Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
File:                     EjA6ZGLbopUX3g3thzl_qeXEBS4.mft (raw, json)
Hash identifier:          BLN/YvX+50sGiM86c97bJBvOrZ4HYxbbUozwJoCyebQ=
Subject key identifier:   DF:09:19:EA:94:80:65:89:08:0C:00:50:B4:6D:C4:88:DD:68:E5:42
Authority key identifier: 12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E
Certificate issuer:       /CN=12303a6462dba29517de0ded87397fa9e5c4052e
Certificate serial:       01987DF7CDE09BECAFFCD590FF9ED42127B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
Manifest number:          0BC9
Signing time:             Wed 06 Aug 2025 06:00:48 +0000
Manifest this update:     Wed 06 Aug 2025 06:00:48 +0000
Manifest next update:     Thu 07 Aug 2025 06:00:48 +0000
Files and hashes:         1: EjA6ZGLbopUX3g3thzl_qeXEBS4.crl (hash: OOQAGHa5V+3cpsiVgmFooWWyZV1C2qnUfoGvluRZGJM=)
                          2: O8rJ_g_ovwk5yvHXqMWZfVoRoxM.roa (hash: pD6HPrgkTDleJEArLeGUbepYdRaE9Tfe7gJ5DsWObZU=)
                          3: m6x_oZHQXTbxnXXD90xWd49XI3c.roa (hash: wFHZIx8/sCXtzuW0x3sQjtMT3vRSUHOHKUyDlzMjU1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f7:cd:e0:9b:ec:af:fc:d5:90:ff:9e:d4:21:27:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12303a6462dba29517de0ded87397fa9e5c4052e
        Validity
            Not Before: Aug  6 06:00:48 2025 GMT
            Not After : Aug  7 06:00:48 2025 GMT
        Subject: CN=df0919ea94806589080c0050b46dc488dd68e542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:59:0e:eb:7a:5d:6c:ef:23:ff:cf:7c:52:3a:
                    4c:cc:59:5d:66:cc:b6:a9:d3:60:42:a3:28:3d:78:
                    c5:68:27:2f:67:ef:3d:73:04:48:54:dd:43:94:1b:
                    d9:39:f0:49:6d:24:b6:78:a2:81:86:1e:47:1d:e4:
                    6d:21:b6:73:d5:44:36:a2:7c:91:ea:02:f3:b3:da:
                    f8:b4:2c:b9:29:a2:ce:1b:83:7c:70:f9:53:f7:a9:
                    d8:fd:74:83:b9:3c:10:8c:7d:78:e6:40:74:78:8d:
                    9b:f5:95:d3:5d:7c:26:28:c9:27:70:d7:4a:fa:43:
                    bc:e6:7f:77:c7:3a:72:e9:9a:c9:6a:bd:1d:b0:aa:
                    0e:a3:4b:0f:73:70:f6:c4:dd:b0:89:25:d3:a4:43:
                    54:b9:aa:b4:33:c1:d2:93:5b:f7:a4:a7:d9:01:eb:
                    7b:df:47:45:f1:44:5c:6d:73:2d:6c:3c:29:bc:bc:
                    0a:ec:57:f1:b9:89:8c:76:41:ea:8c:10:b7:cf:5e:
                    eb:b8:39:a4:c4:2d:ad:c3:00:91:ba:76:24:60:8b:
                    7c:93:ab:03:98:c3:5e:3b:c9:1d:b2:9c:5d:71:ab:
                    f0:b8:08:49:7e:aa:f2:e0:c9:b7:88:18:b2:a9:4a:
                    da:76:66:f7:41:f0:32:3f:1e:cd:b1:1a:d4:78:df:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:09:19:EA:94:80:65:89:08:0C:00:50:B4:6D:C4:88:DD:68:E5:42
            X509v3 Authority Key Identifier:
                keyid:12:30:3A:64:62:DB:A2:95:17:DE:0D:ED:87:39:7F:A9:E5:C4:05:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjA6ZGLbopUX3g3thzl_qeXEBS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a89954-ad2f-4a48-a872-3ecf71a7115b/1/EjA6ZGLbopUX3g3thzl_qeXEBS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c4:6d:7a:85:72:18:d4:03:ef:32:a3:a7:29:92:b2:75:a8:
         b1:59:b3:06:7c:e0:be:db:75:b7:59:0d:73:9a:28:38:84:93:
         84:e3:7d:8f:23:9f:22:3c:f5:8b:54:68:c5:23:be:0f:18:0e:
         2f:11:76:67:60:bd:ad:60:28:b6:e6:b1:b5:e9:17:52:66:a0:
         fc:b1:49:1f:bb:62:9c:7c:e8:0f:2a:d0:6c:e6:8e:1e:b8:b1:
         73:11:dc:96:c5:22:eb:b4:18:d8:4f:83:1e:5d:44:d1:bc:14:
         59:b2:22:15:7a:a5:f0:27:ec:a9:be:7a:60:67:f0:58:45:bd:
         f3:a6:ec:80:4b:8d:fb:96:48:f4:b7:84:30:3e:03:99:e0:68:
         96:04:56:eb:e9:f5:86:ef:ad:c0:a0:3e:34:85:ee:c7:82:59:
         ad:e5:ae:cc:3a:e6:ec:77:e3:d0:7c:c1:01:0e:8c:d5:be:86:
         5d:90:16:a2:42:97:df:b3:54:16:4d:2a:e4:57:8d:a9:b9:f8:
         81:d3:80:b3:a4:32:b8:98:df:f4:90:0e:5d:ac:06:0b:18:ba:
         dd:f4:95:30:76:cf:0b:e3:dd:a3:b5:d1:d4:5d:0f:01:19:db:
         c5:92:a0:02:db:cd:58:9f:3f:38:20:54:5d:d4:af:1b:8b:20:
         a3:01:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:35 2025 by rpki-client