Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
File:                     eeOR1_ik51JOBfUxkEKdsk2fs6c.mft (raw, json)
Hash identifier:          8O1FJXYNOMo7bng3XM6a3uYX8S0GxGWXp5jnCf5r5MU=
Subject key identifier:   FB:22:A2:A8:84:20:42:00:CA:37:EB:2C:50:7C:D2:62:F0:98:4F:5E
Authority key identifier: 79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7
Certificate issuer:       /CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
Certificate serial:       01987C77E652546F74E5AB448F0118F41220
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
Manifest number:          0487
Signing time:             Tue 05 Aug 2025 23:01:29 +0000
Manifest this update:     Tue 05 Aug 2025 23:01:29 +0000
Manifest next update:     Wed 06 Aug 2025 23:01:29 +0000
Files and hashes:         1: eeOR1_ik51JOBfUxkEKdsk2fs6c.crl (hash: 5H/3ydPmEHXJvlZ1xBBlJO/Xy8RJ3k0VI/8zfoZhjF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:e6:52:54:6f:74:e5:ab:44:8f:01:18:f4:12:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e391d7f8a4e7524e05f53190429db24d9fb3a7
        Validity
            Not Before: Aug  5 23:01:29 2025 GMT
            Not After : Aug  6 23:01:29 2025 GMT
        Subject: CN=fb22a2a884204200ca37eb2c507cd262f0984f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7b:d6:a0:f7:27:07:db:b8:0f:67:48:df:24:
                    b7:04:9b:67:e8:b7:b1:4d:43:de:47:87:17:af:69:
                    bf:fc:c2:0a:79:90:61:b2:6c:3f:60:c3:ef:21:1d:
                    55:a3:f6:09:16:93:91:00:d1:08:bb:fd:71:c2:e0:
                    ac:bd:cb:a5:ad:c0:e4:b2:a6:32:88:e3:37:b4:6a:
                    0a:de:d6:a8:62:14:a1:23:9e:cf:a1:f3:1a:8e:57:
                    6c:14:33:26:b4:e9:92:50:01:39:9d:2d:d1:cc:ae:
                    af:32:89:f5:2e:a6:68:98:d8:93:7f:ba:7c:a5:cb:
                    d9:e0:8d:ad:03:ea:73:70:59:d7:28:59:e3:66:cc:
                    1b:75:4e:f7:ab:f8:fd:f3:d8:70:65:96:5e:c6:90:
                    69:25:b4:02:76:1c:c5:db:15:e4:b2:72:63:7e:34:
                    97:04:47:df:9c:a4:7d:cf:b0:25:60:2c:2f:a4:0d:
                    a7:8c:a9:e5:8d:19:b7:9f:19:f9:6d:a6:92:74:fe:
                    16:4f:e0:bb:bf:6f:72:53:47:89:2d:39:e0:c3:a4:
                    29:bd:7e:a1:26:e6:e6:f7:94:d3:16:69:96:9f:e6:
                    02:d8:ac:6c:8e:58:0f:d8:6d:e3:17:1f:14:c5:11:
                    82:a9:2d:2a:49:87:eb:52:8d:2e:99:45:7c:12:39:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:22:A2:A8:84:20:42:00:CA:37:EB:2C:50:7C:D2:62:F0:98:4F:5E
            X509v3 Authority Key Identifier:
                keyid:79:E3:91:D7:F8:A4:E7:52:4E:05:F5:31:90:42:9D:B2:4D:9F:B3:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeOR1_ik51JOBfUxkEKdsk2fs6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0d1664-bf71-4dbb-83e6-a01f760dd4c9/1/eeOR1_ik51JOBfUxkEKdsk2fs6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:97:8a:ea:48:ad:36:8a:51:c2:50:c5:d5:53:06:f7:d1:
         34:e8:12:02:11:de:c2:bf:15:3c:89:b0:d8:e8:96:ac:65:7a:
         a1:7e:dc:f7:9a:d0:c5:aa:ca:92:bc:2a:f7:60:5b:0f:af:84:
         6b:1c:be:04:99:d3:bb:ee:d3:fc:59:da:e4:15:dc:00:c4:86:
         af:4c:dc:f0:31:1c:9b:12:67:e2:c6:d4:83:5c:c4:c7:2d:d6:
         b1:9e:50:e2:72:2f:c5:80:45:0a:f7:88:26:49:5e:22:8e:2f:
         b8:1e:bf:4f:0d:e0:29:b7:28:7a:f4:6b:b4:58:af:4e:1e:b8:
         e4:d8:1b:5b:65:55:ec:85:25:9d:97:e9:6c:cf:aa:71:00:00:
         11:0a:da:4e:58:6d:c9:f3:a1:76:0f:f6:13:ad:e9:5f:23:e1:
         36:ea:af:b2:2b:be:68:08:5e:1c:51:22:d2:3f:29:51:94:a7:
         c5:13:5b:0c:ad:fc:d1:6a:03:d9:01:ee:d2:28:40:92:7c:0b:
         2a:96:47:52:2f:9e:07:15:c5:45:f9:65:ea:42:80:74:ec:6e:
         08:bf:06:6e:c7:9f:38:b8:9e:90:3a:f6:8e:ca:a8:fd:2a:e8:
         f2:d6:5e:18:5b:9c:4f:e0:ca:39:c3:53:3e:11:7d:cf:c4:b8:
         90:78:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 03:58:09 2025 by rpki-client