Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
File:                     eXvOmMjjpdL3ViPm8jLzz827Uro.mft (raw, json)
Hash identifier:          EbLMOb/LSWuZ5V9XFxSfaqXKU2qHaesLROMbEYFLyfQ=
Subject key identifier:   A1:66:7B:74:24:11:21:C8:F5:60:88:67:55:20:43:85:36:8B:72:8A
Authority key identifier: 79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA
Certificate issuer:       /CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
Certificate serial:       0198733D8E75EBBD3162A1BEFA38B674AF5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
Manifest number:          0A3D
Signing time:             Mon 04 Aug 2025 04:01:10 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:10 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:10 +0000
Files and hashes:         1: KwgXZqDYcgh4zXYqaxbQknWHXTU.roa (hash: jIwi+9Rze68vMzWY1H0bY4CpBzrr84g1O5yKXA5KfZA=)
                          2: eXvOmMjjpdL3ViPm8jLzz827Uro.crl (hash: a4qVXztOYO2xrj1700GDsP8KTGUfw2AmSJtYtFF9HK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:8e:75:eb:bd:31:62:a1:be:fa:38:b6:74:af:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797bce98c8e3a5d2f75623e6f232f3cfcdbb52ba
        Validity
            Not Before: Aug  4 04:01:10 2025 GMT
            Not After : Aug  5 04:01:10 2025 GMT
        Subject: CN=a1667b74241121c8f560886755204385368b728a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:69:33:c1:91:15:4f:c3:fa:7c:0f:61:56:8b:
                    0b:02:ab:5c:1a:16:ec:ea:91:bd:fe:08:89:3c:bf:
                    5b:87:eb:ed:58:9f:68:ab:3f:e0:c9:6d:1d:02:c6:
                    b3:2a:be:9b:6a:fb:0b:be:87:15:d8:d6:b6:db:81:
                    62:2e:92:c7:2b:83:02:a7:f7:80:50:a1:6f:6d:35:
                    46:30:2b:c2:5b:47:92:77:62:e9:03:85:cf:6e:b8:
                    3e:62:dd:d8:72:28:51:76:06:bd:93:2a:f4:3e:d9:
                    79:75:0b:3e:48:b2:6e:53:e6:10:8b:93:83:bf:63:
                    53:57:fc:35:ca:d4:07:97:90:4d:7a:b7:98:02:ab:
                    28:3d:46:c8:40:ef:7c:ee:3a:ab:e5:f3:79:09:fa:
                    06:8a:54:29:25:ad:e1:f7:19:bc:38:39:81:16:27:
                    c2:4f:86:3d:c8:10:2b:cc:56:40:31:bc:dc:db:c5:
                    7f:de:48:72:f5:8e:5c:79:83:03:28:58:63:59:a8:
                    71:9c:8b:6f:4e:c8:6f:23:c4:72:3e:14:7a:ad:bb:
                    2c:e2:2e:cb:a5:cc:87:6d:9a:e7:19:60:cf:99:18:
                    38:9b:04:c8:31:ee:e2:59:1a:34:c5:f6:2b:d9:9f:
                    5d:47:7d:9e:72:09:df:ec:00:fd:65:f2:84:ae:9c:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:66:7B:74:24:11:21:C8:F5:60:88:67:55:20:43:85:36:8B:72:8A
            X509v3 Authority Key Identifier:
                keyid:79:7B:CE:98:C8:E3:A5:D2:F7:56:23:E6:F2:32:F3:CF:CD:BB:52:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXvOmMjjpdL3ViPm8jLzz827Uro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/557548-d39e-44e0-b7ae-3fb05a0986e7/1/eXvOmMjjpdL3ViPm8jLzz827Uro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e1:b4:30:59:13:1d:5a:0c:f2:f6:ca:b5:10:53:1d:4a:51:
         4e:2b:d9:e2:ed:05:45:29:99:83:d2:de:ad:f5:a6:46:97:0f:
         5b:b1:72:0f:7a:b3:09:47:a0:7f:87:97:c2:a8:11:2c:eb:0f:
         95:57:89:06:65:39:46:a4:5f:af:24:29:d4:6f:18:59:de:b9:
         c0:26:d4:18:b1:e8:b9:95:31:22:01:85:b5:f9:f3:db:d5:6e:
         18:9b:cb:da:76:98:6f:11:5a:14:9f:84:77:29:d3:84:4d:9b:
         57:cf:a7:f5:55:51:0c:03:d0:d1:99:09:7a:d0:6a:d4:bf:21:
         db:8b:41:55:20:26:f9:e8:29:3b:b9:9c:17:4d:71:5d:8e:7c:
         95:5e:89:f9:e6:ab:f2:d6:50:e8:7f:c7:f2:3f:cf:83:39:7e:
         89:03:5f:bc:e9:af:0d:a0:c5:67:de:91:0b:bf:0c:e2:b3:38:
         5e:9a:c2:39:1d:84:a4:fa:81:33:72:62:74:c9:aa:a8:ca:73:
         68:53:e1:f9:53:02:24:74:77:e4:fc:5a:26:bf:6f:c9:50:41:
         8d:12:23:0d:b3:6d:f7:ee:d1:19:4d:95:5c:12:d2:2e:d8:35:
         25:33:6b:fb:1b:a4:fa:70:b6:6e:78:fc:68:08:97:c8:ad:bd:
         e4:ff:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:00 2025 by rpki-client