Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
File:                     eSWRAsFpk85eE7CMumDu2tf5J3M.mft (raw, json)
Hash identifier:          VF9cR7324XbZAtoYfW0gVl7SLGPtVPpEgUHC10dhmBo=
Subject key identifier:   5D:42:64:14:78:C3:6A:4A:D0:6F:83:1D:A4:4B:6D:5F:7D:4B:D3:F7
Authority key identifier: 79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73
Certificate issuer:       /CN=79259102c16993ce5e13b08cba60eedad7f92773
Certificate serial:       0199FC218703E02D180E930E49C6DB073763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
Manifest number:          02DF
Signing time:             Sun 19 Oct 2025 11:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:19 +0000
Files and hashes:         1: 2XnqswJhUp8Q7QKYSg6mYnJtPx0.roa (hash: GVTo7but2rFEi3PE0oMZ20Q2ZfZFSUAgiohCKBnP4LM=)
                          2: eSWRAsFpk85eE7CMumDu2tf5J3M.crl (hash: hjr6spuFS9xfc+Es+B/5XRigXNvOVedgxFmoICXvX9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:87:03:e0:2d:18:0e:93:0e:49:c6:db:07:37:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79259102c16993ce5e13b08cba60eedad7f92773
        Validity
            Not Before: Oct 19 11:01:19 2025 GMT
            Not After : Oct 20 11:01:19 2025 GMT
        Subject: CN=5d42641478c36a4ad06f831da44b6d5f7d4bd3f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:3f:4f:d7:97:ba:76:0a:2d:60:7d:bd:79:
                    ad:14:65:51:bd:39:21:7c:4c:39:b6:71:d1:2b:04:
                    bf:48:74:58:37:2c:a2:98:2d:4d:7b:76:fc:7a:c8:
                    1e:9e:63:32:d7:98:af:da:aa:10:3c:2f:d7:74:77:
                    fb:3b:df:74:89:9a:8d:b9:fd:32:97:d0:e1:17:71:
                    a6:5a:9c:3e:3e:6b:4f:4d:ae:21:94:c1:c1:88:9f:
                    91:f1:23:18:c7:2c:a0:9b:21:cd:12:61:54:7e:cc:
                    6d:36:e8:b1:6a:70:86:64:31:a4:e9:c5:43:15:e1:
                    7b:b2:d7:e2:df:b4:97:f6:43:47:5a:2c:24:f0:b1:
                    a2:ec:88:44:af:a6:d3:ab:b1:4c:da:cd:14:3e:7b:
                    cb:db:f1:b2:17:40:bf:9d:fe:4b:6f:52:28:13:13:
                    df:cf:72:f3:b0:5c:3f:98:86:e9:a7:9a:6f:48:fe:
                    37:7f:98:fe:51:01:81:ca:04:3a:6d:a8:eb:ad:9b:
                    9f:9d:55:dd:52:7b:1f:fe:67:b6:5a:f5:16:8f:6e:
                    46:9e:16:13:6b:fe:6b:1f:63:b3:5b:0f:e5:e0:66:
                    15:22:7e:0c:c6:41:7b:29:ce:0e:ec:d7:12:92:c6:
                    90:12:60:04:60:fc:cf:60:2d:b4:8b:28:fa:8c:fb:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:64:14:78:C3:6A:4A:D0:6F:83:1D:A4:4B:6D:5F:7D:4B:D3:F7
            X509v3 Authority Key Identifier:
                keyid:79:25:91:02:C1:69:93:CE:5E:13:B0:8C:BA:60:EE:DA:D7:F9:27:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSWRAsFpk85eE7CMumDu2tf5J3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75d6e2-c7ba-478d-879e-25f4f7430bda/1/eSWRAsFpk85eE7CMumDu2tf5J3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:83:91:7e:71:a8:53:eb:71:95:3a:09:cd:ca:80:61:b9:
         dd:41:9c:d9:8a:bc:eb:22:55:e6:5d:9b:ff:5a:79:5d:cb:29:
         a0:00:cd:42:64:f9:a5:e3:6d:16:27:39:38:32:fa:f1:d0:37:
         ec:1a:49:f8:42:96:4a:58:5e:96:05:c5:85:8c:c1:67:b5:f5:
         bd:e7:d3:27:64:83:bf:b3:0b:1d:aa:23:6a:b6:1b:af:44:a3:
         fe:9d:eb:09:55:d2:77:61:2e:0a:82:8c:ae:9d:85:4d:d1:4b:
         66:b1:0d:5d:cf:66:5a:c1:6c:d8:0e:4a:49:2c:42:e1:e7:55:
         b1:be:e1:55:c3:ad:65:52:ce:f8:ff:90:ee:a5:0d:e9:24:45:
         f9:a1:1c:3c:5d:cc:af:4f:62:d3:1b:52:6e:8c:c2:cd:6f:33:
         2b:c5:1d:e4:5b:58:19:0e:57:01:63:62:fc:a5:4b:c7:a5:a4:
         f6:e5:dc:90:65:73:2e:7a:18:e3:cc:1c:70:e0:2b:67:a3:25:
         ee:ce:11:cb:41:2c:96:15:2c:b1:37:07:7b:58:f1:36:8c:fa:
         69:f7:8c:a6:56:4f:50:74:09:b3:11:c1:00:f7:ac:5d:34:90:
         4f:78:97:3a:ae:73:7d:d5:b9:17:26:90:4c:ad:4b:fd:7b:d4:
         af:5f:0e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:50 2025 by rpki-client