Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File:                     EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier:          iMh1jglxY32oB/4mFktmr27l+kJrJHOKHIi/916aAMM=
Subject key identifier:   DE:0E:68:40:72:4E:C0:F8:29:34:EB:58:A8:33:45:4B:0C:E6:E2:78
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer:       /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial:       0199FC8FB2D811EAFF9004718C620C4B9B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number:          142C
Signing time:             Sun 19 Oct 2025 13:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:39 +0000
Files and hashes:         1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: oC0EblaqLPJqgOgeT+mKCmJyiZbLlJwetwvSmV07ZZQ=)
                          2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=)
                          3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=)
                          4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=)
                          5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:b2:d8:11:ea:ff:90:04:71:8c:62:0c:4b:9b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
        Validity
            Not Before: Oct 19 13:01:39 2025 GMT
            Not After : Oct 20 13:01:39 2025 GMT
        Subject: CN=de0e6840724ec0f82934eb58a833454b0ce6e278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:b0:8f:43:9a:02:1c:76:47:95:9e:4e:37:
                    7d:47:e8:7d:aa:74:09:fd:4f:50:30:87:e0:40:2d:
                    a1:01:23:04:8f:bc:0a:0e:ee:18:22:02:d4:55:e1:
                    03:a3:1c:85:8e:73:59:62:3a:fe:8b:f9:5e:7f:e2:
                    d3:22:9d:7b:57:b0:e8:7f:92:eb:09:f2:c1:c0:d6:
                    69:b3:05:6a:1a:d8:c0:08:1f:79:84:e6:7b:af:52:
                    df:dd:76:66:f5:16:31:42:2b:9a:90:8e:6c:cb:92:
                    aa:04:09:86:92:e1:17:e4:32:64:21:be:73:3c:a1:
                    28:e1:46:49:a8:d3:69:e9:ab:a5:27:32:9b:f5:ee:
                    a9:95:1f:db:26:79:41:b4:03:15:ea:d3:51:8d:89:
                    7c:3a:d1:c2:39:8b:14:98:65:f9:6d:53:73:ca:92:
                    85:e3:13:a6:b0:78:6e:e6:d7:5e:49:04:69:1d:71:
                    ef:14:4c:d2:4d:35:4d:2d:7d:70:0c:a1:ad:58:29:
                    2a:e0:4d:4e:c7:6f:7f:47:c5:10:cf:3c:0b:08:11:
                    a6:56:0a:d2:3e:4b:c7:2b:d3:91:bd:78:04:a9:f4:
                    e9:75:c1:bf:45:01:78:0e:2a:1a:1d:a4:ad:64:58:
                    26:2f:37:68:62:9a:de:00:a1:8a:65:c1:79:5a:15:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0E:68:40:72:4E:C0:F8:29:34:EB:58:A8:33:45:4B:0C:E6:E2:78
            X509v3 Authority Key Identifier:
                keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:94:a8:2b:08:c2:97:f4:d0:52:99:c6:a1:1e:1f:33:99:57:
         5f:3b:44:fb:ac:e6:bf:c2:66:57:44:26:bd:97:da:27:e8:45:
         d5:24:a2:d8:81:d7:53:86:27:57:81:dd:fc:b5:02:13:69:46:
         33:f8:47:e3:2e:01:cd:aa:ab:44:a3:a5:32:3b:b3:d5:35:c7:
         f8:57:68:87:40:0f:0d:c4:96:ce:00:aa:74:6e:65:94:d5:0d:
         de:4c:b7:85:6f:47:a6:97:58:58:7f:a3:db:1a:99:23:d6:81:
         51:60:7b:e8:ba:04:23:77:72:0a:44:3c:0a:00:7a:04:7c:7e:
         d8:1f:46:62:2d:92:2d:7e:88:7c:dd:32:40:a5:ce:7b:48:88:
         3b:96:68:2a:40:72:e8:1c:c7:63:39:b7:6f:e4:4a:56:0d:eb:
         4d:6c:fb:b7:75:f2:c1:30:25:6f:39:1d:a1:57:ae:c1:2d:b4:
         7f:7c:a2:9b:ce:20:9b:1b:d6:25:b6:82:c3:35:38:3e:2b:6c:
         0c:77:39:69:7b:7a:9d:1e:54:d5:61:35:33:9d:0b:64:86:4f:
         34:a7:ae:32:0d:24:5c:16:c0:af:5d:e8:05:09:e0:af:ec:10:
         3e:f2:56:4a:1a:0d:f2:d1:df:0f:71:07:fc:1a:ed:e4:d3:78:
         39:7b:91:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:08 2025 by rpki-client