Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
File:                     EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft (raw, json)
Hash identifier:          yfY8lcvaYw6Go5d8KdmqtHikr2iaeRlolqYr0Dajd9k=
Subject key identifier:   68:27:10:58:40:1B:F4:0F:AA:B8:41:37:8F:BE:60:E5:C3:A0:02:43
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       019A00D9F110FDACE06345F8B9CFF58B3265
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
Manifest number:          07F0
Signing time:             Mon 20 Oct 2025 09:01:14 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:14 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:14 +0000
Files and hashes:         1: EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl (hash: HNQvhjU8m0SoGYCu/TGbOjnw4+pFwHV78i6fLribElk=)
                          2: qs7BbSv0fO0BPXU-Iz3031gKExA.roa (hash: doqNGmfmNSThnCzcC+uqauIEfH+4+SUm/6IU5DxkDTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:d9:f1:10:fd:ac:e0:63:45:f8:b9:cf:f5:8b:32:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: Oct 20 09:01:14 2025 GMT
            Not After : Oct 21 09:01:14 2025 GMT
        Subject: CN=68271058401bf40faab841378fbe60e5c3a00243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:5c:90:50:f4:f5:ac:63:4b:f5:d9:6e:09:
                    b3:1b:83:83:b1:dd:4e:ea:cc:c1:61:d7:e6:e2:9c:
                    23:50:65:34:32:c5:b4:45:a5:5c:78:c1:b8:57:14:
                    f5:2e:69:0b:d7:a6:6e:53:ae:38:64:c8:0e:8d:e3:
                    0b:57:88:64:61:bf:8e:d5:24:72:bf:8f:16:28:4b:
                    fc:2c:8b:2d:30:93:08:19:f1:60:61:47:07:f3:51:
                    e7:01:4f:55:30:9f:6a:d6:27:e1:ff:f1:ef:df:f4:
                    ba:b2:30:86:9a:e6:33:b5:14:bf:93:89:e5:e3:94:
                    c9:8d:2f:ad:eb:30:e8:25:b8:63:28:f4:9b:29:eb:
                    e5:ab:a3:c1:ae:51:ad:d9:60:b8:72:93:b3:f3:c0:
                    30:a1:7a:20:e9:6b:59:b7:b5:00:2c:bd:4c:af:19:
                    3f:02:4a:58:ee:5b:bb:33:25:4e:7d:5c:df:cb:5e:
                    8a:cd:a2:23:68:0b:33:01:48:ab:0b:c5:e4:7a:85:
                    92:b8:4a:4d:0c:de:80:11:2b:3a:27:2f:fa:5a:bc:
                    18:09:ca:a7:39:9d:d3:0b:77:a7:67:d0:29:56:9a:
                    20:73:ac:6e:5b:0d:04:ff:a3:80:6e:87:73:d1:54:
                    d5:38:c8:7e:a7:c6:6a:75:92:48:6e:59:7b:38:4a:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:27:10:58:40:1B:F4:0F:AA:B8:41:37:8F:BE:60:E5:C3:A0:02:43
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:34:20:09:80:da:0a:0a:7d:70:15:9b:ec:a8:bd:17:56:a3:
         09:08:21:cc:a1:cb:18:ee:24:b0:59:b1:8e:be:2b:f4:65:42:
         de:82:c0:b4:0d:40:f0:dc:1c:61:dc:1a:e9:33:f7:5d:93:6d:
         43:09:4f:93:a2:5e:26:6b:aa:65:6f:46:37:2d:5b:b7:72:90:
         93:c7:2a:8d:a5:bf:7d:5b:14:4e:f7:19:51:04:27:40:f2:8b:
         cb:43:d7:57:e3:4e:44:76:67:76:2e:56:12:56:23:ed:8f:01:
         9e:9e:7a:87:0f:4c:43:f8:a3:1c:89:4d:f2:3c:46:7d:2d:c0:
         8a:80:28:f4:46:49:12:4c:97:a5:d9:86:a2:6b:43:f0:ea:09:
         8a:ec:59:1a:5b:60:af:11:9a:31:2e:9a:24:85:b8:b4:13:1e:
         9f:20:b2:c8:a6:e5:85:44:37:dc:e9:02:e1:14:71:5e:93:d7:
         6d:a5:2c:dd:64:92:be:d1:8b:92:97:bb:c2:7e:3e:b3:75:0d:
         02:11:eb:1e:fa:c3:58:d8:f9:02:e3:02:47:46:16:5a:72:57:
         b4:76:c5:81:88:e2:f6:b9:aa:a7:73:ad:42:a7:dd:c9:41:c4:
         77:df:e0:1b:9b:59:dd:53:da:1c:6f:56:69:04:ad:ce:2e:2a:
         60:9e:a5:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2fEQ/azgY0X4uc/1izJlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTcwNDU3ZWJkZWU1OTRiMDcxNDQyMDQ0NTQ3MDZjZWFh
ZjZiZjYwHhcNMjUxMDIwMDkwMTE0WhcNMjUxMDIxMDkwMTE0WjAzMTEwLwYDVQQD
Eyg2ODI3MTA1ODQwMWJmNDBmYWFiODQxMzc4ZmJlNjBlNWMzYTAwMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G5ckFD09axjS/XZbgmzG4ODsd1O
6szBYdfm4pwjUGU0MsW0RaVceMG4VxT1LmkL16ZuU644ZMgOjeMLV4hkYb+O1SRy
v48WKEv8LIstMJMIGfFgYUcH81HnAU9VMJ9q1ifh//Hv3/S6sjCGmuYztRS/k4nl
45TJjS+t6zDoJbhjKPSbKevlq6PBrlGt2WC4cpOz88AwoXog6WtZt7UALL1Mrxk/
AkpY7lu7MyVOfVzfy16KzaIjaAszAUirC8XkeoWSuEpNDN6AESs6Jy/6WrwYCcqn
OZ3TC3enZ9ApVpogc6xuWw0E/6OAbodz0VTVOMh+p8ZqdZJIbll7OEqWYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgnEFhAG/QPqrhBN4++YOXDoAJDMB8GA1UdIwQY
MBaAFBLnBFfr3uWUsHFEIERUcGzqr2v2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVjRVYtdmU1WlN3Y1VRZ1JGUndiT3F2YV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yYzBiOGUtYzcyNi00MDAwLThkZmUt
OTUxOGRhYTE3YWU3LzEvRXVjRVYtdmU1WlN3Y1VRZ1JGUndiT3F2YV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yYzBiOGUtYzcyNi00MDAwLThkZmUtOTUxOGRhYTE3YWU3
LzEvRXVjRVYtdmU1WlN3Y1VRZ1JGUndiT3F2YV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzQgCYDa
Cgp9cBWb7Ki9F1ajCQghzKHLGO4ksFmxjr4r9GVC3oLAtA1A8NwcYdwa6TP3XZNt
QwlPk6JeJmuqZW9GNy1bt3KQk8cqjaW/fVsUTvcZUQQnQPKLy0PXV+NORHZndi5W
ElYj7Y8Bnp56hw9MQ/ijHIlN8jxGfS3AioAo9EZJEkyXpdmGomtD8OoJiuxZGltg
rxGaMS6aJIW4tBMenyCyyKblhUQ33OkC4RRxXpPXbaUs3WSSvtGLkpe7wn4+s3UN
AhHrHvrDWNj5AuMCR0YWWnJXtHbFgYji9rmqp3OtQqfdyUHEd9/gG5tZ3VPaHG9W
aQStzi4qYJ6loQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:14:23 2025 by rpki-client