Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
File:                     eSxdjDLKpGYjFoWMZb6-EshhrWc.mft (raw, json)
Hash identifier:          eSm6g4P0rjEqDDyAs/T91F5NKEpUlfCZ9mXcqVxURbU=
Subject key identifier:   73:1E:C8:A2:30:ED:95:A2:82:AD:7F:86:3C:12:3E:BE:59:C7:15:D0
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       019882B10FFA90C8ECD9C394D991A3EB4665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
Manifest number:          1620
Signing time:             Thu 07 Aug 2025 04:01:38 +0000
Manifest this update:     Thu 07 Aug 2025 04:01:38 +0000
Manifest next update:     Fri 08 Aug 2025 04:01:38 +0000
Files and hashes:         1: 5zhQ3B9hLH2ZPYsiKLmy8Rojvg0.roa (hash: KI1hydbtzIhfdYk8QexN8+EHwEo9bPdSN9gLtHnLO94=)
                          2: eSxdjDLKpGYjFoWMZb6-EshhrWc.crl (hash: je1RI4F2n42j+Y7ptmqiPi80taRgEt1Q1PKYQPD/WRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b1:0f:fa:90:c8:ec:d9:c3:94:d9:91:a3:eb:46:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Aug  7 04:01:38 2025 GMT
            Not After : Aug  8 04:01:38 2025 GMT
        Subject: CN=731ec8a230ed95a282ad7f863c123ebe59c715d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:54:84:c5:a2:2c:80:d3:de:76:54:f7:4e:fb:
                    d0:ef:79:3c:d7:44:ba:8b:1b:9e:dc:7a:06:79:8d:
                    12:c8:6f:d6:79:06:58:ef:69:d1:58:9d:4f:7e:ec:
                    c4:9e:90:14:3a:35:9e:2f:5e:f8:5d:54:16:2d:5c:
                    cd:aa:e4:c4:56:ee:49:b5:54:4a:0e:bd:97:71:9d:
                    62:c8:aa:f7:0c:c6:1f:ed:06:00:8c:ba:04:97:34:
                    75:51:46:81:e3:4d:1a:8c:8e:4f:54:a4:65:5d:c8:
                    9c:e9:95:e3:f2:b4:68:13:d3:52:ff:5f:f5:15:0c:
                    87:30:0d:87:04:55:ee:47:4c:3d:3a:0c:53:c7:ea:
                    1b:5c:e0:a0:aa:76:c9:31:1e:96:ad:0c:26:7d:8c:
                    47:53:67:91:3d:9b:82:b9:6d:4a:59:f8:dd:40:8b:
                    ee:15:97:0d:21:1f:26:75:97:3f:b7:e5:71:3f:b0:
                    eb:c5:2c:e5:a6:a6:40:90:29:7f:8f:4a:6f:b9:f1:
                    5d:31:1f:e8:4f:cc:56:4f:18:34:90:10:4f:b9:8d:
                    82:a8:4b:98:75:d8:21:34:03:dc:e6:28:48:2b:53:
                    3a:09:52:f7:b4:7d:a1:16:d7:87:8b:28:79:4b:3b:
                    6d:47:96:a5:32:15:a6:36:0a:86:0f:70:1e:8c:d7:
                    bc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1E:C8:A2:30:ED:95:A2:82:AD:7F:86:3C:12:3E:BE:59:C7:15:D0
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:67:7f:05:1a:49:71:97:9e:0e:be:45:8e:23:c5:35:3d:
         2e:a7:a4:4b:72:a3:2b:dc:4f:2a:b6:d3:a3:d3:11:8f:84:ca:
         b1:c6:48:4b:a8:43:fd:f9:e3:f0:1c:f9:a9:2d:3e:c9:c0:7c:
         2f:a8:85:18:87:d3:d3:6a:88:4a:6a:e2:82:80:2a:31:2d:f3:
         cc:6a:61:55:1d:9c:3d:ad:b5:55:1c:72:15:e6:c9:35:65:ac:
         ea:9a:23:67:a1:77:87:81:bc:a3:05:f0:a3:45:2c:03:60:09:
         06:23:a2:cf:eb:9a:b2:b7:6a:57:b2:ad:46:ec:0f:88:32:74:
         95:23:65:f7:ae:e1:9e:a4:d0:ae:9c:00:58:4b:d8:bc:5c:60:
         b6:a9:cd:7b:e6:4c:76:88:07:4f:60:c9:10:79:fa:ce:fb:7d:
         6e:5a:6e:36:ee:6f:2a:be:53:f9:19:01:28:b8:95:46:33:10:
         d9:92:76:d0:2a:45:83:12:f5:53:eb:0c:32:93:c8:35:41:8a:
         90:0f:4b:e8:14:ec:73:e8:89:35:06:c0:cc:cd:8d:22:15:e4:
         03:7d:38:32:04:46:ce:95:f8:3c:b6:4d:70:95:d2:19:2e:66:
         cc:12:1b:4c:4b:5f:4c:b1:65:7d:4c:f5:c9:6d:dd:bc:b8:20:
         d1:fd:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:31 2025 by rpki-client