          2: EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl (hash: ZiGHFEzkVelb6Z95Gv84p/vRkWYTZjhe05M+NozOEvk=)
                          3: Fb0skEyX6qOFH4mxiCD0y38K50g.roa (hash: WuLRLLi+4HFH3PUcwNxaQ3ghnNVvZQgN47f0xDAHYEw=)
                          4: fcEGyk-ShkerhmvdFRcRV3UxI0Q.roa (hash: j94ZQOuH+xS4iNOpDw2YYuethGcrhVLCQhL5yC+U8s8=)
                          5: jGYUYth-JS9LpEgUYHaooWrb7Tc.roa (hash: frlNr3HLKX2GRFBcwYSe2xt1qGCkZ5xJR/twdkhb4cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fd:5d:23:36:2d:0e:26:46:2f:54:8f:16:d0:2e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
        Validity
            Not Before: Aug  9 04:01:11 2025 GMT
            Not After : Aug 10 04:01:11 2025 GMT
        Subject: CN=23032c2c002d0c12a28f5000077c592e90ab1e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8d:b7:16:2c:24:84:70:a7:99:83:6e:d3:f6:
                    bb:fd:9d:1f:96:e6:21:4d:66:0c:49:89:6f:d1:b6:
                    e1:06:4d:17:63:35:88:4e:3d:2d:30:d1:31:fc:45:
                    c3:03:53:f5:46:04:a2:14:52:5d:4e:1f:74:b4:a9:
                    d6:db:ae:f6:45:69:c5:b6:0c:e9:d8:12:33:b0:fc:
                    ac:86:9e:91:98:35:b7:0c:cd:97:ec:94:77:a7:f2:
                    c9:00:65:6a:d0:a9:cc:18:35:e8:de:b2:80:ad:d4:
                    b5:c6:ae:c8:bc:8a:ec:a5:89:23:29:aa:e2:27:da:
                    ed:33:58:40:b1:72:5d:64:5e:e7:7f:a5:02:52:7c:
                    64:98:b9:79:42:11:da:1f:3f:1b:22:43:13:09:0a:
                    d2:c5:49:91:17:b2:fd:d3:d2:52:81:f4:79:12:b7:
                    a1:9f:e1:4a:3e:c1:9f:6a:69:de:e1:8e:ed:68:52:
                    48:79:7f:6b:31:2b:f4:73:79:5b:ba:9c:af:66:61:
                    7c:2e:8c:04:4c:36:55:6d:5a:8d:29:14:c2:1f:46:
                    58:f3:00:4d:e3:d1:8a:2e:de:f3:8a:36:62:df:1f:
                    0c:45:96:ee:5c:e2:eb:7e:bb:c0:6f:ba:6e:77:c5:
                    43:5e:35:50:f5:2c:85:04:8e:4b:23:82:a0:14:11:
                    d4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:03:2C:2C:00:2D:0C:12:A2:8F:50:00:07:7C:59:2E:90:AB:1E:03
            X509v3 Authority Key Identifier:
                keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0c:37:44:c7:6a:b8:71:0e:5b:b5:e1:e8:70:f1:c1:31:1e:
         21:52:7f:4e:d8:37:f8:7d:46:91:42:4d:33:f4:78:56:a2:a3:
         5f:27:42:bd:12:ce:60:b6:0a:8e:e8:d5:43:06:3b:1a:f4:6f:
         f9:82:9b:e2:76:3d:7d:47:c2:13:2d:00:3f:58:6e:90:aa:6e:
         d8:4b:3f:7d:48:e3:55:e5:2e:f7:ac:af:a6:2a:cb:b5:27:e9:
         31:4a:74:bd:27:06:5a:86:9a:7b:48:7a:02:4f:77:4a:21:ef:
         3f:bc:0f:f5:8c:97:3e:61:ba:61:45:c0:c0:c8:b6:de:b6:d5:
         d6:f1:88:b1:e7:ee:9d:84:3b:97:6b:36:7a:5c:1c:10:24:14:
         e5:0c:90:b8:85:83:63:d4:37:cf:50:67:99:68:62:f5:9a:86:
         fc:2e:19:a4:0a:10:7e:f7:e6:51:8a:f2:4b:35:8a:f4:2f:5a:
         c8:48:2d:34:f0:c8:c9:d3:45:96:97:14:48:d5:8b:6e:da:fc:
         1c:33:73:48:63:fa:f9:2b:04:b7:45:92:39:92:aa:cf:cd:18:
         8a:57:59:17:11:d3:2c:70:91:b5:b7:e3:a7:82:02:01:34:b8:
         b1:50:cf:f8:1d:0d:50:aa:3d:c9:13:01:90:2b:9e:cf:99:2c:
         d9:c5:74:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:51:05 2025 by rpki-client