Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File:                     epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier:          9BMIiXY+uTsjKRl7Gs+K03d8Hak7jZkrpo4kd0gi55Q=
Subject key identifier:   65:42:65:A8:49:E5:75:9D:3A:4C:4B:84:8E:41:B7:05:77:67:2F:3A
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       019874BD8D1E4790D9BD9286E443E078D55B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number:          128F
Signing time:             Mon 04 Aug 2025 11:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:36 +0000
Files and hashes:         1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=)
                          2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: N8ne2AZQvx+5K72/Fu67q1gjcj7MNiZSo6ooKCKuxQw=)
                          3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:8d:1e:47:90:d9:bd:92:86:e4:43:e0:78:d5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Aug  4 11:00:36 2025 GMT
            Not After : Aug  5 11:00:36 2025 GMT
        Subject: CN=654265a849e5759d3a4c4b848e41b70577672f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:44:3a:89:6c:82:8e:18:01:00:5b:ac:97:
                    b4:ff:d4:d2:a4:79:b5:54:c9:29:0c:c8:df:29:0f:
                    16:dd:40:d9:4a:3f:9c:f2:bc:3b:3c:a9:98:46:d1:
                    15:38:0d:3e:0c:eb:a4:8e:30:21:ba:9d:a1:2c:6f:
                    ed:1b:7e:83:6f:92:ea:af:a4:76:48:fa:26:8d:d5:
                    9e:ab:66:d3:88:b7:62:9d:ea:6b:b1:76:20:f8:6d:
                    79:3d:04:cd:9b:bc:36:0a:f3:89:99:80:05:a7:80:
                    bc:06:13:81:17:17:7e:c0:cf:26:4e:2b:dd:17:9c:
                    93:90:ef:57:94:4b:bd:c9:63:a8:c8:9a:ea:e4:a9:
                    10:e7:6b:1c:c9:53:7d:2f:e3:7d:f6:66:e2:14:da:
                    1a:9b:40:a1:76:d2:22:0f:59:da:0d:57:c0:88:48:
                    80:f9:bd:3c:f2:b0:62:0f:49:35:10:50:7c:30:e7:
                    a5:6f:b8:bf:dd:23:68:3e:1e:b4:73:1a:61:90:e2:
                    e1:22:cf:27:f3:65:2b:c0:5b:58:50:5b:d1:52:ea:
                    3e:1c:a1:1d:dc:42:ff:9b:92:01:51:87:c0:f8:70:
                    72:32:d5:2c:8f:9a:d0:6f:78:ea:b2:f0:59:5b:a6:
                    c1:88:af:d5:d2:97:0e:bf:17:83:af:28:a2:93:c2:
                    bc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:42:65:A8:49:E5:75:9D:3A:4C:4B:84:8E:41:B7:05:77:67:2F:3A
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:59:5f:b1:a9:ee:a6:54:b9:d7:4c:3a:ac:00:f6:7d:40:cd:
         76:e2:85:6d:db:3f:0b:30:21:2a:53:5f:ad:f6:64:4e:41:a8:
         cc:93:2a:07:54:73:b7:47:9d:f8:6c:81:0e:25:43:f3:a0:06:
         fa:f2:30:bc:da:08:ee:30:dd:6d:6d:99:c6:33:ec:51:4f:62:
         1b:b6:e0:14:4b:d4:01:d7:a7:8c:60:6f:e4:67:14:6a:2c:f8:
         11:1f:82:f6:35:61:45:ba:37:39:a6:3c:d2:dd:4e:14:21:88:
         7a:bf:87:43:05:e0:cc:20:59:ff:52:0f:cd:f2:10:d1:b9:d9:
         27:26:1b:05:99:a1:4c:11:38:ad:c4:42:be:c8:f2:ba:88:1c:
         d2:dc:36:4e:7d:05:6d:b2:92:06:44:6b:1b:da:3c:86:af:68:
         a9:ef:a4:9c:d3:53:23:cb:3f:10:22:7c:f1:fe:00:5f:85:e4:
         c7:3c:f3:d9:f4:70:16:25:c5:c6:dc:9b:1e:56:9d:38:76:75:
         ca:b0:3a:86:f0:58:43:af:86:2c:18:0e:2f:03:25:9a:ad:be:
         48:93:6f:e9:6e:45:ab:15:df:00:ff:e9:63:c8:07:4e:3d:3a:
         3a:f3:b2:24:ad:f8:b9:2f:08:1b:c9:c4:8c:fb:d1:1b:2b:54:
         87:34:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:52 2025 by rpki-client