Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          ul+Wft4qItHx1nvZh7ojAvKwxbv3B4hYCxVy/cQx8M0=
Subject key identifier:   99:2E:2A:84:1A:4F:26:81:EC:EF:A8:BA:6D:D9:EB:45:46:6D:CE:2E
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       0198737425F393CD08BCEEDBB667C3E01E16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          064F
Signing time:             Mon 04 Aug 2025 05:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:48 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: rnd/iN7Nyda4jivyyOf456Mc6ItrBFZBxML7TQ0EzuE=)
                          2: mfs8Yrq8TGR3i1Sy2Eh6FVf4mhQ.roa (hash: tv507tNB1QXfugt/h+ndpoPCsbGtPaZ5Ph9vwb9XCV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:25:f3:93:cd:08:bc:ee:db:b6:67:c3:e0:1e:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Aug  4 05:00:48 2025 GMT
            Not After : Aug  5 05:00:48 2025 GMT
        Subject: CN=992e2a841a4f2681ecefa8ba6dd9eb45466dce2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:09:e1:99:eb:01:7d:56:c5:18:f3:1c:8d:
                    3d:79:a0:e0:ac:c0:1f:22:51:e5:48:9f:67:3e:cb:
                    f1:ae:de:64:26:e0:e2:26:89:76:57:2c:65:66:9c:
                    b9:5b:2a:53:4d:8e:50:44:7a:45:00:5b:a6:ae:67:
                    4e:12:5e:93:be:e9:09:0a:2e:97:b7:ad:dd:56:e6:
                    82:02:c7:03:c9:e5:ee:15:27:ca:11:7e:6a:44:a3:
                    9c:24:a3:2b:86:89:e8:d2:e6:93:7f:f4:51:96:b1:
                    be:eb:b3:4a:3f:b2:ca:3f:8c:b4:36:12:74:4d:a6:
                    17:1c:3e:fc:0d:47:c6:81:3c:30:0e:cb:54:a6:e6:
                    fa:2c:4b:d8:5f:4e:98:93:10:5e:02:84:5f:29:55:
                    7c:46:40:e6:41:1f:dc:de:c8:b0:86:5d:f4:9b:81:
                    5b:71:51:5d:9f:08:b8:99:33:73:a6:0f:20:d6:3e:
                    82:16:20:47:c1:0a:94:03:98:24:07:e4:fd:2b:26:
                    3c:93:b1:63:79:f5:eb:64:cd:1b:e8:fb:c9:01:41:
                    57:3a:d7:e3:83:94:15:b5:c9:93:cf:da:48:56:85:
                    17:d6:a3:c5:6d:2b:57:f4:d2:17:32:80:a1:9f:e9:
                    e5:c0:ed:30:ca:a1:08:a1:13:41:87:98:d9:8a:62:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:2E:2A:84:1A:4F:26:81:EC:EF:A8:BA:6D:D9:EB:45:46:6D:CE:2E
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:34:7b:5c:8f:e7:09:ed:b8:68:0c:ce:c6:10:91:46:67:
         12:a8:dc:09:c9:6f:42:a5:2d:95:b6:75:ad:10:ca:54:f8:19:
         fa:47:6b:a9:a6:af:0b:9b:f1:ef:63:d6:42:15:98:2d:d5:d5:
         2b:28:94:4c:4f:68:93:79:8a:5f:91:a8:9c:85:98:3b:79:aa:
         83:c1:b0:40:89:90:7b:33:c9:d3:62:de:c1:e2:8c:9d:65:de:
         52:ea:a9:22:eb:ba:09:e6:41:c2:6e:91:00:7f:48:40:11:01:
         fa:64:3e:07:92:fe:76:de:3e:58:54:0d:c8:c0:20:93:fe:14:
         b2:de:1b:92:ca:14:76:c0:fe:17:45:a5:67:48:55:01:a4:70:
         ae:6f:4a:79:18:fa:f9:66:0a:9d:c6:df:76:c4:45:41:43:3e:
         92:3d:4e:3f:61:fc:80:30:b7:e4:f1:40:4f:01:97:8c:95:d6:
         3e:ae:84:82:cf:01:27:3c:4e:53:0f:64:19:fb:61:6b:eb:54:
         13:8d:13:2d:c2:8f:2e:51:f5:9e:24:75:72:ff:c7:59:86:30:
         c6:b5:2f:e0:54:2b:70:ce:26:63:a2:72:32:ac:55:d1:1f:8a:
         6c:cc:c0:7c:06:63:08:15:83:98:f5:f2:1f:cd:77:d4:d0:b1:
         e6:d0:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:29 2025 by rpki-client