Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File:                     9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier:          WUmurJEeMODElFbMnpMEyZCbUQ4U6mwbtInNsf+2C7k=
Subject key identifier:   D0:49:19:74:D0:52:3D:99:2C:59:FD:2C:44:53:D8:75:28:A9:92:88
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer:       /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial:       019887336646B1C0C5695B59B2D87A8065DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number:          0B40
Signing time:             Fri 08 Aug 2025 01:02:29 +0000
Manifest this update:     Fri 08 Aug 2025 01:02:29 +0000
Manifest next update:     Sat 09 Aug 2025 01:02:29 +0000
Files and hashes:         1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=)
                          2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: vE7q3Y9mpvwd9Xq2Ha89lrbqlh7A1z8rhHlMVLpP6zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 01:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:87:33:66:46:b1:c0:c5:69:5b:59:b2:d8:7a:80:65:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
        Validity
            Not Before: Aug  8 01:02:29 2025 GMT
            Not After : Aug  9 01:02:29 2025 GMT
        Subject: CN=d0491974d0523d992c59fd2c4453d87528a99288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:14:93:9b:87:a8:7d:f3:c2:14:33:47:ae:
                    5e:3a:4c:94:5e:1c:c4:07:8c:bb:3d:14:f9:7b:76:
                    83:dc:cb:46:f0:4b:e6:86:b2:16:d6:37:b5:12:89:
                    60:1b:e2:d6:b4:cc:4b:e4:12:3c:62:2b:54:51:b8:
                    8a:15:cc:e6:69:43:1a:d3:e7:4a:e4:52:1f:86:5a:
                    8e:ec:3f:1e:03:4a:85:36:6e:91:ba:68:c8:e4:04:
                    43:d0:66:1a:25:d5:7e:57:6b:f8:a8:d7:ca:1d:69:
                    3d:96:1f:5a:85:c8:cb:3e:58:a8:13:23:86:79:e7:
                    b7:10:2f:67:da:73:c4:e3:4d:22:13:21:30:72:6c:
                    03:00:bd:42:22:95:c8:41:46:75:8b:3e:ae:a9:b0:
                    52:91:d9:16:6e:82:3a:20:d6:98:ac:d6:62:75:1b:
                    5f:97:27:db:c5:5e:0e:e9:99:e6:aa:8f:c2:8d:d6:
                    40:5c:04:dd:32:04:36:e2:44:46:42:73:24:10:63:
                    a1:94:d4:7f:08:14:72:d4:9d:59:75:9a:06:c2:e1:
                    11:00:ba:b3:0e:e5:69:3b:ec:6a:2e:0c:ee:62:2d:
                    d4:a6:fd:47:25:52:04:78:9b:16:8a:fe:15:82:03:
                    b0:22:d5:4b:50:34:92:cd:0b:7f:f7:91:7b:df:de:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:49:19:74:D0:52:3D:99:2C:59:FD:2C:44:53:D8:75:28:A9:92:88
            X509v3 Authority Key Identifier:
                keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f3:1c:86:00:39:f3:af:c2:d5:c7:99:e0:0a:35:b0:0d:2c:
         b1:b5:27:de:59:56:39:71:c4:84:76:3e:a1:07:52:bb:c4:e6:
         41:18:ad:38:35:14:fe:a3:61:c0:f7:21:de:ba:c7:5c:15:6c:
         53:39:6d:20:e1:b6:ee:69:d8:35:41:69:8b:84:8c:d4:d7:1b:
         db:f1:a2:bb:04:a7:95:bc:a6:da:7d:ae:90:7b:07:6f:b5:33:
         2b:2f:ff:58:9c:95:74:c4:94:d1:3d:9c:9d:20:32:5d:b5:7a:
         b2:52:20:97:3d:cd:db:69:7c:35:bb:cd:55:3b:29:fe:8d:73:
         1f:49:43:90:48:b3:0f:63:d9:95:57:e0:c2:5f:40:a7:61:76:
         17:b6:d0:2d:02:80:db:12:7a:ff:53:ef:7e:95:d1:3c:bf:a9:
         68:42:9a:26:9f:6d:77:11:73:b1:ed:fe:4c:40:5c:8b:1a:7f:
         84:e9:09:7d:94:b7:75:9f:4d:dd:89:0b:1f:80:d8:a0:07:24:
         54:66:ed:55:74:23:a6:96:2f:3b:7c:d5:bd:b3:3e:8e:a5:f2:
         20:15:04:ce:70:ca:a5:de:a7:b5:f6:90:44:91:4d:0d:74:64:
         ed:b9:23:13:c1:e8:4f:6d:49:26:57:9c:61:b3:29:10:c0:0f:
         ae:2f:e9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:34 2025 by rpki-client