Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
File:                     eZNZZNoXA44j06SJCaE6JfsOWOs.mft (raw, json)
Hash identifier:          vTATsaUQmU7ZjDHoF/TgqOMWR3TskvqWBpS7nASVbek=
Subject key identifier:   82:BE:B9:47:D1:86:49:53:BD:39:54:9C:2D:99:12:6B:B3:07:B3:5E
Authority key identifier: 79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB
Certificate issuer:       /CN=79935964da17038e23d3a48909a13a25fb0e58eb
Certificate serial:       01987C4078D03145D4751603EC59C9F9F2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
Manifest number:          1619
Signing time:             Tue 05 Aug 2025 22:00:56 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:56 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:56 +0000
Files and hashes:         1: b0GYLmjWKwhIOi3oAzYrvPVF7ak.roa (hash: j3QKWf4Na6ufdvRpfqdxKfUCQ/5sW3MTiaiymKVZLKk=)
                          2: eZNZZNoXA44j06SJCaE6JfsOWOs.crl (hash: Pu9q27xdGUdhrXl9nC20uzRN+tdTrGHUIqgLKIr7MeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:78:d0:31:45:d4:75:16:03:ec:59:c9:f9:f2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79935964da17038e23d3a48909a13a25fb0e58eb
        Validity
            Not Before: Aug  5 22:00:56 2025 GMT
            Not After : Aug  6 22:00:56 2025 GMT
        Subject: CN=82beb947d1864953bd39549c2d99126bb307b35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:16:ef:59:0b:d7:2a:68:54:0a:05:61:b2:57:
                    56:0e:24:36:36:68:6f:89:9c:d6:55:46:b9:03:2c:
                    b2:64:a5:af:10:98:f9:7b:7f:08:f3:73:46:a8:a5:
                    31:6b:01:c4:f1:f8:a9:79:88:6e:0c:4f:18:2e:5b:
                    73:8a:6c:64:5a:6a:af:91:3b:e4:91:13:d8:07:8e:
                    f2:2c:5b:15:31:b3:0e:9f:b2:a0:9a:74:95:04:33:
                    e7:5f:dd:e2:35:3c:a7:a3:27:e6:f2:40:55:fe:e9:
                    c7:18:d4:25:6a:63:10:66:5b:b2:bd:65:48:2f:e3:
                    38:ae:43:0e:e1:b8:5d:8a:43:ca:7d:95:3c:74:48:
                    cd:80:57:62:5d:58:97:d1:14:29:07:14:55:cc:ec:
                    0b:a0:40:8d:6e:e9:54:15:dc:2c:80:fa:e4:08:5a:
                    88:60:39:22:43:ed:95:6d:7a:0e:53:98:96:84:d8:
                    e0:43:99:e8:13:be:62:01:c7:99:9a:a7:d2:d7:c8:
                    b7:1c:5f:7a:84:dc:88:32:f9:48:09:69:f8:41:d5:
                    1e:c0:12:6c:7f:64:8f:24:bf:dd:38:43:78:91:3a:
                    e3:a0:02:03:7b:0e:0c:e6:9b:36:75:39:28:11:3a:
                    97:02:34:27:19:56:83:a0:b0:c0:fb:99:76:e6:e5:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BE:B9:47:D1:86:49:53:BD:39:54:9C:2D:99:12:6B:B3:07:B3:5E
            X509v3 Authority Key Identifier:
                keyid:79:93:59:64:DA:17:03:8E:23:D3:A4:89:09:A1:3A:25:FB:0E:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZNZZNoXA44j06SJCaE6JfsOWOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e81d01-167b-4528-b3aa-9fe49cc4df2a/1/eZNZZNoXA44j06SJCaE6JfsOWOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:05:5b:f7:2d:6f:10:9f:49:5e:3c:df:f5:db:92:04:e6:4a:
         34:54:90:f8:7c:91:70:4d:95:ac:5c:ef:2c:15:c8:53:a3:f5:
         4c:6b:96:c0:2c:66:aa:86:c2:3f:df:ce:2b:e1:e1:8a:6f:98:
         19:76:21:73:26:07:8f:21:ff:2b:04:08:6f:9f:20:a3:e4:19:
         7d:81:71:0d:51:9c:9f:7e:7d:fe:25:d3:fe:bd:d0:44:1c:2d:
         5e:f1:11:51:a1:ca:45:bb:7e:06:e9:cf:36:ba:12:c8:bf:f6:
         15:ad:68:f3:0e:f8:28:ac:d5:57:a2:3b:0a:fa:13:21:98:3a:
         5c:41:e1:2c:33:fa:aa:1b:2a:0f:7d:35:2e:86:5f:7a:0e:56:
         95:15:ed:c4:76:04:96:12:ed:59:73:3b:ed:2d:7f:83:0f:35:
         f5:4e:ca:14:cf:04:a0:f9:05:38:ee:28:71:4c:3f:7a:1d:d2:
         bc:be:bb:b7:88:32:71:24:50:41:11:92:3a:cb:84:c7:ae:56:
         a8:dd:2a:0f:72:bd:fd:07:bc:4a:b7:b5:21:6a:3e:de:5e:10:
         83:9e:86:34:29:1a:4a:e5:a9:99:df:12:7d:cc:ca:5f:ef:5f:
         70:48:40:d7:87:66:02:3c:99:54:13:dd:88:60:0d:ea:b1:37:
         8c:2f:37:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:52:58 2025 by rpki-client