Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
File:                     EzGVE_0LkEFwYKIYt21iuOP7zFE.mft (raw, json)
Hash identifier:          8w14uspSQFM4BE/hDtfZN7ArchwPM2k/AC/FelVntmY=
Subject key identifier:   40:56:EB:23:CC:46:97:77:B2:1F:25:EA:EA:C1:31:73:9E:29:34:CC
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Certificate issuer:       /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial:       0199FCC699FAF62E97458788F1C4CFC0CF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 14:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:37 +0000
Files and hashes:         1: EzGVE_0LkEFwYKIYt21iuOP7zFE.crl (hash: jEvnyTt7JfIbbcK+p5E9Kb1YTiFZzvgL7shoN+9llO8=)
                          2: yp0LdC7U734nh5SQEMIi7N8uoHI.roa (hash: yywu4U5iIGMPvffSUFMCkRN3B5n6pNurBpQSvtgjfYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:99:fa:f6:2e:97:45:87:88:f1:c4:cf:c0:cf:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
        Validity
            Not Before: Oct 19 14:01:37 2025 GMT
            Not After : Oct 20 14:01:37 2025 GMT
        Subject: CN=4056eb23cc469777b21f25eaeac131739e2934cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:a3:c6:23:dc:ec:97:98:75:15:9f:6b:53:
                    30:a6:9d:38:3b:fe:4a:b9:d3:b9:1e:1c:33:81:2d:
                    c7:4d:d0:7b:eb:14:af:0f:c4:d8:6f:d8:dc:96:07:
                    1d:21:f7:56:a6:c7:36:78:7d:88:a1:ef:1c:ef:cd:
                    d6:af:64:a1:d6:d7:b8:94:3a:5c:07:ab:6d:fe:fe:
                    8d:f9:b6:11:bf:03:72:a5:ef:93:bc:82:a4:02:00:
                    7f:a4:c7:2e:61:1f:f2:b1:6b:d5:33:71:01:16:03:
                    c9:c7:7c:af:18:7a:14:5b:5a:d7:fc:9a:3f:11:4b:
                    fc:fb:ba:42:d9:0d:3e:66:d0:83:a3:f8:18:85:2e:
                    95:cd:05:46:6e:2e:50:bb:63:56:6c:66:1e:67:9b:
                    70:da:20:27:6b:1f:af:77:2f:a8:4d:5b:cb:44:5d:
                    5f:22:a3:ad:08:fd:e2:49:81:69:b3:28:58:c7:6d:
                    69:89:22:0a:f2:a6:5d:b3:12:90:62:46:b3:01:d3:
                    ac:c5:58:f1:5a:b8:ec:ca:70:31:01:00:31:ab:86:
                    f1:68:ad:ec:64:d3:58:70:f8:8c:ea:5d:fa:7e:50:
                    26:c4:ac:ac:5d:84:be:fc:8f:23:09:5f:40:b9:12:
                    e7:3c:8c:0f:71:e0:42:3a:da:0e:45:22:ba:1c:29:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:EB:23:CC:46:97:77:B2:1F:25:EA:EA:C1:31:73:9E:29:34:CC
            X509v3 Authority Key Identifier:
                keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:af:72:4a:b6:45:45:68:6e:d1:1e:ca:95:a4:9a:fe:b7:
         74:aa:03:c4:69:ec:8f:70:ae:bb:26:a8:a0:7d:28:f4:82:0f:
         2e:ec:1f:fe:5c:fd:84:5d:e4:b6:c4:6c:d5:0b:3a:79:90:8a:
         71:fc:a2:bf:b8:05:cd:e8:05:10:75:76:45:2f:aa:68:c4:9a:
         16:d0:0f:0f:05:c5:68:1e:d9:18:61:83:76:68:ef:e8:98:32:
         a9:c2:d4:69:31:c2:b1:8f:dd:3e:76:a5:33:f0:cf:85:c1:17:
         c9:8d:23:30:58:40:e7:aa:b2:c1:03:25:4f:d6:c0:6c:d5:c8:
         e9:90:e3:54:84:80:87:08:c9:5d:e8:d0:3e:78:e4:5b:59:de:
         bc:ae:bb:c2:bb:e6:f2:ed:5c:d7:d7:77:85:44:71:1a:6e:c1:
         47:09:34:6c:65:e1:2e:1f:9b:14:58:6a:eb:4d:ca:fc:78:bd:
         3b:a3:63:95:7b:62:3a:e4:c8:16:1d:64:07:18:a1:0a:a4:04:
         92:0c:d4:d2:a7:65:14:bc:62:71:1b:b1:d7:59:20:0b:bd:44:
         f5:93:af:9e:52:d0:00:af:47:26:06:7a:f2:4e:38:6b:a7:79:
         2b:c3:0e:52:1c:e0:81:85:36:d1:15:8a:85:23:cb:e5:dd:e3:
         27:aa:cd:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xpn69i6XRYeI8cTPwM8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzE5NTEzZmQwYjkwNDE3MDYwYTIxOGI3NmQ2MmI4ZTNm
YmNjNTEwHhcNMjUxMDE5MTQwMTM3WhcNMjUxMDIwMTQwMTM3WjAzMTEwLwYDVQQD
Eyg0MDU2ZWIyM2NjNDY5Nzc3YjIxZjI1ZWFlYWMxMzE3MzllMjkzNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PyjxiPc7JeYdRWfa1Mwpp04O/5K
udO5HhwzgS3HTdB76xSvD8TYb9jclgcdIfdWpsc2eH2Ioe8c783Wr2Sh1te4lDpc
B6tt/v6N+bYRvwNype+TvIKkAgB/pMcuYR/ysWvVM3EBFgPJx3yvGHoUW1rX/Jo/
EUv8+7pC2Q0+ZtCDo/gYhS6VzQVGbi5Qu2NWbGYeZ5tw2iAnax+vdy+oTVvLRF1f
IqOtCP3iSYFpsyhYx21piSIK8qZdsxKQYkazAdOsxVjxWrjsynAxAQAxq4bxaK3s
ZNNYcPiM6l36flAmxKysXYS+/I8jCV9AuRLnPIwPceBCOtoORSK6HClNnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBW6yPMRpd3sh8l6urBMXOeKTTMMB8GA1UdIwQY
MBaAFBMxlRP9C5BBcGCiGLdtYrjj+8xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAt
NDgxNzBiZTExMzMyLzEvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAtNDgxNzBiZTExMzMy
LzEvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhOGvckq2
RUVobtEeypWkmv63dKoDxGnsj3CuuyaooH0o9IIPLuwf/lz9hF3ktsRs1Qs6eZCK
cfyiv7gFzegFEHV2RS+qaMSaFtAPDwXFaB7ZGGGDdmjv6JgyqcLUaTHCsY/dPnal
M/DPhcEXyY0jMFhA56qywQMlT9bAbNXI6ZDjVISAhwjJXejQPnjkW1nevK67wrvm
8u1c19d3hURxGm7BRwk0bGXhLh+bFFhq603K/Hi9O6NjlXtiOuTIFh1kBxihCqQE
kgzU0qdlFLxicRux11kgC71E9ZOvnlLQAK9HJgZ68k44a6d5K8MOUhzggYU20RWK
hSPL5d3jJ6rNfg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:42 2025 by rpki-client