Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
File:                     EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json)
Hash identifier:          PNZu8lManR+EAeW3SIuGFNxf92YuuAQdM+Gq6ACbb7U=
Subject key identifier:   7C:A5:D2:47:34:E5:04:B6:4A:C7:01:37:86:BB:45:5C:26:5A:50:2E
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Certificate issuer:       /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial:       01987A520F2997C0C40413D9931013D9B8FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 13:00:54 +0000
Manifest this update:     Tue 05 Aug 2025 13:00:54 +0000
Manifest next update:     Wed 06 Aug 2025 13:00:54 +0000
Files and hashes:         1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: sbC25g6pAWzRYuQrQbThVtkxLnBZG60bLAxTMqEwxPI=)
                          2: WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa (hash: 5pY3qGQoynaLtjRYUu9PW5osvIxNFNqy+79Pc3CkOzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:52:0f:29:97:c0:c4:04:13:d9:93:10:13:d9:b8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
        Validity
            Not Before: Aug  5 13:00:54 2025 GMT
            Not After : Aug  6 13:00:54 2025 GMT
        Subject: CN=7ca5d24734e504b64ac7013786bb455c265a502e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:c9:e7:80:5a:2c:d2:1b:be:8f:eb:6b:85:
                    c6:ac:1b:b6:f9:65:0f:ee:b6:8e:d4:7d:3f:b7:6d:
                    01:2f:03:34:1c:d8:72:cb:1c:04:d5:84:c5:77:92:
                    1a:d0:b1:22:81:6f:ac:d3:a4:89:86:a8:13:9e:b9:
                    07:7c:3a:25:d6:a3:e4:fb:5c:76:3a:89:a9:dc:17:
                    ab:21:cc:bf:ab:2d:01:ef:3d:9f:9c:9b:17:99:56:
                    ac:2b:a2:22:f8:2e:21:f7:2b:53:c1:54:67:ef:0d:
                    e4:54:d0:ca:73:cf:39:5e:8f:17:bf:95:6e:08:ab:
                    aa:a5:c7:37:f7:bf:86:97:8e:26:df:45:cd:b9:32:
                    86:f1:70:6d:ad:27:1f:a9:5a:b5:cc:b6:8a:38:dc:
                    83:30:21:fa:2f:a1:3b:6d:96:f3:9b:af:0c:ec:cf:
                    69:28:ce:05:11:8c:d1:5e:bc:36:d4:a7:16:27:94:
                    e6:5d:b8:47:92:91:1f:e7:19:3c:70:b2:53:96:bd:
                    3a:61:f9:7d:df:83:4e:6f:1a:69:91:0e:3f:4a:19:
                    ea:35:02:f7:d2:90:2f:3e:87:55:de:fd:31:f5:72:
                    19:4a:1c:6a:4d:d7:41:0c:ae:d8:62:50:6a:22:8c:
                    66:ee:49:8f:5c:c5:76:ba:32:da:9e:f9:ab:a9:42:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A5:D2:47:34:E5:04:B6:4A:C7:01:37:86:BB:45:5C:26:5A:50:2E
            X509v3 Authority Key Identifier:
                keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:6d:7c:c3:2f:80:27:86:fb:a6:7d:c6:4e:92:81:06:45:53:
         2f:d3:d0:52:07:66:94:0a:0a:34:be:a2:8a:36:fc:4b:51:18:
         c5:7f:2f:3b:50:be:3e:58:6a:8f:a0:a7:c8:b7:72:f2:a1:06:
         40:9c:50:e3:f9:a5:0d:2a:ca:28:ca:cc:fc:68:80:bc:d8:02:
         f2:b8:5f:9b:76:48:d5:01:d6:89:d3:2d:36:70:4a:99:73:fe:
         3d:2e:fc:cb:46:1d:01:15:52:02:c1:26:c3:2e:5c:68:9d:aa:
         a8:5a:3f:f8:31:95:c2:cb:dc:f7:4d:51:74:12:df:c1:74:5a:
         3f:7e:a7:82:20:55:20:c0:50:67:87:2c:89:6c:b1:6a:fc:d3:
         44:db:f6:2c:ee:36:bc:09:83:b4:ed:89:7c:28:02:dd:c6:2f:
         b8:79:cb:1d:78:2b:fd:79:b7:2e:03:f6:27:1c:66:78:9a:26:
         b8:fb:2e:3e:65:ba:68:a7:c3:b3:e6:bf:9d:17:cd:75:59:8e:
         54:9b:90:3b:bb:0a:ca:61:54:fe:c4:0a:05:32:02:89:e4:43:
         2d:48:2a:5a:da:9a:d9:ed:0a:c5:e3:7b:61:95:a1:68:b8:4d:
         02:3d:6c:d1:77:c5:da:bd:af:80:31:f2:35:99:10:d6:b4:d5:
         7a:be:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:57:50 2025 by rpki-client