Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
File:                     EjDNjhPIbY74NcGqx9X5U0VcA1w.mft (raw, json)
Hash identifier:          qtbBIQhXtGC+zO9c0fyd7f3FTkctEVWNgdu6LXF3rwM=
Subject key identifier:   45:B8:B2:5E:05:A2:F9:D7:8E:88:8D:DA:FE:A7:0F:96:73:0B:D6:96
Authority key identifier: 12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C
Certificate issuer:       /CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
Certificate serial:       0199FBEB3B834FF077E8E0CD7D7676A127B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 10:02:01 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:01 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:01 +0000
Files and hashes:         1: EjDNjhPIbY74NcGqx9X5U0VcA1w.crl (hash: 38KIAtYtV+V1CGAqnHfsADkSuUchHNH88MOoYQ5ebNY=)
                          2: EuTRnDRPWoJDEbfoQ9YIxpO9TN0.roa (hash: EVaUNHk2Qu3G8oVzY476ffZKfbJEuXrpbZc/APBPpMk=)
                          3: b8RNw6wNZBUS0XUnxqzLg6D0g_w.roa (hash: AdXDem7YUDKKSd2QGj+mGrBRtmEygT0nynWrGR1dSEY=)
                          4: bQEYESoW6-YfVJJkms0PN9EdFG8.roa (hash: siylmy82T6MgNttjWP9qLukosQqCg2IPyAiFKmhvNyc=)
                          5: vcKt0zOQQ6an75BQh7z38HORZ2w.roa (hash: 0chDeDV60oI3Dqsiz81D+oiboZjN2X2iRmyvKaEriO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:3b:83:4f:f0:77:e8:e0:cd:7d:76:76:a1:27:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1230cd8e13c86d8ef835c1aac7d5f953455c035c
        Validity
            Not Before: Oct 19 10:02:01 2025 GMT
            Not After : Oct 20 10:02:01 2025 GMT
        Subject: CN=45b8b25e05a2f9d78e888ddafea70f96730bd696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:9e:3b:16:4c:f9:8c:ae:4c:8e:73:b0:1d:
                    b5:3e:ac:75:a0:c0:c7:3f:a0:36:14:d1:03:c6:f8:
                    5d:a5:d5:60:31:2a:96:62:82:fb:ab:be:c3:d7:e0:
                    a9:f3:fe:7b:4d:f1:5f:3e:ff:5f:37:aa:d4:70:79:
                    05:8d:82:63:f1:d6:43:b4:ef:64:54:c0:a9:80:62:
                    68:2a:0b:3d:08:04:e5:6f:69:0d:d1:ae:19:71:34:
                    39:ae:c2:01:20:33:89:94:17:66:38:a4:bd:6a:b7:
                    5e:ff:26:02:a5:5a:18:6b:3d:12:57:cd:dc:db:cf:
                    c7:3c:72:ac:18:f4:51:af:5e:f4:f6:df:3e:cf:7b:
                    45:1c:b2:f5:10:5c:2b:a9:a4:70:31:be:7c:d0:da:
                    72:6b:94:df:51:5a:a8:3f:71:d6:d2:cb:4c:b5:d0:
                    31:bd:9c:2c:35:39:2d:86:63:50:f6:76:78:32:6b:
                    07:4b:05:95:ab:2a:98:48:d1:f7:29:f0:9d:b2:f1:
                    da:c5:03:d0:e0:63:a8:fc:26:52:ec:e0:ad:af:eb:
                    42:f4:5e:50:75:c0:ab:fd:f9:82:5d:1a:c2:e4:a9:
                    64:1c:b3:28:bf:67:af:22:14:b5:21:bd:9f:9a:91:
                    0d:03:4a:94:d6:8b:04:18:2d:29:6f:6d:64:d1:e3:
                    cd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B8:B2:5E:05:A2:F9:D7:8E:88:8D:DA:FE:A7:0F:96:73:0B:D6:96
            X509v3 Authority Key Identifier:
                keyid:12:30:CD:8E:13:C8:6D:8E:F8:35:C1:AA:C7:D5:F9:53:45:5C:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjDNjhPIbY74NcGqx9X5U0VcA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d1f390-4ec5-4c42-8e54-01fb46a433e1/1/EjDNjhPIbY74NcGqx9X5U0VcA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:cc:c7:6f:3d:2f:71:b7:69:8a:01:1b:13:65:61:d8:82:b9:
         ab:f2:41:86:13:68:21:d4:c7:5d:56:80:a3:2b:54:d1:04:f5:
         c3:00:ed:1a:85:bc:e0:df:97:e1:57:9a:9b:f3:99:47:ce:a8:
         76:af:44:5c:3c:dc:ad:53:51:22:ee:40:66:ac:6d:b5:74:80:
         ee:a3:33:b1:35:89:ac:d7:e0:ee:30:c7:64:3f:e7:dc:9c:f0:
         7b:9e:b8:1f:aa:bd:69:e9:a0:dd:ac:0d:66:a7:fe:82:23:38:
         5c:03:b9:63:76:96:5f:e4:a3:1b:2e:dd:64:a6:34:5a:a8:85:
         74:4d:38:23:9b:75:5c:c3:c4:67:a9:e4:1d:c3:72:11:d8:34:
         a2:c8:1b:8a:68:84:ca:18:43:af:bc:de:53:09:3d:c1:32:98:
         d8:e6:15:df:06:00:07:2e:2b:5a:99:b1:57:74:f2:de:2d:b6:
         cb:5a:4c:c3:b9:f6:f7:a5:ed:61:1f:85:e0:87:a0:6b:0e:d3:
         72:0c:5f:9a:79:9f:8a:83:fd:1c:9b:bc:a2:0c:f4:77:d3:c9:
         dd:26:e5:41:1b:f0:16:4f:63:cc:f3:01:74:e6:ea:56:61:97:
         57:3c:af:5b:94:1f:e6:31:a2:d7:a9:c7:fb:b4:c6:a5:04:26:
         7c:e3:e4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:15 2025 by rpki-client