Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
File:                     EfLjWzxVm22ENmfK1drGdOAblsM.mft (raw, json)
Hash identifier:          N4SudThwQTfzIErdsXccnXWbjiHkVGQlEGG28tkTdA4=
Subject key identifier:   D3:01:F1:C8:78:83:62:64:CA:11:B9:52:7F:7E:21:27:3F:A1:C5:40
Authority key identifier: 11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3
Certificate issuer:       /CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
Certificate serial:       01988FFE757AF01E038C48A47E37466F11AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
Manifest number:          0E1A
Signing time:             Sat 09 Aug 2025 18:01:14 +0000
Manifest this update:     Sat 09 Aug 2025 18:01:14 +0000
Manifest next update:     Sun 10 Aug 2025 18:01:14 +0000
Files and hashes:         1: A-AGhnJX9Bou2rtGJEVxpp70P0k.roa (hash: 8oKZWa78oAwwYr/+i37u8p1ocYsZreiBnXNl6eWkZHg=)
                          2: EfLjWzxVm22ENmfK1drGdOAblsM.crl (hash: RGQ7W+qVA3ZBSmjY9QVBq0rRQ3TitA0pcLLrx5tkEyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fe:75:7a:f0:1e:03:8c:48:a4:7e:37:46:6f:11:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f2e35b3c559b6d843667cad5dac674e01b96c3
        Validity
            Not Before: Aug  9 18:01:14 2025 GMT
            Not After : Aug 10 18:01:14 2025 GMT
        Subject: CN=d301f1c878836264ca11b9527f7e21273fa1c540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:cf:08:8c:48:8e:f2:99:81:55:4e:fa:eb:4d:
                    87:ef:4d:de:1b:a9:03:11:84:58:89:e5:0f:79:01:
                    4c:21:19:63:3a:a4:4d:95:5c:51:6c:86:27:f5:2b:
                    c2:b3:cb:9b:fb:c5:b5:7f:d8:9f:bf:d5:e8:95:14:
                    28:b6:19:b7:ad:f1:5f:23:f7:97:8b:db:b1:d9:68:
                    28:f0:3e:e2:c5:cf:22:78:92:4d:35:e3:4a:9d:cc:
                    6c:1c:3a:5c:0e:36:21:11:13:cb:06:2e:12:06:d5:
                    a3:29:68:4e:6d:1b:1a:6b:26:b8:f3:09:3a:ff:e1:
                    90:d6:a6:ab:3d:66:eb:b4:bf:29:41:76:45:3d:08:
                    50:4f:0e:7d:e2:56:17:dd:fe:ce:c0:a6:de:a5:48:
                    16:ce:9d:00:c2:e2:b4:a5:0c:66:44:91:be:80:95:
                    36:1f:f1:d4:0a:63:8b:cb:95:f4:af:ca:f3:f9:02:
                    9f:a6:b7:c6:93:9a:68:cb:01:74:c3:13:68:b6:f3:
                    9d:5a:4c:23:21:13:50:31:df:08:37:8f:7d:fe:28:
                    d4:ab:b5:77:2b:2d:9c:64:83:97:84:b5:a6:9b:94:
                    8d:6a:37:df:9d:8b:33:85:77:2e:45:3b:0a:0f:e8:
                    1c:1b:25:f8:52:89:f2:20:64:ca:f5:c3:ca:d8:07:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:01:F1:C8:78:83:62:64:CA:11:B9:52:7F:7E:21:27:3F:A1:C5:40
            X509v3 Authority Key Identifier:
                keyid:11:F2:E3:5B:3C:55:9B:6D:84:36:67:CA:D5:DA:C6:74:E0:1B:96:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfLjWzxVm22ENmfK1drGdOAblsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/99d68e-27c3-4b2d-95f5-250a9e6708d0/1/EfLjWzxVm22ENmfK1drGdOAblsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:01:be:44:0d:a5:d5:59:7e:0c:da:2a:d8:29:65:ac:f1:
         64:91:20:ab:42:7d:ee:05:00:2d:12:4a:41:fa:56:ba:54:d5:
         99:c8:67:f8:46:de:ce:d7:33:d7:24:fe:98:65:39:86:80:7d:
         df:a6:ec:ad:68:47:90:2d:b6:56:39:7b:8f:e2:6b:8c:18:5c:
         e8:5b:45:05:07:39:59:c0:94:73:a1:34:94:bc:1d:60:65:7b:
         7e:7f:81:6c:4a:83:83:51:e4:69:3c:29:b9:df:63:f2:83:71:
         eb:39:d6:70:0a:96:b3:60:20:a1:9d:cd:ff:3a:b8:ac:47:34:
         e2:d8:1f:ae:bf:c8:f3:f9:a3:8f:40:30:fc:dc:bb:50:28:75:
         90:c9:77:7a:d7:15:7f:ed:da:38:5b:9d:4e:1a:9e:86:4d:d0:
         4f:cc:5f:92:dc:d0:c9:96:73:86:00:23:bf:75:98:dc:ef:86:
         07:ee:78:20:30:71:c1:c7:f2:94:4a:3d:6b:16:6e:44:4b:6d:
         ae:b1:3c:bd:4c:3b:c4:86:28:8c:08:26:34:f0:fc:1e:75:51:
         0a:12:80:02:46:e5:0f:a0:88:49:fb:f3:e8:a4:71:2e:15:6a:
         26:9a:9a:fc:da:42:9e:b6:1a:be:cb:f3:ee:9a:69:cc:4b:79:
         78:4f:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:38:12 2025 by rpki-client