Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          msYIqyeNrO6f2h8FjjW6BQxH/fANL38bX9+fnwZdlKQ=
Subject key identifier:   93:5F:9D:B2:2E:10:B0:08:E6:16:74:DB:CA:F9:62:3F:5D:E6:B8:D2
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       01987C77764BF740A3EFE74B4AF30FF47FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          1620
Signing time:             Tue 05 Aug 2025 23:01:00 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:00 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:00 +0000
Files and hashes:         1: AVUcMAxEbDhM7vM-FUjcCVxpkZ4.roa (hash: XsWajvBJCQBaQCOPW97TUhH7waI4+kM6mJXjahHInmI=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: NUP2zGUk4HiHkJii6BYLUEIVkJVi/6dCrxTLsDVw8Ic=)
                          3: Pb3BR7I3yypN0jZXyhXVjX7_7qk.roa (hash: Hki992M/vj13WyFzgI/qTd7id5FfrVmsocjjt8H+8YY=)
                          4: SEzIpQlEdNO7qpFJFox8nqfBkU8.roa (hash: DyyJf3v7/p2uLPbLbI0Ax8tgSfmYrSUpfCXMF5ZFV0U=)
                          5: e6QKnd26NFxLpuuhAxML73T_BHw.roa (hash: WvnUhZyvWR50U69T375x8NsElxKc8FKV3YkOrKaAbIs=)
                          6: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (hash: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:76:4b:f7:40:a3:ef:e7:4b:4a:f3:0f:f4:7f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Aug  5 23:01:00 2025 GMT
            Not After : Aug  6 23:01:00 2025 GMT
        Subject: CN=935f9db22e10b008e61674dbcaf9623f5de6b8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:01:1b:9f:73:5c:25:6c:61:8a:cb:4e:fe:
                    ff:db:be:52:ee:e8:4f:09:5d:8d:35:54:b0:11:d6:
                    e5:d8:d2:44:e7:72:5e:17:7b:95:c8:f7:e5:56:fd:
                    f1:0d:5c:03:64:96:c6:09:21:d5:fe:b5:13:c8:f3:
                    79:bc:d1:53:31:8e:49:31:8d:75:f3:c3:9e:7e:c0:
                    b4:08:bc:e9:1b:3b:1b:49:12:5b:3a:5f:79:b9:96:
                    86:e6:04:05:89:9c:3b:4b:be:31:fa:7e:ac:37:ab:
                    3b:68:0d:06:aa:03:c0:be:d5:1f:d2:7a:b2:b6:00:
                    88:56:3c:3a:57:c6:ad:84:df:59:ba:4b:9f:2c:08:
                    24:7b:66:47:1b:4c:cd:67:e8:c8:8b:c7:36:c6:14:
                    7f:42:c0:f3:c0:10:c6:eb:10:9f:4f:03:a1:5c:cc:
                    0f:c6:7e:f8:09:3e:f2:ee:bc:14:d6:5a:56:2e:a7:
                    f7:57:f9:b0:a2:e0:b4:61:a4:4c:d6:25:99:76:11:
                    bf:7d:84:33:37:b8:2b:37:ce:48:e5:83:bd:2e:73:
                    1b:7a:d4:aa:d5:9e:3a:ea:09:54:1a:af:47:33:eb:
                    90:42:01:39:aa:58:b2:21:43:2b:8d:3e:b7:08:30:
                    62:b3:58:46:91:fa:94:80:c7:76:c4:62:42:b6:a0:
                    32:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5F:9D:B2:2E:10:B0:08:E6:16:74:DB:CA:F9:62:3F:5D:E6:B8:D2
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:88:e7:da:ec:11:c9:d6:f4:1a:b8:72:bd:2e:ae:66:72:
         7f:24:af:be:58:7c:c5:03:a2:a8:b1:a0:bb:37:fc:5b:b2:cc:
         47:4d:e0:76:f1:de:03:cb:62:a6:40:6e:34:0b:d2:04:37:ab:
         9f:46:34:07:62:7e:a8:7a:8b:18:3c:54:06:3a:fa:f6:f2:d4:
         11:1f:ec:9c:a3:12:a7:a3:eb:99:a0:57:b1:63:05:fd:8c:32:
         11:0f:f3:91:54:30:bc:db:9b:09:ac:72:09:a6:94:a9:af:ed:
         f2:ad:d6:e6:1b:99:25:92:93:8b:6d:75:3e:5c:a5:15:54:3c:
         98:f4:f9:33:5b:48:28:ea:0f:f9:08:19:61:b8:2a:f9:87:1a:
         1d:0f:b7:9f:7c:f3:dc:33:df:be:2b:93:f6:84:41:b0:28:95:
         ca:18:85:4f:87:c9:17:b4:ff:24:35:0b:17:50:da:45:92:40:
         51:a3:20:ba:06:03:dc:88:b2:6d:9e:23:9e:a0:aa:3f:d0:ec:
         2a:0c:bf:58:4e:67:5c:2e:6e:76:75:95:f8:23:23:28:04:d7:
         07:24:06:00:08:f5:20:cd:f7:f1:19:52:c0:0a:11:4d:eb:af:
         8e:11:62:23:7e:50:74:09:3f:5a:ab:c5:0d:c8:02:d7:93:9b:
         20:54:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:30:45 2025 by rpki-client