Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
File:                     EWU43_13zyOMTq65XKBUh8VnGrU.mft (raw, json)
Hash identifier:          F6t5PgvquNOLA1z6/c6WpSxygjmy8hymRkrfHG8kUbc=
Subject key identifier:   B7:D4:E4:CD:41:51:3F:73:B3:9F:B4:DA:B9:2E:6C:0B:D0:70:D0:E9
Authority key identifier: 11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5
Certificate issuer:       /CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
Certificate serial:       019895C9066340C9F30C17BDD94D5DDDFACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
Manifest number:          142E
Signing time:             Sun 10 Aug 2025 21:00:36 +0000
Manifest this update:     Sun 10 Aug 2025 21:00:36 +0000
Manifest next update:     Mon 11 Aug 2025 21:00:36 +0000
Files and hashes:         1: EWU43_13zyOMTq65XKBUh8VnGrU.crl (hash: G70XVYtjVaaruMdO/KrsvsaLK/v7k3GMSGjUJsYMl3A=)
                          2: HuQC2jA885BU0j4_LL5scjkpAao.roa (hash: EvlRJMUXmvL4+uCrMnz97o0wOcJ1RwBXa983YUf2PO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:c9:06:63:40:c9:f3:0c:17:bd:d9:4d:5d:dd:fa:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116538dffd77cf238c4eaeb95ca05487c5671ab5
        Validity
            Not Before: Aug 10 21:00:36 2025 GMT
            Not After : Aug 11 21:00:36 2025 GMT
        Subject: CN=b7d4e4cd41513f73b39fb4dab92e6c0bd070d0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:ae:78:8f:ae:17:ff:34:44:da:fa:8a:5a:
                    ca:5f:bf:02:57:b2:6a:d6:cd:7f:52:4c:20:82:60:
                    6c:82:cf:21:58:42:56:7e:dc:57:d3:6a:63:1e:70:
                    6e:55:10:84:90:ea:fd:25:e0:53:d9:14:60:02:66:
                    1a:ae:e5:76:80:db:46:1f:38:f1:9f:38:e1:04:a8:
                    39:1d:f8:d4:6b:ae:5e:9f:5f:b9:92:17:9d:07:76:
                    79:7a:8a:7e:33:06:bb:dd:fa:16:63:57:3f:dd:8a:
                    ed:1d:83:2f:4d:10:29:6c:34:3c:8f:bc:3f:e3:90:
                    3f:b6:55:b6:f1:b0:8f:4e:c3:c4:31:38:0b:cc:30:
                    57:cf:4c:a4:b2:95:2b:57:a7:ad:97:7b:53:da:09:
                    6a:89:55:b5:88:59:4f:4a:d3:73:4b:38:58:a7:b8:
                    be:89:64:08:47:ec:49:6d:6d:e8:f3:81:8a:e5:f6:
                    42:0e:e2:1a:b2:dd:e7:27:f6:15:da:2e:d7:c0:91:
                    20:e5:9a:f4:98:2e:a7:a5:30:8d:b4:0d:d1:09:81:
                    3b:06:43:df:53:5f:af:d7:ba:cd:ad:b4:f5:c3:18:
                    03:b0:be:66:22:77:0d:8e:e4:8d:e7:ab:72:e7:df:
                    63:14:8c:d5:89:c0:2b:7d:8c:88:99:3a:51:f2:c0:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D4:E4:CD:41:51:3F:73:B3:9F:B4:DA:B9:2E:6C:0B:D0:70:D0:E9
            X509v3 Authority Key Identifier:
                keyid:11:65:38:DF:FD:77:CF:23:8C:4E:AE:B9:5C:A0:54:87:C5:67:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWU43_13zyOMTq65XKBUh8VnGrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/de8d82-8e0a-4452-b89a-6508c1f4a445/1/EWU43_13zyOMTq65XKBUh8VnGrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:59:f1:8e:59:21:58:72:9a:42:50:64:a6:2c:39:a8:50:b6:
         d4:90:c6:8f:b3:3a:f5:77:9e:b8:ff:fe:bc:23:92:8c:35:07:
         06:e4:44:c4:43:62:7d:d6:be:51:01:51:45:49:49:5b:61:7b:
         c1:3a:a1:da:c1:05:a7:0a:6f:20:5c:ad:ba:49:9a:5a:5c:b6:
         d1:49:89:e3:5c:94:df:56:f4:85:4f:59:06:47:0b:54:12:6c:
         09:5b:70:b7:d5:30:3f:47:f4:88:f5:52:70:25:3a:82:6d:2e:
         61:7a:57:b6:6a:e8:a7:47:f4:ac:f7:bd:01:91:d9:68:5a:47:
         67:cb:67:7d:6f:07:63:ff:4b:06:36:49:76:ec:73:d2:e4:96:
         07:cc:d9:35:f7:88:d0:f9:c7:6f:4e:9b:14:22:82:2b:b1:12:
         1a:af:2f:cd:90:07:86:72:ac:4d:a9:47:7f:a1:bb:cf:d4:35:
         b5:b8:9f:ba:59:1e:cf:e9:bb:d5:8c:96:5a:a7:64:46:e2:e0:
         ff:33:d4:91:fb:d6:c5:b9:b7:a0:bf:82:17:a9:91:ba:61:90:
         29:f6:41:a6:29:19:80:c0:5f:11:a4:fe:b6:d0:9c:09:fc:08:
         41:e2:79:e4:14:d0:08:9f:49:a3:59:50:fd:ee:9f:f8:82:32:
         ed:20:21:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:54:23 2025 by rpki-client