Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
File:                     eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft (raw, json)
Hash identifier:          IB1eoLqdnur7ufa8iUpufL7tPhT2dKg+xFXMnArRBlU=
Subject key identifier:   7F:C9:71:DE:F6:49:2E:70:60:F4:27:04:73:09:1C:6A:01:7C:3B:2D
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Certificate issuer:       /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial:       01987A1B61D3B9CA178EDB3B8E19744F393B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
Manifest number:          09B9
Signing time:             Tue 05 Aug 2025 12:01:11 +0000
Manifest this update:     Tue 05 Aug 2025 12:01:11 +0000
Manifest next update:     Wed 06 Aug 2025 12:01:11 +0000
Files and hashes:         1: PdsL1QIufBp1-T3K_XfThRkiT3U.roa (hash: +4B0qi2WhOye5FLxCssPTw5AZEQLxXaabp4DquNRebA=)
                          2: eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl (hash: 5VBkFLKqL7wRQNqAshDztiJEh+D4V/V0hkaHiE1dlRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:1b:61:d3:b9:ca:17:8e:db:3b:8e:19:74:4f:39:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
        Validity
            Not Before: Aug  5 12:01:11 2025 GMT
            Not After : Aug  6 12:01:11 2025 GMT
        Subject: CN=7fc971def6492e7060f4270473091c6a017c3b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:6a:57:15:fe:82:13:76:f3:7f:1f:fa:a8:
                    67:ac:25:1b:0b:4f:f1:49:7a:43:4e:76:0c:69:15:
                    a9:6c:7c:4e:a0:6d:36:4a:14:b0:81:8f:d2:9a:38:
                    3a:51:09:67:ad:db:57:f5:b8:37:bc:35:9d:85:9d:
                    68:6d:3e:26:1e:ce:ac:7a:89:e7:bc:fd:f1:45:d4:
                    40:27:f9:b2:b3:c3:74:f6:63:f3:6d:bb:69:d1:7d:
                    63:a4:97:57:0a:64:3b:15:7d:1c:be:9c:94:fe:e9:
                    ec:d5:cd:e3:8c:90:6d:83:64:ce:85:84:9a:02:8b:
                    c3:3d:9b:99:92:89:16:b3:f9:f0:49:f4:4a:9c:91:
                    77:ab:25:20:db:f9:9a:0b:01:5f:68:78:1c:88:5e:
                    b1:7f:a8:f8:00:5b:df:fd:7e:cc:9f:2c:86:1d:be:
                    bf:12:c4:73:bf:14:ab:2c:ee:8e:2c:a6:60:6f:d9:
                    56:d5:dc:8f:5e:8e:64:d3:16:93:e7:45:46:7c:e0:
                    bd:e5:8c:f1:8e:c7:ba:25:82:80:78:4f:81:73:6f:
                    0f:1b:cb:3d:e8:7c:b3:95:60:92:e2:b3:31:6f:22:
                    0b:73:0f:67:8c:d3:d1:35:54:43:f8:fe:ca:07:ad:
                    44:e1:96:c1:ab:1e:68:81:6f:33:64:1f:fe:14:bf:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C9:71:DE:F6:49:2E:70:60:F4:27:04:73:09:1C:6A:01:7C:3B:2D
            X509v3 Authority Key Identifier:
                keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:48:c0:31:c2:3b:33:fc:05:6d:c3:19:e7:7c:ef:c3:d5:98:
         5e:9d:1f:82:36:0b:f6:c9:e8:06:a4:14:e4:03:8a:7f:16:c6:
         99:93:90:80:a1:6c:f0:9a:44:2d:15:95:de:9b:67:17:1b:02:
         dd:f9:25:c8:0b:b4:10:48:a2:5d:fa:5a:c8:cf:7d:50:1e:ed:
         d3:0e:73:bf:32:f9:f0:23:4f:d7:8c:5a:0b:d9:dd:7d:d0:d4:
         77:d9:71:cd:2d:2b:d2:34:e7:1c:3b:03:35:41:fd:cb:0a:95:
         04:55:bb:17:3f:d5:ea:3e:b1:78:9e:e1:61:0b:c9:18:b9:72:
         ad:f9:d5:f0:f6:43:b8:a1:f8:c5:e5:1e:1b:76:ea:0d:68:e5:
         9f:36:b5:19:06:96:e6:ea:54:c2:d0:1b:de:62:c6:30:db:dd:
         44:be:f8:f9:78:72:56:47:1c:84:ac:f1:17:82:16:92:e7:4b:
         b3:e0:56:54:76:14:5e:9f:83:17:62:e2:8c:5e:20:35:f8:e5:
         0d:6e:1a:25:9b:3e:00:60:81:f4:fd:16:fb:14:a4:35:d7:c1:
         7f:61:37:f5:7e:8d:23:5a:55:cd:73:ba:45:14:52:ca:c8:77:
         74:7d:a5:bd:20:1a:b9:8d:0a:12:79:63:9c:4a:e9:d3:50:10:
         41:74:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:29 2025 by rpki-client