Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
File:                     EB_ffImYkkKRmDV1nJti-Mxp1JI.mft (raw, json)
Hash identifier:          tKR7ndKwZMphxs9wWIeQbDfrSIG/O1jTZdmrdZYop0A=
Subject key identifier:   7D:42:27:3F:07:92:B3:04:0F:C7:98:3F:EB:5F:D6:22:2E:C8:6A:C4
Authority key identifier: 10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92
Certificate issuer:       /CN=101fdf7c89989242919835759c9b62f8cc69d492
Certificate serial:       0198752BBF803A1B485CD456FBE62DC0ADE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 13:00:58 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:58 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:58 +0000
Files and hashes:         1: EB_ffImYkkKRmDV1nJti-Mxp1JI.crl (hash: dx8vzZW0Dj/Nd89PfgfPVc/bZyxd4GK6vy4l5Hcp3XI=)
                          2: IL6WQT4jQ4_C4d_P8m9v2yHVI6U.roa (hash: 9J+kDdJE2+cu7NB25/bKTQ6/hAIRTzrqadiukiS4eVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:bf:80:3a:1b:48:5c:d4:56:fb:e6:2d:c0:ad:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101fdf7c89989242919835759c9b62f8cc69d492
        Validity
            Not Before: Aug  4 13:00:58 2025 GMT
            Not After : Aug  5 13:00:58 2025 GMT
        Subject: CN=7d42273f0792b3040fc7983feb5fd6222ec86ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:5b:fa:6b:0c:0f:74:59:4e:11:d6:9c:e4:
                    5c:c2:30:85:73:89:e5:9c:88:e8:2e:71:36:70:7a:
                    ab:6a:de:fa:d0:de:a5:54:6b:ab:dc:11:66:89:bf:
                    5b:85:bf:dd:97:57:46:f6:40:d3:2b:db:51:e1:6a:
                    f6:57:5c:4a:5f:c4:9d:84:50:0c:d3:b8:a2:d9:26:
                    e1:2c:b0:55:ff:e2:d5:35:c3:57:ff:ec:1b:68:33:
                    5a:06:2a:39:23:39:44:68:f5:f5:a6:06:01:ce:4f:
                    d4:fe:cb:88:b1:6b:f7:53:70:17:6c:ed:f1:31:88:
                    cb:de:7c:ae:4f:09:96:cf:32:55:a8:7c:f9:88:b6:
                    05:c0:d2:ed:5a:bf:77:81:4c:4f:00:da:d1:99:cb:
                    dc:5e:38:e5:a9:93:88:94:48:71:7b:4f:64:fd:b1:
                    d4:a2:ff:18:f9:6e:26:fa:67:4f:25:3d:0a:43:62:
                    ca:65:c1:b4:bb:06:a7:20:ed:e9:5b:93:ea:b9:7a:
                    af:86:ec:ab:56:b5:eb:07:5f:32:ff:68:a7:ed:50:
                    42:e1:16:eb:0e:0d:78:0d:bf:e1:6c:2f:0d:07:cb:
                    ea:eb:5b:f1:86:b7:ed:74:0c:6e:0e:56:6f:c0:2f:
                    64:8f:e5:a9:60:be:f4:a3:52:f2:44:a2:35:c5:4d:
                    48:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:27:3F:07:92:B3:04:0F:C7:98:3F:EB:5F:D6:22:2E:C8:6A:C4
            X509v3 Authority Key Identifier:
                keyid:10:1F:DF:7C:89:98:92:42:91:98:35:75:9C:9B:62:F8:CC:69:D4:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EB_ffImYkkKRmDV1nJti-Mxp1JI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3f220f-158f-47f9-b296-688f60fe6add/1/EB_ffImYkkKRmDV1nJti-Mxp1JI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:c6:d3:94:64:c7:6c:4c:6d:e2:7b:5d:05:5c:b8:7f:22:
         c6:8f:5c:51:5e:01:6c:41:91:96:c7:96:3d:19:82:c5:65:89:
         2a:26:85:a2:8e:b3:8e:21:02:76:58:e2:98:d8:ba:f3:86:a0:
         94:ee:ec:7a:53:8b:8d:99:12:bc:c6:57:fc:42:0b:53:93:94:
         b0:8f:2e:6b:8a:e7:01:5d:1d:0a:d8:c9:c0:8f:ee:9f:02:30:
         9a:23:b5:59:e7:c4:b3:6a:77:d1:5c:63:46:e9:6e:c4:ec:fe:
         84:4c:bd:65:e3:2d:72:ed:74:6f:1f:3d:28:c6:d1:4e:40:a8:
         d8:ba:b7:20:8b:1a:14:1e:a1:bb:33:d2:d5:b0:82:ee:aa:40:
         4b:2e:75:10:64:02:18:2c:90:35:6c:0a:f5:5a:b4:ee:f3:4d:
         d7:66:81:4b:9f:1c:01:2c:28:20:41:16:3a:f8:ae:f0:19:84:
         6b:b9:ac:53:e6:8c:89:c8:e1:63:4c:4d:63:3a:0b:b6:e6:cc:
         4c:5b:f4:79:c9:0a:5a:15:20:c2:8e:f1:3d:27:2e:c1:19:f1:
         64:ac:ec:e1:65:c9:04:8f:65:df:74:61:1e:4e:ff:48:59:dd:
         84:a7:18:d0:a0:70:47:a6:9b:dd:f8:1b:e0:17:04:91:67:98:
         a8:95:e0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:17 2025 by rpki-client