Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
File:                     eMceZc96PS4vwrjMPUPUXSs1DfM.mft (raw, json)
Hash identifier:          c7OG4kllFolozLkMaBYV97RdslemdzTCp71OG7KsdVg=
Subject key identifier:   55:3B:F6:0C:9C:82:54:8F:94:B6:F8:97:19:D3:BB:E7:5C:82:E9:8E
Authority key identifier: 78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3
Certificate issuer:       /CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
Certificate serial:       019891B5C2DD080BF81929D3AF49EF8ED43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
Manifest number:          1625
Signing time:             Sun 10 Aug 2025 02:01:04 +0000
Manifest this update:     Sun 10 Aug 2025 02:01:04 +0000
Manifest next update:     Mon 11 Aug 2025 02:01:04 +0000
Files and hashes:         1: Ox2PlsCArfAxGifmEfuqjyRe0E4.roa (hash: P6BNeUEGLL42TOaGFO8umGbX15BxZNmI6g3Fgb2PRFA=)
                          2: eMceZc96PS4vwrjMPUPUXSs1DfM.crl (hash: z+sFR2vOCsK45eR7rmZIT5xQhPPMfu7KY3Zg+hy/0SY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:b5:c2:dd:08:0b:f8:19:29:d3:af:49:ef:8e:d4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c71e65cf7a3d2e2fc2b8cc3d43d45d2b350df3
        Validity
            Not Before: Aug 10 02:01:04 2025 GMT
            Not After : Aug 11 02:01:04 2025 GMT
        Subject: CN=553bf60c9c82548f94b6f89719d3bbe75c82e98e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:02:42:9f:cd:02:f7:37:33:21:18:f6:39:b7:
                    15:37:2c:a5:89:0c:50:44:6e:71:ba:f3:5b:1f:27:
                    57:ba:62:fd:b0:d2:90:2a:0b:f6:00:fb:17:51:2b:
                    72:ed:b4:11:55:b4:f7:eb:35:25:b7:90:1c:b1:0a:
                    ce:a5:91:29:d8:e8:4e:e2:0d:e7:b7:31:e3:cf:67:
                    39:9f:de:2c:8a:ca:d6:f5:58:78:7f:15:e3:0d:f7:
                    ff:7d:3b:93:a3:69:79:82:9b:33:6a:54:fd:f2:1a:
                    a7:35:e6:d9:da:a2:8f:6a:0a:8d:32:fa:b9:35:b1:
                    5c:f1:ad:6d:f9:a7:21:a0:44:86:a1:09:f7:fd:94:
                    db:c9:5a:bc:96:fc:81:d0:e8:59:da:53:22:a3:7e:
                    29:97:9c:95:d1:39:7c:28:ae:7e:c4:6f:7e:43:20:
                    db:8f:2d:f6:d8:f0:09:56:c6:ed:8d:1f:3b:a2:e5:
                    a1:7e:39:ac:f3:79:bb:40:15:ba:d4:03:a2:53:d7:
                    62:39:05:aa:e5:15:32:48:e7:19:87:5e:5d:1d:07:
                    2e:78:c5:80:5e:0f:44:41:c8:8d:0b:dc:8d:7e:61:
                    e8:80:1b:c9:f8:a3:78:51:82:c7:21:f9:f1:0c:12:
                    08:a5:da:3c:c7:c7:ca:b4:46:ac:86:ac:de:73:20:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3B:F6:0C:9C:82:54:8F:94:B6:F8:97:19:D3:BB:E7:5C:82:E9:8E
            X509v3 Authority Key Identifier:
                keyid:78:C7:1E:65:CF:7A:3D:2E:2F:C2:B8:CC:3D:43:D4:5D:2B:35:0D:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMceZc96PS4vwrjMPUPUXSs1DfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fb0280-9d86-4c11-89d1-87881127fcbf/1/eMceZc96PS4vwrjMPUPUXSs1DfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:c3:81:c0:a9:7b:38:26:19:23:8e:8d:ea:c4:de:80:ef:e6:
         bf:6e:72:b5:e1:ea:6b:49:fa:dc:7a:bf:21:e9:39:47:2c:cb:
         69:fa:46:3c:86:3a:3a:c5:25:f4:33:bb:d9:22:28:79:ea:91:
         f3:b4:75:b4:c3:4d:da:f2:89:fd:ef:c7:79:a9:36:e8:b7:c2:
         04:6c:81:fd:d2:19:6f:87:45:ca:84:24:ed:62:d6:07:2b:df:
         70:05:fb:44:49:e6:5e:ab:fb:f4:90:fc:f5:da:09:da:2b:22:
         3c:bd:85:1d:df:f3:f9:12:b6:e7:a8:38:a6:53:b3:e2:ba:03:
         f2:6d:0b:29:ba:72:f1:93:0d:84:c2:85:22:3e:af:32:d9:8f:
         f5:02:e6:a2:da:e1:a1:c5:cc:36:23:0e:26:08:76:37:25:ad:
         a0:5b:2f:f4:e3:9e:e4:22:b3:b7:ad:ee:2e:09:ac:78:66:3d:
         24:5c:38:9d:39:f2:a4:55:e1:24:91:29:06:1f:b9:04:35:90:
         89:cb:7d:05:aa:f2:0c:4f:36:42:8d:77:e0:52:64:32:30:c8:
         4c:44:bb:d9:19:4d:ee:63:18:01:87:12:8f:95:39:d7:cd:db:
         d8:a4:7f:17:4e:82:5b:a0:2d:cd:46:1f:3a:57:4d:d3:6c:40:
         fa:8e:99:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:22 2025 by rpki-client