Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
File:                     EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft (raw, json)
Hash identifier:          YBLOtOdgZrXQkF+S2uF6GRl4DE4a9UGxr3vrKd+0EUk=
Subject key identifier:   DE:C6:D8:86:D2:DE:98:B2:90:1E:5A:FD:9D:28:BB:A2:DB:2D:13:54
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Certificate issuer:       /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial:       0199FBEB4D8054E4B39C298F0A044259F40B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
Manifest number:          14FC
Signing time:             Sun 19 Oct 2025 10:02:05 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:05 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:05 +0000
Files and hashes:         1: APdV8HOuK_baV9w8xFhYPy7-2P4.roa (hash: IitULqtIj0Y4YtBexT7yVT81AkWjJbb2T56Qs1uC9QM=)
                          2: EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl (hash: J/72FznbTUL9URLAlRCRIrYIzuTCwogNtAGf5vN/zdQ=)
                          3: Fb0skEyX6qOFH4mxiCD0y38K50g.roa (hash: WuLRLLi+4HFH3PUcwNxaQ3ghnNVvZQgN47f0xDAHYEw=)
                          4: fcEGyk-ShkerhmvdFRcRV3UxI0Q.roa (hash: j94ZQOuH+xS4iNOpDw2YYuethGcrhVLCQhL5yC+U8s8=)
                          5: jGYUYth-JS9LpEgUYHaooWrb7Tc.roa (hash: frlNr3HLKX2GRFBcwYSe2xt1qGCkZ5xJR/twdkhb4cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:4d:80:54:e4:b3:9c:29:8f:0a:04:42:59:f4:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
        Validity
            Not Before: Oct 19 10:02:05 2025 GMT
            Not After : Oct 20 10:02:05 2025 GMT
        Subject: CN=dec6d886d2de98b2901e5afd9d28bba2db2d1354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:87:e1:88:60:e6:d6:4a:92:41:93:9c:36:23:
                    04:43:a5:99:7a:f2:7c:58:fe:4a:3e:da:a8:51:a3:
                    0e:9d:24:fa:78:ec:1a:73:b5:70:5d:71:4a:c2:0a:
                    b5:03:96:55:bc:e4:5b:08:b8:ac:e0:82:69:3a:ca:
                    49:4a:38:4a:71:da:d5:c8:4b:b5:95:2c:2b:88:1a:
                    d4:c1:8f:7f:c4:e6:ba:1f:dd:8c:6a:25:d9:ac:23:
                    4e:1e:6d:54:58:cd:28:97:39:3a:3b:f1:ec:1d:92:
                    d9:0e:59:85:ca:35:e3:ac:7b:20:1a:85:16:4a:bc:
                    05:cf:e4:49:4b:e6:c9:a7:cc:19:d9:c4:fa:bf:12:
                    37:6a:cc:f9:a2:0b:62:cd:3c:cf:65:68:e9:07:4c:
                    38:69:da:33:9a:a7:1d:c6:74:97:f3:c4:19:7c:58:
                    bf:36:e5:31:0a:aa:2b:79:82:44:bc:3a:6c:bb:57:
                    30:16:25:54:b0:99:3a:a4:41:75:34:98:c3:6d:56:
                    29:a3:6e:78:55:87:66:e9:1a:14:29:b6:63:f1:3d:
                    b1:66:6d:e2:18:a5:ac:12:a3:6a:90:7d:57:70:14:
                    df:10:36:d2:99:a5:8d:67:01:42:06:a3:5c:93:b9:
                    56:ca:18:4c:85:7b:23:7a:06:4a:a5:cc:4a:cc:b9:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C6:D8:86:D2:DE:98:B2:90:1E:5A:FD:9D:28:BB:A2:DB:2D:13:54
            X509v3 Authority Key Identifier:
                keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:23:5e:1e:56:5c:db:79:f3:61:43:36:37:0d:4d:1b:8f:4c:
         b8:91:a6:03:9c:dc:86:63:16:39:d4:62:88:71:21:35:19:d6:
         ae:6c:78:4c:e5:42:65:6d:44:58:66:cf:fb:13:df:ce:48:36:
         c2:2f:5a:6f:ca:ee:a3:25:91:0d:dd:00:a5:33:10:cb:b8:58:
         bd:b0:d2:2a:af:28:3e:f8:f9:8c:ff:21:71:2a:7b:12:11:50:
         a7:05:37:ff:8d:e2:f9:dd:f0:e7:49:85:8d:98:07:b8:94:4b:
         f1:a2:7f:15:4c:13:a5:88:89:a7:d7:77:f1:29:b7:a7:8a:50:
         0f:5a:85:fc:66:45:74:25:3c:d4:1e:43:c8:74:08:ce:a7:0c:
         f0:c9:dc:51:54:aa:12:6c:5c:cd:7c:a0:e6:db:49:93:65:c7:
         36:93:62:bd:95:b9:f3:13:0d:84:f5:4f:20:83:c4:d2:e1:82:
         43:6d:24:0d:e6:d9:2a:d9:10:3b:4d:c6:0d:44:c3:c8:97:30:
         97:d2:a6:57:d6:3e:b4:64:8e:60:40:14:7e:a2:9b:7d:39:b8:
         90:04:4b:90:40:43:a6:27:46:ee:a6:94:0a:0f:c0:3c:37:bd:
         e0:9c:dc:29:19:e8:3a:59:db:16:49:cc:43:51:44:0d:7a:f3:
         0a:19:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:38 2025 by rpki-client