Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
File:                     eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft (raw, json)
Hash identifier:          76Crhb5mgUGMLBPmiYxXA70LRr/yDN37987Xwq1NprE=
Subject key identifier:   41:0D:E9:CC:4D:B7:76:73:AA:0F:EC:6C:CE:31:84:4B:24:F5:5D:3A
Authority key identifier: 79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53
Certificate issuer:       /CN=794f6b59b439d1769932059d198428cb806ae753
Certificate serial:       0199FFC8C8E8E67D908E7892B9186CAFA2CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
Manifest number:          1566
Signing time:             Mon 20 Oct 2025 04:02:52 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:52 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:52 +0000
Files and hashes:         1: eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl (hash: pEvtUaFvM8MK8mClox2SLvd4nyxXEov7VEMDtKR389g=)
                          2: rUKzkCWeUZuHZF9RTid_Ltn3NgM.roa (hash: M8dZkYCwYNG6gph8xMmvBysHbD2sO8kxwfhDf7bdOCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:c8:e8:e6:7d:90:8e:78:92:b9:18:6c:af:a2:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f6b59b439d1769932059d198428cb806ae753
        Validity
            Not Before: Oct 20 04:02:52 2025 GMT
            Not After : Oct 21 04:02:52 2025 GMT
        Subject: CN=410de9cc4db77673aa0fec6cce31844b24f55d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:ee:26:8f:12:2e:0f:87:dc:aa:a8:31:ab:
                    c1:e6:2f:5c:74:2c:9f:33:e1:ed:06:cf:1c:f9:e2:
                    6d:34:6f:0a:8e:3f:40:0c:2c:6c:f1:7c:da:cf:48:
                    5d:45:46:d5:09:7a:3c:43:3f:7e:1f:cc:28:97:a8:
                    de:09:ba:09:ac:69:80:89:45:ce:3b:91:4e:7b:4c:
                    88:20:55:7d:aa:35:ff:56:b5:bf:4f:d8:e9:15:02:
                    f1:1d:3e:db:62:ed:5d:e0:0b:bf:1e:73:f8:a2:a4:
                    b6:80:91:85:b2:71:f2:57:40:15:e5:e4:d6:e6:6c:
                    54:ff:96:1b:4e:ea:85:c5:9d:97:f1:19:06:10:72:
                    29:c1:5c:8d:ee:fc:ce:f0:97:a9:50:a5:af:5d:29:
                    98:61:ea:20:89:03:12:ed:b7:52:66:02:7a:d0:46:
                    be:8f:34:c2:5c:c5:72:17:99:e8:61:53:58:bb:fc:
                    11:a4:67:61:68:0b:32:a0:8d:68:9e:d4:aa:26:43:
                    70:09:c8:ac:88:7e:98:a9:81:a0:ee:8b:92:c0:a8:
                    0f:07:75:70:b7:91:d2:7a:6b:8d:b1:9e:47:17:09:
                    de:61:65:2f:97:da:1b:73:ee:5e:fa:c2:15:69:91:
                    47:38:e1:4d:e2:1a:29:1e:97:fa:ad:a5:fb:70:2a:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0D:E9:CC:4D:B7:76:73:AA:0F:EC:6C:CE:31:84:4B:24:F5:5D:3A
            X509v3 Authority Key Identifier:
                keyid:79:4F:6B:59:B4:39:D1:76:99:32:05:9D:19:84:28:CB:80:6A:E7:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9rWbQ50XaZMgWdGYQoy4Bq51M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17d0ad-801c-4814-b891-e0a652004878/1/eU9rWbQ50XaZMgWdGYQoy4Bq51M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:5e:d9:f8:a1:06:89:ba:3b:31:93:b8:57:16:cf:e5:8c:
         90:71:f2:92:54:00:bb:a8:7c:10:dc:b1:83:f0:8a:db:48:33:
         4a:8e:d8:ee:77:f3:d4:ed:ff:df:35:53:20:f4:60:50:03:0b:
         3b:8c:3d:82:aa:25:7f:cf:85:4c:88:d4:b0:0e:e8:46:80:44:
         77:7b:6b:07:0a:4c:0b:f3:66:04:e2:98:ae:2a:49:06:4b:1f:
         31:9a:49:2f:f6:14:f4:1c:ee:b5:2c:38:80:ae:80:db:55:95:
         b3:f4:12:7c:cf:ad:03:e7:f1:d8:21:c0:4c:97:a3:d9:db:15:
         31:45:93:af:1a:fb:ee:26:00:75:26:f1:fe:99:f6:55:85:bf:
         3d:a3:c5:85:85:b2:3a:01:0b:63:45:cd:55:5d:68:f9:d5:20:
         e1:d1:d5:22:7c:e7:12:49:fb:f6:7f:15:af:24:33:cf:29:08:
         8f:57:4c:f5:45:1b:74:80:55:2a:7a:1a:29:ac:95:b6:0c:1e:
         1e:fc:52:27:77:fe:ea:ba:8e:7c:6f:f4:16:c1:6b:3a:ed:82:
         20:df:7a:61:86:f8:92:1f:74:f4:d0:01:b1:33:81:6a:2c:1e:
         8f:fb:54:2e:4c:a5:aa:09:95:63:6a:bb:db:22:45:8d:1a:c2:
         b4:f7:1d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:26 2025 by rpki-client