Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          RJ/t/qSxUT6G2Dk5canEowMBhtbXoM9uvbWovtSyr3Y=
Subject key identifier:   75:BF:98:C7:3D:DD:D6:94:7D:60:3D:56:2A:12:29:9E:DB:01:F8:71
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       019873E31A7DA960F0993555EAF55BEF72A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          12D3
Signing time:             Mon 04 Aug 2025 07:01:59 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:59 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:59 +0000
Files and hashes:         1: BXtbJRTGPhW1VlCQ66qjiZWhbAM.roa (hash: 9OVGLVBb4qleVwsOx0lriWprWo/Ar1aDDscASTXyLXo=)
                          2: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: xCye5lZqfvHBYpHnMup0kp7hl/ydp5JOz7tgwYiXSog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:1a:7d:a9:60:f0:99:35:55:ea:f5:5b:ef:72:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Aug  4 07:01:59 2025 GMT
            Not After : Aug  5 07:01:59 2025 GMT
        Subject: CN=75bf98c73dddd6947d603d562a12299edb01f871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5c:3a:72:86:5d:03:e2:a5:eb:a3:41:e3:11:
                    bb:a3:4f:84:5d:fb:ce:bf:0f:13:e9:01:39:86:89:
                    a1:b3:97:3c:86:07:5d:31:d5:d7:29:a5:c9:cc:17:
                    dc:d2:10:0d:48:8c:76:d5:d9:26:9a:32:89:22:2b:
                    72:95:ad:55:94:a1:17:1b:e4:03:9e:ec:66:96:31:
                    f0:29:57:50:27:c1:1c:ee:7a:89:17:89:10:3f:f6:
                    e1:54:99:fe:34:31:ae:ad:04:0c:7d:0f:8f:bf:e9:
                    7d:29:1a:97:43:b1:db:3f:18:78:ae:0b:61:81:c0:
                    d9:34:ef:11:db:69:0c:c4:42:76:12:53:2a:06:80:
                    ea:7c:1b:0f:16:01:92:c4:ed:11:d6:0c:36:f6:eb:
                    f4:55:73:dd:04:2c:b1:22:2d:84:16:f0:04:76:77:
                    16:c2:6f:66:bc:f3:d9:f8:c6:9c:5f:5c:bf:74:77:
                    33:59:da:b9:29:5a:1d:fb:22:48:48:de:b5:42:8e:
                    c7:fc:ce:76:a3:d7:11:de:33:58:a4:74:07:f3:3b:
                    95:22:78:8f:8d:40:4b:5f:e4:bc:c6:4f:3a:6d:ac:
                    bd:88:f7:3a:68:7e:5d:da:47:2f:8e:08:cb:b2:5b:
                    0f:55:bc:69:78:fa:5c:3e:d3:11:95:6f:b4:6b:eb:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BF:98:C7:3D:DD:D6:94:7D:60:3D:56:2A:12:29:9E:DB:01:F8:71
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2b:b9:8e:78:6a:b9:2d:97:3b:12:35:c0:39:2a:49:fb:ca:
         de:66:2c:5f:fb:72:06:16:66:1e:21:66:a2:46:35:fa:7f:ec:
         4a:dc:d5:67:8f:09:15:f4:72:93:07:d1:d0:97:7f:ab:be:d5:
         9c:4c:0b:9c:ba:35:2c:78:1d:16:15:ab:5a:8f:05:a6:12:01:
         f6:82:4b:ab:be:a5:58:dc:74:eb:e1:de:e1:62:66:d1:0f:ae:
         85:5a:c1:f6:06:3f:a1:b3:2a:ed:a9:22:0e:62:28:c2:71:34:
         b4:dc:46:9d:5f:35:18:a9:9e:5b:f6:d9:a3:d3:53:92:8d:d4:
         b3:e4:14:65:54:21:4d:02:76:00:ae:b3:24:c1:c3:2b:e4:23:
         df:5d:1a:7b:0e:3a:e3:94:9e:13:99:3e:e6:e9:5b:5a:fe:32:
         db:9c:3f:bc:a1:e5:b2:5f:70:bb:5f:fa:06:d3:9c:50:eb:3d:
         55:6b:22:47:47:33:49:26:3e:c5:34:f6:62:87:61:32:c9:4c:
         25:cd:56:17:5b:7b:41:29:a1:74:d4:b4:ef:c6:5c:3f:a8:e5:
         8f:38:f6:da:59:5c:8e:9b:68:55:2d:3a:3e:1d:6d:1d:52:f6:
         35:1c:79:6d:dd:5d:2e:02:62:47:2c:b5:c1:e5:c4:6c:f3:f0:
         9c:13:9a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:05:05 2025 by rpki-client