Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
File:                     eaKVyAtUwtvne6R959rsa5hgIbQ.mft (raw, json)
Hash identifier:          BZogvTRBYVN0YP7ZAUFIPraB8BBK4f1/9ctGLYxr0RM=
Subject key identifier:   8B:5A:58:ED:D9:CE:11:67:35:E5:6A:EA:E8:43:28:DE:B4:2C:E2:4C
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Certificate issuer:       /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial:       0199FB0EF4498C91E614DB32EA3212997D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
Manifest number:          10D8
Signing time:             Sun 19 Oct 2025 06:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:25 +0000
Files and hashes:         1: C9I9L672PlbWqQBGPXD-LljxFm8.roa (hash: +ke4s3nz80Z09QzZpjaWVPGcz+zRYaW46pTivPvijPQ=)
                          2: _Hv-371f3PpQrPgvaLXFPgbDqAs.roa (hash: LCaDC2GnT7VyfO2v1Zin8LH9TSL6mMs+tcHPlTEQoSg=)
                          3: eaKVyAtUwtvne6R959rsa5hgIbQ.crl (hash: BMAuYH6GHwROeHFDOYKyScvQ8PvU2ATVnRiB97zFFUU=)
                          4: gMIvq9YtCgOkL-7wopg1kqEgOOY.roa (hash: CP7S68jNnZq7f3001jUkejgDjHIYNSAYCHyxzvgL+hw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f4:49:8c:91:e6:14:db:32:ea:32:12:99:7d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
        Validity
            Not Before: Oct 19 06:01:25 2025 GMT
            Not After : Oct 20 06:01:25 2025 GMT
        Subject: CN=8b5a58edd9ce116735e56aeae84328deb42ce24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:d2:69:46:72:2e:04:dd:33:52:ef:3d:09:
                    db:b3:a6:27:c9:13:db:74:65:91:68:58:a5:37:28:
                    ec:c3:0a:c7:55:fd:72:4e:ad:66:94:3f:e1:0f:51:
                    58:0a:c0:38:24:a0:de:e0:a6:37:a2:44:b6:d2:78:
                    4e:41:fd:7b:a4:c2:94:c4:3a:15:c8:f6:f6:94:94:
                    e9:97:b5:09:c1:7a:6d:c8:02:d4:92:b1:e3:66:8b:
                    fa:c9:10:7a:56:05:29:97:c2:6e:9a:ba:40:fa:85:
                    a7:af:fd:82:af:ee:c6:b8:ec:0d:eb:e6:a9:b0:bd:
                    0b:7a:86:ab:40:96:f3:5b:c0:15:ee:1c:da:87:10:
                    6d:7f:5a:ff:cb:e3:3c:74:36:7d:5c:a0:6e:12:2b:
                    36:8d:24:95:4c:7c:d6:2b:d0:b4:53:fa:ed:2a:e1:
                    ef:ba:50:7a:9d:ff:d3:b2:fa:9c:ba:7d:23:fa:01:
                    52:80:e7:c2:26:5c:16:0c:22:d9:6e:2c:89:ac:3a:
                    f7:6b:bd:41:ae:72:d8:d6:19:24:04:c8:47:30:d6:
                    35:16:cd:63:f1:16:f5:c8:c1:7f:40:3e:8d:cd:14:
                    97:fb:b8:cd:9e:1c:72:6a:a1:d0:42:af:27:73:eb:
                    d4:a6:94:c3:31:1e:a4:82:95:02:68:2a:1a:37:8d:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5A:58:ED:D9:CE:11:67:35:E5:6A:EA:E8:43:28:DE:B4:2C:E2:4C
            X509v3 Authority Key Identifier:
                keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:fe:55:97:6f:2d:01:61:07:f9:a4:b6:37:07:c9:e3:8a:
         00:c1:05:45:8a:47:df:5c:aa:d1:d2:18:fb:10:19:66:6a:cb:
         35:72:46:13:1a:3d:7a:74:d8:aa:3b:33:80:ff:d5:c5:c8:cf:
         78:75:29:56:53:65:7d:1b:f6:8f:94:0f:9e:05:8a:6a:89:6f:
         f4:98:86:73:7d:69:3f:ed:ea:af:63:26:b2:dc:81:12:a1:8e:
         99:b2:a1:ba:f2:7f:08:f9:dd:88:97:c0:cb:07:69:55:ab:69:
         4c:16:7c:eb:bf:0f:83:93:fa:31:f2:af:a3:63:35:ef:f6:ed:
         d3:89:36:dc:1d:e4:77:00:85:1f:ef:0c:82:a2:9f:45:c7:f7:
         78:a7:49:ba:a9:05:8c:01:8e:fd:43:1b:c0:8a:48:4b:a6:41:
         ae:d5:97:ca:41:29:47:f4:62:04:05:f9:77:86:c9:f9:90:85:
         90:2e:ae:3d:90:6a:b6:64:f5:a5:30:c6:6e:95:39:bd:12:cb:
         40:d0:10:59:24:4f:07:76:24:ae:8f:1d:1c:ba:4b:d1:a1:6e:
         e2:df:5a:a2:3c:e6:9a:ff:b1:aa:6c:16:2c:52:4b:62:d6:f0:
         72:c3:9e:d3:f3:20:d2:e8:58:8a:56:ce:18:4e:d2:3a:26:af:
         e2:1f:29:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:58 2025 by rpki-client