Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
File:                     EYuk75AarBCHbM-Xal99FsTKefA.mft (raw, json)
Hash identifier:          zMvXIAN4hBdkVneBXYO9lW3X277Gv9UcysB98NfR6Lo=
Subject key identifier:   05:C1:02:F6:2E:E6:40:91:93:D2:C7:C4:4D:75:B5:47:B7:31:97:91
Authority key identifier: 11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0
Certificate issuer:       /CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
Certificate serial:       01987D8AD3FF2C47D6EE23C2F7BBEF008551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
Manifest number:          161B
Signing time:             Wed 06 Aug 2025 04:01:46 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:46 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:46 +0000
Files and hashes:         1: 0n0QBPe0TdoNb21CsEyXm1-Ckxw.roa (hash: kUuxta0XRa7yb0HEixw+uuf8XCvxWMdYZeBDo94C8E0=)
                          2: EYuk75AarBCHbM-Xal99FsTKefA.crl (hash: MAu8e4U5hq1aAjXP5Vp6zILZjyi+o+anZp2w65YctGk=)
                          3: HR1TJcG3AG_suefNVvv2h1y7jts.roa (hash: jl46NDl1eD+3H3yNjUjUt9A4Z+9o/63LKae5rqNmZI4=)
                          4: NPdgFAHmLUivnqi_jKGLcf-eR6s.roa (hash: lyXDI/2uyuN/2SVygi6pKbWm/KX0jVuyMLVeMsTB1NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:d3:ff:2c:47:d6:ee:23:c2:f7:bb:ef:00:85:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=118ba4ef901aac10876ccf976a5f7d16c4ca79f0
        Validity
            Not Before: Aug  6 04:01:46 2025 GMT
            Not After : Aug  7 04:01:46 2025 GMT
        Subject: CN=05c102f62ee6409193d2c7c44d75b547b7319791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:23:6a:15:ae:32:fc:d2:5d:47:cc:da:e2:
                    88:39:76:ab:b4:fc:d2:fd:4a:11:8b:a3:2c:36:57:
                    c7:b4:f4:e4:ac:79:fb:c6:63:ac:98:97:d4:b8:db:
                    92:f1:b8:9d:e5:40:6f:8c:14:6c:eb:3b:1d:3b:2a:
                    a1:a3:c1:1e:d9:fd:53:87:7d:8a:6a:c4:db:38:9a:
                    69:17:04:be:88:07:58:ca:ca:74:d0:ce:df:00:3e:
                    68:ce:c5:5d:de:c0:d4:af:e8:c7:3a:f5:81:e8:ee:
                    00:18:0f:9a:7e:07:22:8d:86:7b:15:b2:80:69:2b:
                    06:33:ad:a9:d0:04:01:c7:b4:c5:67:97:22:62:c0:
                    fb:57:1b:03:81:5c:2e:00:b3:a7:05:14:bf:98:63:
                    a4:03:ab:9a:f0:58:03:80:26:a4:49:30:2e:34:d1:
                    01:91:20:dd:bb:f6:4d:07:8b:55:cc:6d:e1:c4:41:
                    b4:c4:a9:c0:53:50:fd:29:79:43:63:56:4e:07:2e:
                    c0:76:fd:d8:1d:3f:9e:9c:0f:1a:e1:f2:d1:65:ff:
                    f1:f0:ec:ba:69:e5:28:1a:5a:00:c1:36:0e:aa:d9:
                    47:0b:75:6b:94:0c:59:06:16:d4:54:0f:c6:a7:73:
                    d6:b1:ec:25:ba:4a:ec:44:1b:3e:7c:f7:97:94:eb:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C1:02:F6:2E:E6:40:91:93:D2:C7:C4:4D:75:B5:47:B7:31:97:91
            X509v3 Authority Key Identifier:
                keyid:11:8B:A4:EF:90:1A:AC:10:87:6C:CF:97:6A:5F:7D:16:C4:CA:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYuk75AarBCHbM-Xal99FsTKefA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bd4d8d-9380-40e9-8142-f2b4efba59bc/1/EYuk75AarBCHbM-Xal99FsTKefA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e1:eb:22:9c:38:cf:7c:bb:03:1e:3a:bf:d7:3f:57:6a:fd:
         eb:78:b7:42:b8:0b:91:86:ac:1d:4c:20:3b:d0:c4:4d:72:84:
         fd:94:d9:74:33:be:31:87:ae:38:a7:71:67:7a:7a:b6:05:87:
         4c:4e:68:69:d8:51:9a:51:bc:9a:bf:48:24:eb:a4:04:37:ea:
         d4:dd:d9:48:da:24:13:ce:45:e2:79:7a:b4:42:d5:bc:74:e5:
         e3:32:48:4a:a4:f9:c4:b5:c0:64:1b:17:e0:fb:97:4c:ff:b1:
         8a:3f:d6:dd:e2:92:f1:9b:11:c8:40:14:ef:cd:4f:7e:55:d9:
         77:af:a9:a6:9a:9a:94:20:2e:b9:aa:2f:20:5f:7a:0b:de:9f:
         38:97:be:18:0b:da:ab:1b:22:69:2f:b2:33:27:42:00:4c:df:
         15:c3:a3:13:b0:27:3b:30:6f:6e:22:3c:25:71:10:ee:b1:70:
         06:12:18:a2:d2:08:31:31:bd:c2:7b:11:15:8c:5d:03:8a:9e:
         04:20:78:20:85:e1:28:ae:e5:28:14:9d:76:a6:ae:78:b8:3e:
         02:3d:a9:9a:2c:e2:28:64:af:a3:f3:04:4e:d1:00:ad:20:da:
         27:67:7c:65:23:ba:77:0c:49:55:5f:f6:22:d9:79:b7:40:cc:
         4f:ff:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:14 2025 by rpki-client