Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File:                     eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier:          VGf6Is3SAe6TtmGk29D9dCYmEvflqBVxN4tW5yI4Lg4=
Subject key identifier:   FF:FB:D8:12:51:73:4B:78:86:D3:58:AF:9B:60:50:28:AD:9B:2D:D6
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer:       /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial:       01989ECC7602D3D4A75DEB71C83798B669EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number:          049B
Signing time:             Tue 12 Aug 2025 15:00:56 +0000
Manifest this update:     Tue 12 Aug 2025 15:00:56 +0000
Manifest next update:     Wed 13 Aug 2025 15:00:56 +0000
Files and hashes:         1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: FxLCt7BDNdOGtiHDPUsgvydubzeXu/5yMc8Ea190StI=)
                          2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:cc:76:02:d3:d4:a7:5d:eb:71:c8:37:98:b6:69:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
        Validity
            Not Before: Aug 12 15:00:56 2025 GMT
            Not After : Aug 13 15:00:56 2025 GMT
        Subject: CN=fffbd81251734b7886d358af9b605028ad9b2dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a7:49:1d:bf:1d:7e:dd:df:ad:3d:52:b4:49:
                    a4:9d:19:13:91:16:b8:95:07:4a:b2:2c:af:8e:7a:
                    0b:ff:18:77:48:20:5c:7e:9d:bc:95:48:79:75:0c:
                    13:46:3a:6d:f1:43:8f:b8:34:c1:81:6a:7e:b0:1c:
                    45:af:c6:75:be:25:c6:28:2f:d0:56:ef:9e:7d:42:
                    ba:bc:c9:1d:4c:fd:51:6d:05:29:31:af:13:17:cb:
                    1c:ee:d4:6d:84:b9:75:e8:33:7b:0c:01:22:55:7d:
                    4b:b2:82:24:12:6a:17:95:65:7d:ad:e0:f4:59:4f:
                    66:be:1e:fa:d3:03:44:0c:59:4f:ed:48:96:9b:ef:
                    7a:c6:39:e5:f1:df:0f:5d:2e:f8:3d:82:41:af:a7:
                    25:c0:69:60:67:3c:a3:0a:97:1e:0f:28:b0:eb:39:
                    be:bf:35:e4:2e:1f:cd:aa:0b:32:c3:0e:4d:8a:7d:
                    87:c8:3e:63:62:42:d5:42:af:26:7f:36:0e:a2:00:
                    a6:b0:40:65:8e:c8:60:20:90:d6:42:a8:ab:19:52:
                    44:ea:aa:94:f2:95:93:3e:2f:3e:07:cc:51:77:0f:
                    8e:fd:5f:1b:de:26:e0:0a:15:72:bc:05:31:b0:4d:
                    6f:02:83:0e:d6:dc:4f:e8:50:1e:ff:80:86:26:60:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FB:D8:12:51:73:4B:78:86:D3:58:AF:9B:60:50:28:AD:9B:2D:D6
            X509v3 Authority Key Identifier:
                keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:28:b5:4b:65:b8:c2:c8:38:e5:e4:91:da:6b:84:9d:61:8b:
         f9:43:6f:88:8c:5a:70:de:16:58:57:b4:74:a5:b8:cb:8c:c0:
         c0:7a:00:9a:6d:fd:06:60:f1:45:7f:09:bd:71:33:8d:61:b6:
         8f:76:6c:44:c0:0b:2b:93:0e:13:f8:4c:6e:f8:29:6e:e4:48:
         48:c2:15:a0:5e:bd:e5:a1:ba:52:7c:1a:73:c7:40:1c:7d:f0:
         71:4f:ff:fc:47:54:f7:9a:25:9f:37:a8:54:d2:f1:58:7b:2e:
         50:b9:96:b8:43:0e:23:34:03:b0:01:18:38:91:b4:90:b4:0e:
         45:61:f2:0b:dd:94:f2:e8:ee:d9:70:d6:d0:34:26:23:b4:03:
         2c:67:1f:25:9d:c2:80:ca:2b:74:e4:f9:14:b2:1a:e1:01:0c:
         8e:25:48:b9:43:a8:70:10:2d:83:4d:99:19:4b:f9:a8:4c:75:
         29:4f:31:32:78:bd:99:c2:7e:ba:eb:31:c8:8d:65:2c:04:52:
         5f:3e:12:85:de:cf:08:38:ba:98:c7:d9:8f:43:bf:60:2c:16:
         94:7b:bc:ee:15:43:9c:48:73:01:87:34:b9:47:e6:8b:76:bc:
         b5:bc:1f:f5:67:09:d2:b3:d5:38:62:c6:80:b1:02:85:8f:94:
         98:5d:06:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:41:02 2025 by rpki-client