Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File:                     EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier:          buwUwW/ChcEcfViDri1EbdgGxE4EmjHp16I2WyrPlNU=
Subject key identifier:   97:7A:EF:03:63:D8:BC:5D:92:91:3B:72:88:6A:CB:38:62:39:63:67
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer:       /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial:       019893DAB5BFB35A7B478B35B1A2E7CBE0D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number:          08CF
Signing time:             Sun 10 Aug 2025 12:00:40 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:40 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:40 +0000
Files and hashes:         1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: 2gRxopbOLpvAEyyXvnCtcpCFSFrkPgxv1qqtkN+34V8=)
                          2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:b5:bf:b3:5a:7b:47:8b:35:b1:a2:e7:cb:e0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
        Validity
            Not Before: Aug 10 12:00:40 2025 GMT
            Not After : Aug 11 12:00:40 2025 GMT
        Subject: CN=977aef0363d8bc5d92913b72886acb3862396367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:e6:b6:50:29:13:e1:6b:13:bc:c8:08:b1:
                    9e:d0:9b:84:ba:8d:42:1b:f1:27:b4:19:e6:d6:d0:
                    64:cf:af:49:2c:c5:6f:7b:c3:bb:c7:c6:89:ab:5a:
                    83:ec:fe:5d:e9:ff:ba:dc:0e:8b:07:5f:36:23:c5:
                    b3:7a:2e:16:b0:2b:3c:5e:67:21:cb:61:c6:88:d6:
                    7a:d3:2d:3a:0b:df:38:59:5b:34:84:dd:a3:65:78:
                    04:bc:6e:46:17:c8:37:68:cb:db:2e:e5:b1:f4:64:
                    4f:5a:7a:ef:db:8e:0e:53:93:6f:81:46:da:36:6c:
                    27:f6:d3:21:3a:05:58:e1:c8:fe:0d:16:fe:87:77:
                    1a:f0:45:24:d1:4b:9d:04:57:8f:c8:52:cc:3e:d0:
                    c4:a7:c0:ca:c5:8d:4e:a1:37:d2:ae:6b:d3:13:fa:
                    f3:d8:4a:5c:50:e3:76:52:7e:54:fb:f8:29:20:4f:
                    91:db:f7:7a:8b:71:59:77:ed:bf:cf:c4:17:f9:58:
                    27:1a:79:3b:44:b3:cf:3d:0c:ad:a8:56:f1:b4:2b:
                    b2:de:f5:58:31:53:4c:fa:39:c2:88:73:f7:f4:57:
                    ff:be:f3:71:6a:e8:95:9e:59:c2:8f:8f:52:ab:4c:
                    db:b2:a8:6e:7f:8b:85:92:b1:a0:9c:11:f3:8d:94:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7A:EF:03:63:D8:BC:5D:92:91:3B:72:88:6A:CB:38:62:39:63:67
            X509v3 Authority Key Identifier:
                keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:5e:af:48:09:3c:4f:eb:4d:d7:fc:fc:d5:c3:6e:ef:68:
         d6:c7:a2:69:13:f2:51:7f:1e:eb:5f:6d:bc:05:04:dc:c1:db:
         4d:03:46:74:65:71:18:d5:5c:48:f7:29:d2:8f:b0:32:aa:e9:
         0c:15:7f:d4:92:50:c9:c0:a5:46:10:84:60:17:87:56:e8:45:
         ce:42:b1:7b:df:ba:0d:87:e4:be:34:1f:5f:26:0a:87:c9:86:
         35:61:96:26:6c:a9:ee:36:60:7d:c9:ec:ec:7a:a9:39:0a:7b:
         4e:79:ba:e3:65:fb:8d:37:89:ee:c9:e4:e0:a1:01:c2:57:c8:
         08:ed:bf:7e:77:30:6e:2c:c2:ac:4d:37:07:03:d1:fc:53:f9:
         93:be:7d:42:0c:38:02:b3:8b:0e:3b:b0:6b:e2:fa:42:60:60:
         a4:ad:3d:f5:14:67:97:0e:69:75:a2:3f:02:fa:f9:28:f5:d7:
         34:b4:b3:bf:0d:b0:84:35:aa:fb:25:b0:51:5c:69:01:1f:28:
         58:9b:31:b7:0c:61:ef:9a:e8:6a:eb:b6:07:d5:e3:77:62:de:
         50:27:69:07:65:56:b0:bc:bc:9f:6a:91:8f:5e:dc:63:35:15:
         5b:f0:4a:c2:ce:ac:eb:ba:11:a2:34:e9:1e:8c:87:3d:c5:a2:
         c4:d7:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:03 2025 by rpki-client