Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
File:                     EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft (raw, json)
Hash identifier:          t9kMP85AABbWaTXilhpBzoLF8jEhW2TpLM0VHcxgCvo=
Subject key identifier:   C3:78:85:FD:BC:AF:53:20:8E:9A:5F:77:13:49:A5:97:17:49:4E:78
Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
Certificate issuer:       /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Certificate serial:       0199FE47760488E7019AFB6C17296E4B6D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
Manifest number:          067D
Signing time:             Sun 19 Oct 2025 21:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 21:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 21:02:00 +0000
Files and hashes:         1: 9Z7pH5NPnAqikrLECUV4KgNs0A8.roa (hash: MDaAz2g07ukZgilrtHl7Gypl8ywa3pObRf5OUvVo4KA=)
                          2: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl (hash: D/HbOWcaWJzA1/g00R5K5RlNgt+6fNF7wcX+qQMy6xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:76:04:88:e7:01:9a:fb:6c:17:29:6e:4b:6d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
        Validity
            Not Before: Oct 19 21:02:00 2025 GMT
            Not After : Oct 20 21:02:00 2025 GMT
        Subject: CN=c37885fdbcaf53208e9a5f771349a59717494e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c0:b3:78:e9:37:7a:02:a0:4e:cc:db:95:2d:
                    42:7d:f2:c4:5d:36:02:c1:40:bb:5d:a5:d5:67:4c:
                    71:5b:ef:fa:7a:1d:bc:06:9f:b7:34:fb:04:29:fd:
                    a3:e1:0f:a1:df:e0:a3:72:07:73:4d:4f:ac:9f:f1:
                    79:f0:1f:19:5d:a6:0e:f4:70:50:2f:2b:e7:38:71:
                    d6:32:55:e5:07:87:ad:a3:5f:92:01:71:65:31:70:
                    93:ee:83:7c:c5:f0:fa:eb:21:ae:3d:7a:42:20:b5:
                    fd:bf:ac:77:f1:44:ba:34:32:b0:2f:05:17:9e:99:
                    b5:32:7a:6b:49:a1:e7:ec:06:15:e7:e1:e8:8d:23:
                    d1:51:65:ab:f0:24:b1:63:9f:d6:e8:fc:7d:b2:e9:
                    16:f5:d0:69:cc:ff:aa:0e:6f:60:c4:d3:eb:04:3e:
                    11:08:a8:09:18:be:92:28:e1:c2:34:35:81:7e:8a:
                    83:cb:65:b8:28:ca:bc:a4:30:11:92:54:44:0c:e2:
                    50:f5:f7:e0:49:18:df:e8:c0:41:b9:86:98:c4:52:
                    68:00:68:d5:32:f0:32:05:ab:30:db:79:4d:e4:ec:
                    d4:69:7d:51:56:9c:5a:f8:9b:7d:bb:aa:e5:8d:fb:
                    20:a2:bf:42:0f:d8:71:2a:7e:9d:cf:98:f8:90:7a:
                    56:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:85:FD:BC:AF:53:20:8E:9A:5F:77:13:49:A5:97:17:49:4E:78
            X509v3 Authority Key Identifier:
                keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:8d:52:3b:14:4f:14:39:c1:a9:b6:ff:ff:5c:03:9f:e8:76:
         a1:56:c6:43:13:33:81:aa:3c:37:76:2c:91:16:69:31:a5:e1:
         5c:74:69:ab:72:2a:8c:57:b5:9f:1a:04:a6:c1:ba:c2:ac:c6:
         46:ac:ba:e7:ae:da:ad:50:32:47:9d:70:29:30:1e:6e:be:9d:
         c2:e8:04:b7:31:a0:4b:83:8a:4e:8f:a0:6a:5f:93:7f:9b:3a:
         1a:cd:c9:45:0d:d2:f5:06:62:d0:56:40:cd:b6:1b:42:0c:38:
         85:86:64:35:04:ed:ae:29:f8:af:55:59:79:75:8f:b5:af:cb:
         b2:97:e4:57:d7:64:db:a1:53:71:b1:21:66:29:25:28:7f:d1:
         1f:a9:4a:c3:1d:7a:55:57:f7:31:ef:38:aa:83:be:a2:d4:62:
         a7:bb:a8:0c:9c:aa:be:25:ba:28:28:1e:a4:7e:9c:15:5a:0f:
         05:28:55:fc:1d:de:a2:d3:1b:ee:e5:0c:70:d1:b6:de:84:a8:
         99:9c:ad:e0:1c:8f:a6:3b:27:94:e3:fd:80:23:23:a9:2d:9d:
         4c:73:1f:4f:e7:b7:b5:96:40:12:75:68:49:59:32:10:3e:6d:
         6e:3f:d8:6a:c8:43:1f:30:fe:7b:02:ff:48:ba:b8:77:70:15:
         ee:00:d3:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:33 2025 by rpki-client