Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          7UPNIMNTpVMWiH8nX3FeZswPniJg1WczoEWiks4XPuM=
Subject key identifier:   00:9F:56:40:AE:4C:8D:44:2D:C3:A8:73:A4:CA:43:52:D7:49:9A:8D
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       01987373E40387462DE2137112FE542115F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          0264
Signing time:             Mon 04 Aug 2025 05:00:31 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:31 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:31 +0000
Files and hashes:         1: 0b5iGIeuo2DKMNvHl9YT-o9ecPk.roa (hash: /wSlkj/hp/zdqNdystfvelHxMMMnIXaQ57KuV+lO360=)
                          2: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: xzS6kVBJnXFZ4cACh88dQFryJEYhtRjB1DbStfoQtEU=)
                          3: ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa (hash: KSKzI9P0WUD8e51fYFO9/Pub+6R71g7f3EQIV1FBw9c=)
                          4: PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa (hash: yqj+o3D869BdUEpdNxfbAfsWgWZ/Cc+Y5gzfpaAYQRA=)
                          5: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
                          6: U-U_Tkm4xBBrlekFBtQjiXrIauU.roa (hash: 41TyEm79tZ+O3IraL+NOA9wwTefMXNRXTAYZJHoHXZs=)
                          7: daT_tlHA6Qk4P5c_mAKg_30bQto.roa (hash: 8QeryI1AvWB8IxUm5wUjKihb2jduD7+5c0+oE2ozl40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:73:e4:03:87:46:2d:e2:13:71:12:fe:54:21:15:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Aug  4 05:00:31 2025 GMT
            Not After : Aug  5 05:00:31 2025 GMT
        Subject: CN=009f5640ae4c8d442dc3a873a4ca4352d7499a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bf:c1:18:dc:38:51:7c:f6:e9:28:80:53:a3:
                    ea:cf:c8:b7:af:5a:7b:cb:03:88:e5:b1:9a:ef:5d:
                    84:ef:7c:99:25:25:20:b6:95:73:e7:4a:31:fc:1f:
                    a7:d7:36:43:71:0e:e6:f8:fd:e2:37:1f:97:a5:c0:
                    16:b8:c6:c5:99:e8:ec:34:96:68:ca:81:ce:14:03:
                    b1:19:63:8e:45:5a:7c:5b:90:a6:f2:2b:02:ae:41:
                    41:a6:84:11:21:e9:37:97:29:14:b0:ef:2e:52:25:
                    32:b1:e3:cb:41:d2:5e:b7:f8:ad:f0:dc:1c:1d:5d:
                    e2:75:1b:6a:22:d9:76:3b:6b:36:60:de:1c:0f:a6:
                    8f:aa:f7:22:c2:f6:04:bb:b1:fd:1b:08:3e:ca:31:
                    35:86:98:ab:92:1b:03:aa:38:68:e2:41:a2:10:0a:
                    85:eb:98:a1:b2:0b:eb:0c:76:da:f0:5d:a1:97:ac:
                    63:1c:bc:9f:d6:1b:e6:08:b8:85:2d:d0:63:c5:ff:
                    5c:b1:e7:f1:df:87:4d:db:d7:6e:1f:07:77:bb:26:
                    9c:0e:bf:24:35:a6:e6:6d:19:e3:18:d0:5d:a6:d8:
                    5f:65:08:e2:85:0d:45:a0:1b:67:6b:ce:d1:60:ce:
                    3e:32:10:61:52:aa:a6:70:4f:a8:5a:37:ce:83:9f:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9F:56:40:AE:4C:8D:44:2D:C3:A8:73:A4:CA:43:52:D7:49:9A:8D
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:83:af:c3:e2:c8:2d:d9:2d:24:d5:21:26:4d:07:fd:86:a2:
         50:ae:0e:45:4e:5d:b6:90:ca:a2:3d:f6:ab:85:de:14:e8:d8:
         e7:e9:43:23:f9:75:a4:f1:97:54:e3:3d:8a:89:75:d7:2f:b8:
         08:02:4c:e0:4d:3a:93:63:47:22:b8:a9:f9:e7:f0:ce:81:77:
         20:e3:76:07:65:32:63:4e:3b:4c:10:27:72:db:42:a9:e6:b2:
         3c:a2:6d:61:7e:77:b2:17:3e:de:00:11:53:c2:f7:c0:04:a7:
         9f:d9:62:92:0f:a2:2c:b0:1a:17:66:b5:1d:a6:0c:23:9d:d5:
         bd:03:77:fb:f8:a7:33:0f:13:cc:6b:4d:dd:7f:a6:87:cd:7b:
         3f:a7:4e:b1:e8:11:48:fc:0a:8d:28:ba:77:3c:7d:0c:3a:c5:
         5f:69:cf:73:e4:1b:85:6b:28:89:d6:7a:04:d1:36:35:7c:d2:
         83:7e:80:2b:b7:d5:54:f0:19:20:91:c2:07:02:1b:b8:21:0c:
         f3:93:9d:39:d3:20:18:c9:da:b3:22:45:b3:16:ed:40:0f:36:
         38:2a:9c:31:65:fc:3a:c9:58:f8:23:82:f7:49:eb:96:38:a7:
         4a:c6:8a:fa:c4:23:00:13:7e:f6:b6:a3:33:37:8e:fd:1e:6f:
         d1:9b:5a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:33 2025 by rpki-client