Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
File:                     EwbHh497P12gkB3sdHOqIpFVbnI.mft (raw, json)
Hash identifier:          AcNkz6z172n6fxp1T6FoB+fOParqMhWwNTacoQoB8Jg=
Subject key identifier:   DC:A0:1F:FF:50:CD:6D:CB:A9:46:5F:E1:80:3E:24:23:B2:33:29:8F
Authority key identifier: 13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72
Certificate issuer:       /CN=1306c7878f7b3f5da0901dec7473aa2291556e72
Certificate serial:       019885E8A7ADC2529E7CC577FA08182905F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
Manifest number:          15B1
Signing time:             Thu 07 Aug 2025 19:01:13 +0000
Manifest this update:     Thu 07 Aug 2025 19:01:13 +0000
Manifest next update:     Fri 08 Aug 2025 19:01:13 +0000
Files and hashes:         1: EwbHh497P12gkB3sdHOqIpFVbnI.crl (hash: Z3CXrpW5ZiWlndmSRsLwuevLZPmMPt0FIshZ3VC1XZA=)
                          2: Rq1CrpWVvHx81iF0yv2CmyxOGiM.roa (hash: a+DkDp1TptVBWwEy/OfBk+uhB64mMxCuleZtGIvfNQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:e8:a7:ad:c2:52:9e:7c:c5:77:fa:08:18:29:05:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1306c7878f7b3f5da0901dec7473aa2291556e72
        Validity
            Not Before: Aug  7 19:01:13 2025 GMT
            Not After : Aug  8 19:01:13 2025 GMT
        Subject: CN=dca01fff50cd6dcba9465fe1803e2423b233298f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:1d:18:2f:82:c1:39:c2:cb:e8:d7:ff:4a:
                    83:c6:a0:21:ff:fe:c9:9b:9f:d5:d3:45:98:08:cb:
                    21:23:c6:fd:23:dd:74:32:22:68:1b:ab:d2:24:23:
                    fb:8c:94:67:0c:68:7a:16:e2:5e:1a:97:b4:06:9a:
                    17:27:5e:15:da:4e:e2:8c:95:65:a7:67:7e:3f:a3:
                    86:c5:5d:fe:04:95:17:eb:3c:a2:ac:44:c9:a0:44:
                    08:39:f2:2f:12:d5:19:70:89:62:12:61:21:3b:f4:
                    82:fb:10:91:52:4e:a2:fb:d7:60:6d:a1:af:f5:5b:
                    20:91:12:11:eb:ae:3c:58:86:ac:8f:37:25:6d:a4:
                    7f:df:91:f6:b3:77:c9:eb:b2:83:05:48:fb:f4:51:
                    fc:1c:c7:97:49:ca:e3:ee:8f:39:ee:b5:0b:2c:b3:
                    e3:f6:04:0c:fd:21:a9:db:3b:7c:be:cf:3e:af:53:
                    0b:2f:ff:f3:94:15:10:38:d5:49:75:ff:9a:d2:db:
                    bd:71:05:75:9f:3a:8f:e4:be:05:3b:cb:4f:c1:29:
                    c2:d8:2a:75:b3:a2:3c:46:39:ae:55:84:c8:1d:4b:
                    d1:5d:0b:99:dc:ec:a3:ed:f3:8a:3d:ef:dc:e1:1a:
                    26:31:d1:b1:be:a4:8a:78:0c:82:28:4e:d9:7f:7f:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A0:1F:FF:50:CD:6D:CB:A9:46:5F:E1:80:3E:24:23:B2:33:29:8F
            X509v3 Authority Key Identifier:
                keyid:13:06:C7:87:8F:7B:3F:5D:A0:90:1D:EC:74:73:AA:22:91:55:6E:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EwbHh497P12gkB3sdHOqIpFVbnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c1d425-de03-4ebe-b652-da34fcb7b942/1/EwbHh497P12gkB3sdHOqIpFVbnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a8:5c:df:c8:7b:b5:c8:ec:aa:26:79:a4:51:a5:70:a9:33:
         3b:4b:66:ad:46:c3:4c:ca:71:a9:0b:ae:14:1b:36:b8:22:0c:
         3a:5d:43:f8:18:be:be:d4:07:3a:16:d2:71:fc:c0:ed:72:09:
         bd:88:b5:67:13:6c:5e:35:d2:27:fd:f5:43:a7:6d:7d:20:58:
         44:6a:86:26:0b:e4:ab:72:5a:2c:f5:6f:48:ca:56:ae:b5:65:
         b4:90:53:61:11:07:10:e1:d6:1c:2c:85:f2:4d:a8:dc:86:85:
         d8:ad:34:a8:bc:17:ce:c8:f1:c5:49:e8:48:a3:a9:93:74:d8:
         f9:8f:18:92:24:62:b1:cb:ec:00:39:1c:8e:05:f8:00:06:08:
         78:12:8b:14:97:8d:f2:bb:c7:a2:30:9b:22:56:e0:7d:d0:5f:
         33:91:27:37:9d:50:55:6f:be:f2:ce:2c:e6:ba:b6:72:10:39:
         bd:4c:03:2e:7f:7b:83:d9:be:72:e5:0a:f2:87:92:a8:17:61:
         5f:41:f2:14:39:e5:d7:ce:df:e2:4f:eb:cf:98:8b:54:3e:30:
         2c:03:5f:f5:14:2c:03:aa:c7:81:c4:1c:89:cb:d3:84:4b:e4:
         e9:d1:c8:45:94:ce:44:92:c4:72:31:5c:dc:90:79:9a:79:91:
         4c:fa:23:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:16 2025 by rpki-client