Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
File:                     ean2o4HOSlo-zLJJOmhGCcmIoPw.mft (raw, json)
Hash identifier:          aepRuhQ8WUbjByhT/mfQ3ubrKhFfr7sD/U71dT9g6tI=
Subject key identifier:   03:0E:02:D5:C3:4E:6A:D9:85:80:B0:3B:C6:F4:E9:40:1B:7F:CD:22
Authority key identifier: 79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC
Certificate issuer:       /CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
Certificate serial:       0199FB45C1D2CE392A601A8C4CD55EC40538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
Manifest number:          15A3
Signing time:             Sun 19 Oct 2025 07:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:16 +0000
Files and hashes:         1: ean2o4HOSlo-zLJJOmhGCcmIoPw.crl (hash: Fi9aP0mBlKM/h098txRFJuqeYRWU/UkjyVFg6/0Sz74=)
                          2: qPByKnpBcwc5PCFg3I5YVGxollc.roa (hash: VpVIKGAdMgvH4OCbsZNXF0xBFfIGSal78lndZpVlhBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:c1:d2:ce:39:2a:60:1a:8c:4c:d5:5e:c4:05:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a9f6a381ce4a5a3eccb2493a684609c988a0fc
        Validity
            Not Before: Oct 19 07:01:16 2025 GMT
            Not After : Oct 20 07:01:16 2025 GMT
        Subject: CN=030e02d5c34e6ad98580b03bc6f4e9401b7fcd22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:f1:ad:6e:82:01:5f:a8:3f:44:c1:0d:36:
                    e7:a0:28:99:f5:38:b2:fd:c8:a7:58:cf:5a:0a:07:
                    ba:a1:b6:ae:07:a3:87:4c:c7:c9:f2:12:7d:f1:41:
                    67:de:27:72:ec:07:0e:32:1d:3c:99:d5:71:90:75:
                    b8:91:02:e6:69:54:78:12:43:5a:18:b2:7d:b6:c0:
                    38:d8:37:16:c0:07:d0:d1:a8:84:35:2c:31:40:27:
                    59:be:65:34:6c:b9:50:cc:fe:90:c3:0e:d0:b9:b8:
                    93:dc:a9:a5:71:29:21:be:3a:57:cc:ff:43:df:76:
                    f8:cc:e0:46:3d:60:5c:df:cb:cb:d2:0e:a7:c5:83:
                    9d:5e:24:ac:8b:d1:43:82:25:90:0d:df:92:65:29:
                    df:05:fb:e2:2b:72:cb:eb:17:ac:48:3c:c8:bf:a7:
                    ec:b2:14:69:03:44:79:f8:40:ab:f0:08:a7:98:01:
                    c4:9a:e8:17:50:04:01:6c:b9:f6:21:2d:40:16:48:
                    dd:b6:67:a3:bd:6f:f9:cd:95:07:91:d6:a5:1a:09:
                    29:87:3a:8a:2c:0f:f0:02:d5:2a:af:4d:2f:d1:67:
                    ea:6b:56:e5:68:89:08:f6:47:59:34:60:e1:4f:a6:
                    dc:a3:47:8b:78:42:89:de:06:98:46:29:5c:2b:60:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0E:02:D5:C3:4E:6A:D9:85:80:B0:3B:C6:F4:E9:40:1B:7F:CD:22
            X509v3 Authority Key Identifier:
                keyid:79:A9:F6:A3:81:CE:4A:5A:3E:CC:B2:49:3A:68:46:09:C9:88:A0:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ean2o4HOSlo-zLJJOmhGCcmIoPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/911b83-0c27-4040-970e-ecaf553c31d7/1/ean2o4HOSlo-zLJJOmhGCcmIoPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:60:53:a4:bf:94:60:3a:73:5f:2e:2f:20:8e:cc:3b:61:8b:
         4c:06:07:f2:4a:8d:84:43:af:ac:c1:84:c2:cc:19:c4:c1:98:
         11:95:3e:21:41:b6:5c:eb:ff:13:9e:c5:90:63:8e:2e:d9:4f:
         a0:b7:eb:aa:95:8a:8c:ac:07:0e:e5:0c:07:f7:f7:cc:c2:4f:
         a1:7a:74:cd:20:95:34:d5:d5:10:99:d1:69:cf:91:6d:65:bc:
         b0:55:b3:73:fc:14:62:63:91:d8:19:a8:0b:ef:eb:ac:9c:ae:
         bc:d9:80:32:b5:ff:d3:97:a9:16:dc:50:fd:9b:95:f0:3d:db:
         1d:6f:9a:ed:25:a8:9d:8b:c4:99:14:e3:9f:37:00:42:23:32:
         1c:6b:85:78:02:c7:f5:7a:52:78:e5:a5:c9:76:03:f3:00:45:
         4b:fc:0a:e0:44:93:25:56:0c:d3:d3:e8:6b:48:b1:8b:19:c5:
         d2:03:4b:bc:00:fc:b4:99:bb:2d:da:48:bd:d2:46:18:da:4c:
         a6:11:cb:3d:b5:a7:2f:fc:02:ef:24:29:52:ca:26:a4:b4:2c:
         0f:9c:83:8f:f3:72:ea:f8:bc:07:ed:d6:d5:11:d0:32:97:df:
         19:2e:94:1a:ca:bd:d5:33:c1:0d:f2:b8:07:2d:c9:df:24:64:
         8f:f0:7f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:31 2025 by rpki-client