Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
File:                     EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft (raw, json)
Hash identifier:          VZHph/p+GgteIHtL10U9f5mKSGcxhQjsjHdRpSulQro=
Subject key identifier:   E8:11:6C:AA:72:FD:0F:AA:14:74:03:69:D9:69:19:9E:D3:65:6F:8C
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Certificate issuer:       /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial:       0199FC215EA856E5D5CF9A94E2A1D3C11511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
Manifest number:          1782
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: 0a-KrfdskF1P1eak9gMq_rpHwLQ.roa (hash: 1r6R/eLHp6yqNJSUm5rRHogfjj+timL04ipzPj2uofE=)
                          2: 1-z0xCJwtZ7oNjVyEZRiUl707L_U.roa (hash: kH96KZu4zVwqWimn8lprbltf+L6jN14xGOOzu5+uka8=)
                          3: 3L3xDarJu5Fz4sXBw4PnJpUrKg8.roa (hash: mYOTUrTGScHJ9ebv2B+CxOPHDS6vmmMB/iTWFsSubac=)
                          4: 6lCcCiAG_a6sOfmRZ6qeYO15iGs.roa (hash: BFQuhQiCrduZkmNzpLq32WMBJG9sF3KBeOMWP2TxRSA=)
                          5: 9ESkLgmI35QN5TpIx_GPZS8Vxio.roa (hash: hdpw919IzbN2ZFHFKuU/1SNfD9sbyLis5zeOuTdE5D4=)
                          6: D_JL9OsKWnsajKF-cPVLgLD_1wc.roa (hash: REalXdL8VCnc028uNWQcdp2hzuzbMKXOBDjPVpWw3KQ=)
                          7: EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl (hash: UwKXy4FItwlTrK6nK95GSeW2Pw0kEe82GcSu5dXsb+M=)
                          8: FkoVs9alAq-3FoG992pkYSUKr3Y.roa (hash: sx+i4OxChrrhXHBf2JXaRrGO+hup07wWov4ICIEFX+k=)
                          9: NK_WPhYvDc3eEpYFCQ9ge52GMvk.roa (hash: 1fbP+50M9LhkCXd17Y2+Euhe18E6Q+JHRhqDIhYbeMs=)
                          10: NauuGUSZn-SgPXuLy6E5pAV66N0.roa (hash: dn6a8tKxIadhVZxQhBzsKgyugbJ2THkUTfOT2uFIVqs=)
                          11: ODhoTdGVYZBbz3u6dpzy1ra8jRg.roa (hash: hERu0Bd8tRMqkoYTnlOa9ATH4GnhhIjsCQWhMTyCEkA=)
                          12: PyyzXUdlmoA9Bk7oa0uF75YdupI.roa (hash: KrKiurvSNPj8UgpNpGVtpzLAre3QiNcGoEwUhT8E1Zw=)
                          13: RUuJxYZLJmTxpMuUp70ngA__yIM.roa (hash: MFsbsiZMFacC+0KJFg0Y0/Du2X2dNa19f6lGoOE+sao=)
                          14: S_3Ac8fpJNmr4_Jqg37fnSZrQTA.roa (hash: kXDSSLoM6qJEx5/HbAZQ1hKhZOVmnkuIzLWPNIFvHc8=)
                          15: Vbqq8C4Vgjoxa8ZqI8ziSEzBO8A.roa (hash: onMxDC4Ic5lagmIJUMlVrD44kP04SiT+2wJzJ6jkgRw=)
                          16: WGVFdHdOhrZ6oEGNKaADeEDXEkc.roa (hash: upyn2YAU1bBK3yksfLZUYvn/2Yyr6nO1tneR3QTm/D0=)
                          17: WNxwGRqjvkzEEIFtJUKhx8EpDnA.roa (hash: NuJcsLFQveWA7JrekR32MafYf69Fr1QL8arEGvczy7k=)
                          18: WdrQA2XxuRSob5fch_vmulfj1p4.roa (hash: eriXlUX2rEIxDuWxy0Sj12+EAh+KHElo42nsQ2xL4P8=)
                          19: YshAp7kvzSEqzUAJqYQaXPlimXM.roa (hash: 9wAijCHBf70P9HVKz7vJxcgO3NSgfGywCSLu5rKQFcc=)
                          20: bG0R8O-R3Gzh0U19uKXnEyungVE.roa (hash: dC3LmhKrxouomOcuKMc4Z6ErO4Vx6yc4Z+n6WdgjiyA=)
                          21: dJhnxNzwfdHlneQSztyV2rQUNh8.roa (hash: mBXD3iXgLpyd3hmkrgIDXjTXmIhHa5rAOzsMx5futIk=)
                          22: dcujdY7nZpLDRD7umvphEez-qpw.roa (hash: DCDyLYPDKXFLZDtPjhfGEgVVy0YwKX5izGR8g7lqUrY=)
                          23: hfbW-MgSGHukUskkJyFvMqHg57I.roa (hash: U5M8t+APG7iIrHAOeUcvMU6TbXCfXX9ps0T4pjHdOL8=)
                          24: k4MrRgP2JyDnz4jNtYGvOfJmM90.roa (hash: iVSrxybp0cpHKOO6q2VzRaa9ybTUXxsDiq5lZ4StBxw=)
                          25: p7JIV6hAP8Iqcna1OjzOq4_7YRE.roa (hash: BJrzKoW9PKHRZxoa3GctY7R2lGv3C7NaVaECKpXws6k=)
                          26: pHrarVnk95oQe2hI0xpt7DgCX4I.roa (hash: sJ3eEhOn7jQjhfcoZ42EdbEeYJY/zzcWxgg/rji7kDE=)
                          27: pxErwoucWB8yQbaQqe1v45Sxb10.roa (hash: 8JG+D2s4aIAKcUNnH/GZ789KXpymk/hO3QsT835m9zk=)
                          28: tkv4eB640kj-LoRn67cojbzMAxA.roa (hash: 1XWkZeOPHz0G+f5HoG2RieKKed9lLcxprXcsbhFEyOk=)
                          29: ul3uv5hec5ukIf7FCGeau4nCEHc.roa (hash: pc0UTa1zNFc4D1XbCiXp6Zxm7lOslpwK+C/ygH0+nGg=)
                          30: ys8EEYV9duz4vQMnV4A63KTELEI.roa (hash: Mzw/QCxXFE0BItwPGjx2i5l7tZTi3Kn7VnGnniz1APM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:5e:a8:56:e5:d5:cf:9a:94:e2:a1:d3:c1:15:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=e8116caa72fd0faa14740369d969199ed3656f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b8:1d:2e:54:d6:0c:8c:73:99:b3:c7:2b:66:
                    58:08:71:d5:0f:cc:bc:92:57:f3:3f:0f:ff:93:9c:
                    4b:87:cd:cf:cc:42:34:de:14:62:6f:ca:b6:62:dc:
                    b6:11:49:eb:61:a8:e4:44:ab:ce:c9:61:4a:67:8d:
                    81:a7:c5:8f:d1:8e:e8:a2:73:c4:5f:a7:85:41:ba:
                    97:c2:4d:ce:10:73:13:b0:43:3a:33:02:f3:16:67:
                    bd:a6:41:34:a2:77:ad:b2:22:cb:67:ab:96:b8:8c:
                    eb:2d:96:5f:52:65:3b:c0:c2:ea:5b:39:c1:06:a9:
                    77:d1:8c:09:86:3c:cf:3a:41:f5:86:ac:72:7a:1f:
                    25:98:31:81:d8:44:b1:b4:70:50:b1:3d:4e:00:f9:
                    cc:df:71:a6:9b:6c:39:ca:2d:bc:7e:86:fd:2f:91:
                    70:e3:2c:d9:70:52:cf:6e:14:f6:9d:05:e4:15:07:
                    20:72:17:d7:a3:d4:79:1f:68:e3:b7:28:91:4d:18:
                    5f:47:a2:13:0f:d7:49:20:0a:d5:1a:a3:ef:70:04:
                    2c:00:ba:5d:51:61:25:29:48:5b:f3:78:ee:9a:f4:
                    5a:ba:05:c1:a4:dc:b6:34:f0:d4:35:62:81:48:2d:
                    fb:fb:b8:f8:9e:55:d0:04:6a:db:ed:08:b1:c2:5c:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:11:6C:AA:72:FD:0F:AA:14:74:03:69:D9:69:19:9E:D3:65:6F:8C
            X509v3 Authority Key Identifier:
                keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:23:8a:07:bd:af:98:de:98:ad:2e:25:86:de:4a:6e:27:27:
         5e:46:d1:52:1f:b7:65:9c:eb:c6:f1:bd:8b:ff:a1:88:36:38:
         88:1e:81:d4:9a:99:45:5b:a8:c2:ae:b5:4d:4b:ef:e2:08:3c:
         12:9a:30:34:e6:73:fc:84:88:3a:3e:a3:51:5d:ee:bd:f4:59:
         99:67:ee:80:cd:89:a0:35:06:2d:cc:13:b5:2c:62:29:e4:b4:
         f8:51:bc:33:00:b4:e1:f9:44:ad:28:4c:26:0e:04:7d:13:60:
         a8:c9:cb:02:58:3f:59:9a:28:39:26:08:f8:4a:c9:d6:39:c2:
         5f:a9:ce:f7:1b:24:69:25:02:c1:5d:3b:91:a8:c3:a4:5a:ac:
         13:2c:7b:70:36:1e:a1:6d:39:67:d6:63:45:5f:6d:c1:33:bb:
         c5:26:68:c9:e4:91:9d:0f:62:e9:17:1e:8f:eb:2f:57:22:2e:
         5f:0b:b5:79:02:75:1d:11:a8:7c:45:ea:5f:53:76:f3:6f:53:
         ce:17:9a:97:5e:21:01:38:24:9d:95:69:97:3d:79:7b:4d:55:
         bd:1e:27:e9:45:a2:76:b7:89:ea:40:d2:0d:eb:7a:9d:e4:63:
         97:bd:0d:9f:65:ef:0b:33:65:88:a6:20:ce:f7:f0:a5:fa:b9:
         4f:92:7e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:48 2025 by rpki-client