Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
File:                     eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json)
Hash identifier:          5q67z//Z0qzft1gcWiaQABMZDNl9W2F2lCGqqO2ko8c=
Subject key identifier:   76:81:E4:35:05:A9:5B:F6:47:16:7E:C5:34:8D:74:E8:AD:75:B9:93
Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A
Certificate issuer:       /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
Certificate serial:       019A02597D99C57C93A17EDB5061E788496A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
Manifest number:          16E7
Signing time:             Mon 20 Oct 2025 16:00:10 +0000
Manifest this update:     Mon 20 Oct 2025 16:00:10 +0000
Manifest next update:     Tue 21 Oct 2025 16:00:10 +0000
Files and hashes:         1: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: G1Cm/2jKkY+AD8hYoh9FvDMLEZB65/B0zl4hSBG+zX8=)
                          2: stNJNaGeal-FHwEwjC3WB-1Iv34.roa (hash: qGHFbDJPeE85BxBcD0txqzFvtVR+ui4dTz0qswD2vsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:59:7d:99:c5:7c:93:a1:7e:db:50:61:e7:88:49:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a
        Validity
            Not Before: Oct 20 16:00:10 2025 GMT
            Not After : Oct 21 16:00:10 2025 GMT
        Subject: CN=7681e43505a95bf647167ec5348d74e8ad75b993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b1:2f:a5:27:28:b8:b8:95:a8:11:0f:d7:5f:
                    9e:04:e2:a3:48:6e:64:28:bc:d0:e2:91:29:26:d3:
                    46:52:05:2f:d6:79:5c:da:ef:50:79:6c:c7:5a:4c:
                    57:92:c8:2b:cf:a9:f9:38:26:85:b1:56:e9:52:ce:
                    b1:73:15:d7:9c:20:d9:29:9d:10:52:26:5b:4b:a9:
                    3c:65:29:a3:ad:28:59:54:fb:02:c2:07:6a:cb:90:
                    77:37:0a:ed:3e:15:20:90:29:3b:f1:e9:c5:52:90:
                    34:f7:4f:50:ce:cb:a0:72:77:86:f1:c4:45:44:47:
                    d9:3a:44:b0:1f:b3:19:62:0c:7c:e4:cc:17:0e:e6:
                    e4:38:2d:92:f6:27:ef:f2:15:a9:30:a4:8c:44:9e:
                    a2:20:8e:f5:67:2a:d6:17:a6:ee:38:f8:ba:ce:65:
                    cc:92:d0:ba:1d:43:73:df:d0:4c:87:4c:7a:c8:eb:
                    40:c8:3e:8a:4c:71:79:a6:9d:b7:bd:02:4f:b9:77:
                    31:0f:16:21:ab:22:37:a7:f3:7f:57:c6:e2:a5:15:
                    ec:88:c5:a1:1a:71:4e:9c:a0:dc:03:3c:bc:1a:ed:
                    e4:52:3a:d8:81:ae:1b:78:e2:26:d5:12:ab:93:e0:
                    23:77:2e:e0:43:15:d1:85:d5:2e:53:1b:bf:c5:f4:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:81:E4:35:05:A9:5B:F6:47:16:7E:C5:34:8D:74:E8:AD:75:B9:93
            X509v3 Authority Key Identifier:
                keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9f:a8:90:ed:e3:42:f4:7b:84:c3:8a:8b:3e:ec:1d:35:b9:
         83:fc:d2:b8:cd:96:7f:46:1c:a0:fa:88:01:4c:77:08:31:15:
         1c:34:39:21:21:dc:47:14:c1:34:31:aa:7a:5d:73:67:00:58:
         ac:72:fb:8e:b6:7a:2c:b4:45:47:70:f3:23:a4:b6:53:89:87:
         14:fb:87:cc:55:e0:59:52:04:c0:e1:70:4c:da:ac:80:e3:7a:
         84:e8:11:d2:46:1a:b5:e1:d7:f2:64:25:34:28:9b:99:cf:f2:
         c1:77:0a:e3:9e:da:a1:3f:fd:3d:3f:18:00:b0:50:05:fc:ac:
         0a:fd:b2:d0:64:4a:51:0c:f2:bc:c2:fb:30:2d:8f:42:95:77:
         73:46:af:95:b9:47:aa:29:6d:f1:3d:4c:a4:34:89:6a:ee:56:
         3a:6c:17:38:66:e2:a4:d9:bf:da:28:a9:c5:4f:42:b5:11:8c:
         cf:57:d3:0c:6f:cd:13:79:82:7d:18:63:06:95:d9:6f:b9:00:
         fc:0b:d3:c0:27:a9:68:35:fe:aa:16:1d:86:ec:de:21:9a:ac:
         46:08:68:05:72:77:30:0f:63:21:a8:40:a7:35:0e:00:d4:13:
         ba:65:8f:cb:c3:0b:09:ca:10:e5:f5:3b:5b:1b:3d:ea:f2:bc:
         c9:70:c4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:39 2025 by rpki-client