Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
File:                     eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json)
Hash identifier:          RCy3iTOHb//f1FsMewS/1Zh4XQHlGZXEton7oXG2CvY=
Subject key identifier:   01:27:64:53:93:B9:4D:DB:C5:4B:F6:DC:A3:EF:AC:BA:88:26:BD:BF
Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED
Certificate issuer:       /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
Certificate serial:       0199FBEC20504ADB3D416FD649AFD557A38E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 10:02:59 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:59 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:59 +0000
Files and hashes:         1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=)
                          2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: JoRiMiAI9O8VkIJNKuXYQSSuWiJmng5wcZPVOHsjRKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:20:50:4a:db:3d:41:6f:d6:49:af:d5:57:a3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed
        Validity
            Not Before: Oct 19 10:02:59 2025 GMT
            Not After : Oct 20 10:02:59 2025 GMT
        Subject: CN=0127645393b94ddbc54bf6dca3efacba8826bdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:be:cf:a8:86:3d:0c:86:a5:7a:36:57:53:
                    c9:83:4d:c4:1f:68:3e:5e:72:a6:f0:50:53:34:fb:
                    7f:e9:88:44:6a:40:af:cc:c4:a7:b3:01:78:9a:4e:
                    15:9c:eb:ea:4d:66:04:1b:62:5b:57:d8:fe:b7:15:
                    2c:5a:7c:e7:74:0f:64:10:55:a7:c2:ee:6f:fe:8b:
                    b2:94:b2:62:0f:94:0c:e2:1c:f7:be:21:8f:78:44:
                    ef:ec:5b:75:c0:eb:7e:14:e4:5e:1b:5b:9c:ef:19:
                    e7:c6:d5:14:c5:45:23:56:cc:24:ec:2e:f3:c9:68:
                    03:19:d4:25:02:d0:b6:67:5d:2b:6e:19:00:b8:ed:
                    c5:1f:a2:ec:46:0e:e5:6e:af:c8:9e:f4:43:0a:ca:
                    5f:a0:6f:a6:2f:1f:82:89:44:c0:f8:23:fd:55:18:
                    3f:fb:b2:3b:88:44:c7:d8:2c:d7:93:d5:22:85:b9:
                    cb:89:96:d3:68:b3:2c:7f:de:5e:0f:c7:05:86:99:
                    fc:93:4e:47:65:9d:71:e1:67:3c:fb:66:5f:2a:42:
                    36:4d:02:b9:e4:bb:94:12:b4:35:5b:2a:94:2b:18:
                    ce:ba:71:fc:93:a0:d5:de:a9:20:78:bd:27:01:9a:
                    5b:2f:bf:77:32:a2:3b:b2:b3:6f:52:f6:cd:ea:02:
                    e4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:27:64:53:93:B9:4D:DB:C5:4B:F6:DC:A3:EF:AC:BA:88:26:BD:BF
            X509v3 Authority Key Identifier:
                keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:03:55:54:7b:b6:d3:31:f7:24:fd:69:41:dd:9d:a7:d4:ad:
         2c:c8:54:4c:8b:ca:74:f2:aa:7f:db:38:29:96:91:e5:80:15:
         b2:bf:a1:a0:31:e8:5a:93:2d:1e:06:65:48:35:b7:85:ec:c6:
         63:2f:27:8b:81:e4:8f:49:4a:72:77:a9:12:a4:dd:2e:53:b2:
         7b:4c:cc:c0:fe:c1:e7:95:ae:7b:12:c5:6a:64:31:e4:25:25:
         54:0f:42:0c:8c:46:a0:e5:7e:85:2e:72:4a:63:1f:c6:9b:fc:
         f1:0b:6e:e4:25:30:7d:76:4d:50:35:da:7b:03:ee:a7:ab:07:
         e8:29:fe:ce:68:60:ef:03:05:5c:a2:e0:99:54:fa:ed:0c:01:
         ac:77:90:1f:fd:cf:b5:3f:f7:28:3a:0d:95:2c:b0:e2:6d:8a:
         4c:e1:d6:8b:11:8e:d1:c2:ac:45:2d:bb:8f:3c:5b:b6:ef:03:
         ef:17:4e:5e:d6:10:b2:ed:7a:b4:c2:c9:17:b4:4f:6d:40:e1:
         8d:78:36:49:94:1e:42:41:bd:23:5e:9d:b2:88:6c:06:be:0d:
         6a:2e:64:bc:ca:84:53:ee:c8:e7:db:3c:ed:b8:53:6a:7b:e4:
         77:c4:53:d9:ae:57:e0:4b:23:4f:3a:27:7e:91:e1:e0:5e:4b:
         67:f3:9f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:11 2025 by rpki-client