Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          ylhLQKRQoOZw1rfZzvZD9pANghmXDUn0pQiiwh15V1Q=
Subject key identifier:   79:4E:8B:95:DA:BB:02:46:1A:AA:44:49:AE:87:EF:EB:02:96:C6:6F
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       01988CFEA112D48F9490EB4B5AAB3F0FE291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 04:02:34 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:34 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:34 +0000
Files and hashes:         1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: 1FFY1eZw+ng4n9UCGTXMVvwac6w0ZklhhXD6h7tGFvw=)
                          2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:a1:12:d4:8f:94:90:eb:4b:5a:ab:3f:0f:e2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: Aug  9 04:02:34 2025 GMT
            Not After : Aug 10 04:02:34 2025 GMT
        Subject: CN=794e8b95dabb02461aaa4449ae87efeb0296c66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:a4:87:f9:90:f4:d9:4d:2c:8e:94:e7:00:
                    ff:6b:f3:18:8a:d6:2c:3a:12:fd:99:05:31:23:47:
                    4b:cc:84:e7:e7:7c:32:41:8f:74:26:b9:27:b5:3e:
                    dc:52:30:c7:af:9e:ee:d2:df:e5:bb:43:d5:11:89:
                    d6:2c:46:68:38:d2:37:bf:92:68:f0:8a:a0:cf:1d:
                    eb:82:20:e7:9c:bd:6b:f3:cf:9f:18:83:0a:fe:7f:
                    75:23:b1:4c:8c:98:e7:33:79:ca:0b:f6:02:10:f6:
                    bb:8a:e3:48:4c:cb:ea:e0:19:29:8d:75:9d:2c:e7:
                    25:ed:e5:cf:12:21:5a:e7:ca:37:b5:29:43:d0:1a:
                    05:41:05:17:71:8c:0c:95:17:26:5a:5f:dd:f1:30:
                    94:eb:63:8e:92:b2:32:7e:49:b7:8c:e1:c1:e3:39:
                    4b:e8:00:3c:d6:b2:cd:54:01:74:44:51:9a:3d:78:
                    dc:5a:f8:5d:01:23:e3:f2:f2:64:5e:24:4f:5a:30:
                    53:d0:79:22:2e:cc:44:a8:aa:fd:71:ab:e0:94:e4:
                    17:02:df:69:d3:fd:b2:84:b9:9b:79:46:bc:c0:5d:
                    16:a1:33:c2:b9:92:c7:bd:a9:93:3a:8c:e7:d8:63:
                    04:79:9f:17:6d:76:b5:5a:15:81:4c:0a:cc:30:c1:
                    c9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4E:8B:95:DA:BB:02:46:1A:AA:44:49:AE:87:EF:EB:02:96:C6:6F
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:94:42:e2:b2:0d:99:94:0f:53:8d:bd:57:ff:0d:ce:5d:d9:
         2e:07:56:f1:4f:6d:b5:51:0e:e2:00:48:a2:5a:a4:ed:8a:81:
         a5:83:b1:ba:10:53:43:b5:dd:b0:b0:7d:9c:d5:18:a3:b0:67:
         0d:2f:c1:f8:cb:13:83:09:5a:9c:a1:d4:38:e0:47:73:01:42:
         3e:b7:2a:9a:78:15:40:06:5c:82:4d:02:0e:c3:3a:b2:bb:c7:
         fb:96:23:8e:3c:d6:26:50:42:b7:83:35:e2:13:53:f5:6f:19:
         8c:e0:68:fd:39:b8:1a:6f:19:96:c4:2b:b8:84:30:d5:b8:38:
         b8:fb:39:3c:b8:20:4a:c9:59:31:cd:10:1e:62:a4:18:9a:63:
         b5:60:ff:d1:44:a4:60:67:0f:4a:e0:94:23:e5:c7:3d:48:89:
         2f:8f:c3:16:d9:84:8c:3e:d3:e1:60:1d:de:69:09:f9:2c:bf:
         79:4e:90:14:0d:56:b4:bc:c0:7a:77:05:5e:8c:d6:9f:95:77:
         77:c6:46:be:26:7c:d0:d4:b6:1f:e8:05:6f:24:7e:31:9e:05:
         db:ab:44:eb:cd:fa:a0:40:b4:7e:73:85:16:31:d5:72:6a:67:
         02:28:e8:77:0b:29:c8:50:d6:74:84:2b:33:e5:99:95:5d:c7:
         9a:b9:01:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:33:01 2025 by rpki-client