Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
File:                     ecfqTTn1y19FhgoJ6jgz74rdaCg.mft (raw, json)
Hash identifier:          lJrl9AcKbFp3daYeWAv/KkfWLKJOxIdjNxw3Hkao9nU=
Subject key identifier:   1A:A4:15:F7:11:D2:35:3B:25:E4:C4:07:EE:31:98:43:E6:FA:FE:F1
Authority key identifier: 79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28
Certificate issuer:       /CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
Certificate serial:       0198933632F95CA64643A779E774D73FC01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
Manifest number:          1021
Signing time:             Sun 10 Aug 2025 09:00:59 +0000
Manifest this update:     Sun 10 Aug 2025 09:00:59 +0000
Manifest next update:     Mon 11 Aug 2025 09:00:59 +0000
Files and hashes:         1: FciP2xwcV3xPRtnXfSiCoZ9ZeYM.roa (hash: qFj6Ki0fNJUUk7+HsdPDeunKpSbjzg1RQIOCqYO9NpQ=)
                          2: ecfqTTn1y19FhgoJ6jgz74rdaCg.crl (hash: LQQq5S10ZZlxirsD6ZETe712tgu17dKOWbiV1GdxGc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:36:32:f9:5c:a6:46:43:a7:79:e7:74:d7:3f:c0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c7ea4d39f5cb5f45860a09ea3833ef8add6828
        Validity
            Not Before: Aug 10 09:00:59 2025 GMT
            Not After : Aug 11 09:00:59 2025 GMT
        Subject: CN=1aa415f711d2353b25e4c407ee319843e6fafef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:46:b4:03:96:78:09:36:cc:6b:eb:03:28:52:
                    f1:15:a4:a7:67:69:39:73:30:0b:38:bc:7c:13:33:
                    2f:1c:c5:02:31:b6:2e:29:da:6d:9f:bc:6c:af:5b:
                    c9:ff:ec:6a:94:4b:04:f6:ab:58:61:f7:e3:f2:60:
                    83:da:b1:0a:7c:75:72:0e:78:e4:57:8e:39:32:0a:
                    c8:96:3c:08:49:44:16:6b:c3:f0:8a:1f:6f:30:88:
                    df:5b:09:92:1c:1c:3e:cc:61:cd:4e:f2:9e:f2:88:
                    61:24:0a:94:3c:ce:7b:d7:e2:56:e8:6f:90:55:2a:
                    c9:2b:81:99:6a:89:fb:a8:04:44:34:4d:16:cf:01:
                    7d:38:aa:f0:c6:9b:ab:78:22:24:9f:36:21:dc:f7:
                    3e:53:d1:75:50:a0:c2:f1:ae:77:9f:c4:5b:1d:b4:
                    b8:c7:96:20:58:1e:63:be:15:c2:0d:91:90:b2:47:
                    04:4b:20:e5:da:7e:42:bb:d2:29:d9:82:f3:76:ef:
                    da:98:36:20:91:27:f8:3f:0f:cd:da:c7:3d:f8:f2:
                    c1:64:98:c4:09:ce:06:6e:2b:e4:37:b7:7c:64:32:
                    f7:7b:bf:2e:17:f3:16:af:1e:31:33:a8:48:07:f0:
                    78:75:7c:6c:b6:13:cd:22:ca:c7:e6:f6:91:22:13:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A4:15:F7:11:D2:35:3B:25:E4:C4:07:EE:31:98:43:E6:FA:FE:F1
            X509v3 Authority Key Identifier:
                keyid:79:C7:EA:4D:39:F5:CB:5F:45:86:0A:09:EA:38:33:EF:8A:DD:68:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecfqTTn1y19FhgoJ6jgz74rdaCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/beed93-4170-4f68-a392-28bf3d90bd7b/1/ecfqTTn1y19FhgoJ6jgz74rdaCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a8:97:01:3e:0b:82:fe:a6:8b:30:15:0a:90:fd:b2:b8:3e:
         2f:37:ba:2d:65:82:31:75:b3:ee:c3:68:0a:50:93:05:ba:67:
         1c:55:c6:c2:86:e7:c9:6f:06:cc:fc:ca:6e:da:6a:d8:9b:02:
         c1:3d:c4:a5:e0:cd:22:c6:bb:b6:7a:80:c5:3b:66:66:c1:aa:
         a3:65:03:4c:72:a6:3c:bf:ca:23:f1:9d:54:32:b0:73:f7:de:
         9b:7f:43:03:0d:d0:7e:43:c7:b1:79:ac:88:cc:26:7b:74:0b:
         55:ac:96:5f:ac:dd:9b:92:54:c0:41:3b:6a:c6:1e:9a:0d:83:
         85:54:37:43:9b:c7:c4:e1:c4:6e:40:7c:2c:94:bb:88:a8:46:
         96:bb:b0:61:24:5e:e3:a5:a3:52:8b:3e:fd:ce:25:a3:29:93:
         a5:a1:5e:68:c7:1f:2f:47:cf:48:dd:ff:84:c0:94:85:b3:e7:
         cc:ae:ce:26:12:21:43:fe:6f:99:02:f8:fc:90:cb:9e:19:1e:
         11:22:6c:fb:08:a1:62:0a:93:db:f5:10:0a:f3:ae:17:21:08:
         a7:de:4c:e8:c5:9c:3b:ef:a9:52:12:62:46:05:43:41:35:02:
         5d:f2:de:ff:04:83:e9:52:96:0b:b2:77:05:f0:44:fe:71:ab:
         d3:f7:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:02 2025 by rpki-client