Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File:                     eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier:          2fR+GHC4sR0B94Yafm2tyCz/tvPsMPG7BX7HKAI3Tgw=
Subject key identifier:   78:55:F4:CE:EC:5C:FD:B9:69:1D:8E:18:90:F3:65:E5:48:DE:C0:EA
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer:       /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial:       0198752C1A3D92EDC15225A5DE67C628C8DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number:          0A61
Signing time:             Mon 04 Aug 2025 13:01:21 +0000
Manifest this update:     Mon 04 Aug 2025 13:01:21 +0000
Manifest next update:     Tue 05 Aug 2025 13:01:21 +0000
Files and hashes:         1: 0U0iwiffVettO-vogpqMch7csq4.roa (hash: uPiED/FamX8UNur9ecAQaLp7MXQZVhIJRf73CMOjMOY=)
                          2: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: T4YRmiTN2MOMkBjZJLlP5eaPksdTfxWu0Gd/3Nkbbak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2c:1a:3d:92:ed:c1:52:25:a5:de:67:c6:28:c8:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
        Validity
            Not Before: Aug  4 13:01:21 2025 GMT
            Not After : Aug  5 13:01:21 2025 GMT
        Subject: CN=7855f4ceec5cfdb9691d8e1890f365e548dec0ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:06:f7:7d:94:f0:86:40:d1:eb:35:bd:c3:5d:
                    4a:94:b2:ce:cf:90:04:a1:23:f3:53:be:44:2c:e5:
                    8e:7c:22:57:25:ef:39:ab:c0:25:d3:88:09:65:05:
                    b5:3c:d0:72:08:1b:a1:fe:ea:5b:7f:d4:7b:04:65:
                    09:1b:13:5a:3f:77:84:14:ed:30:02:1d:1f:b0:c5:
                    bd:77:17:08:8f:ce:2b:d8:4a:1a:d1:90:ea:36:be:
                    b9:93:49:87:98:48:91:2a:96:e8:48:6b:9a:84:49:
                    6f:22:d7:cd:69:29:c9:54:8d:f6:8f:7e:95:17:bb:
                    55:31:b3:1b:6f:65:14:03:89:38:40:52:7a:b8:45:
                    3e:f2:91:37:a8:21:d9:e6:d3:ae:7b:b3:a6:02:ad:
                    52:46:12:18:8d:66:cd:f4:66:10:49:7c:98:c8:70:
                    cf:14:d5:97:02:18:af:fe:2b:2d:24:4c:73:e0:de:
                    1f:ca:cd:f2:26:69:c6:ba:37:99:34:d8:20:40:08:
                    ba:ad:b5:44:2d:61:5d:a7:70:7a:de:31:52:45:ab:
                    5b:a6:dc:18:d5:e8:b6:aa:f1:b9:51:76:1b:da:1f:
                    fe:30:59:53:50:f2:0a:1d:68:34:6f:ce:1d:b6:89:
                    7f:d7:90:f0:95:80:6f:30:16:0a:18:d4:48:ff:1b:
                    60:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:F4:CE:EC:5C:FD:B9:69:1D:8E:18:90:F3:65:E5:48:DE:C0:EA
            X509v3 Authority Key Identifier:
                keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3e:a9:f0:4b:91:bf:4e:c7:3d:d5:be:42:ef:be:60:2b:8b:
         ed:16:6e:96:e4:96:7c:fc:c4:fa:c1:e3:71:4f:c2:06:b9:58:
         9b:11:d4:a8:cc:f3:e3:85:4b:52:69:93:ad:3a:26:82:c4:2e:
         a4:77:4c:93:fd:5f:55:c7:93:a5:67:e4:a3:52:03:c3:06:7f:
         f6:ea:db:48:44:9d:db:86:4b:1b:51:e8:57:39:2d:fc:d0:69:
         27:f7:f0:6f:cd:ee:c7:33:9f:a6:20:f5:67:05:b6:c7:13:59:
         a8:ac:8f:7c:3b:7c:33:ae:32:bf:45:84:71:76:f5:0f:9a:a3:
         55:d1:59:c4:bc:dd:1f:2d:4f:d5:6a:14:ee:a2:7a:6a:3f:76:
         40:38:31:86:cd:57:46:fd:f9:b8:d6:ab:13:a4:7e:1a:fe:8b:
         a4:52:4b:54:ef:6a:60:ed:b3:ed:f3:ae:8b:77:76:50:13:52:
         51:52:c7:ec:4e:72:2b:2e:9d:4f:f3:ac:2b:63:3b:7b:61:04:
         23:0d:ed:94:d6:c4:95:d6:49:cb:77:08:81:2a:96:97:e3:4a:
         38:36:34:8c:bd:79:11:ab:30:0f:ef:34:b9:39:bb:2e:f0:5b:
         3f:89:66:f1:05:b6:54:31:c2:2e:62:9e:ba:dd:bc:03:36:a2:
         1a:19:c9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:13:42 2025 by rpki-client