Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
File:                     eoBXqNht0zDzh4AfED8-u2_byqo.mft (raw, json)
Hash identifier:          w0innQLf0ShKDvHaZ8PC33/8B/SBczWGUmDqLogIm3M=
Subject key identifier:   A7:A2:23:D2:EB:D5:2B:FE:76:6B:37:F0:4B:50:92:A5:5D:DE:09:EB
Authority key identifier: 7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA
Certificate issuer:       /CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
Certificate serial:       019A00358DD8E58BD5AB5E5C409019D6424C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
Manifest number:          0A96
Signing time:             Mon 20 Oct 2025 06:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:40 +0000
Files and hashes:         1: HcO5cdSF05y0wg63MJNFAdh4QAo.roa (hash: Mz3glj/KonDBgt2SiP6Zk96rLbwRRRt7COjMo5lu2/M=)
                          2: eoBXqNht0zDzh4AfED8-u2_byqo.crl (hash: lRDoPP8XTq68kKLVptHQg3t4W337ftSJiiI1T4atz9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:8d:d8:e5:8b:d5:ab:5e:5c:40:90:19:d6:42:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8057a8d86dd330f387801f103f3ebb6fdbcaaa
        Validity
            Not Before: Oct 20 06:01:40 2025 GMT
            Not After : Oct 21 06:01:40 2025 GMT
        Subject: CN=a7a223d2ebd52bfe766b37f04b5092a55dde09eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:89:b9:b5:d4:d8:64:89:dc:dd:6f:cd:c9:
                    8b:7c:a4:d5:b3:e5:6e:52:6f:e9:09:42:2d:08:5b:
                    97:2b:f2:c2:51:c3:33:9b:aa:79:60:a2:0f:3c:90:
                    a1:1c:1b:53:42:2e:84:6c:49:7f:c5:f8:46:70:cd:
                    d1:e4:97:60:f1:96:c6:a3:54:9b:e3:df:6f:9f:9b:
                    06:f1:5f:3c:04:a3:d0:1a:f7:fe:9b:53:d5:69:a5:
                    bd:65:42:78:ca:9a:93:a1:e6:2c:a5:8c:d5:11:56:
                    d1:58:0f:f0:2f:42:6b:25:bf:c6:ee:56:d5:d1:45:
                    be:29:96:0a:94:a7:cd:aa:12:97:64:cb:8b:f3:b4:
                    ce:b4:80:2b:18:fd:f5:32:93:fd:6b:ea:e2:bb:d9:
                    35:d8:42:8f:b8:d7:20:72:93:99:b1:e7:3a:00:0f:
                    de:99:63:1f:ae:8d:c0:c7:5c:a1:48:92:02:47:91:
                    ce:4f:cb:b4:64:42:4f:07:30:1c:61:3f:ff:ed:fe:
                    72:2e:ce:65:e4:66:4b:72:69:b7:a2:90:4b:ed:08:
                    dc:d3:66:77:95:93:df:2a:49:ce:1f:fa:4f:17:ab:
                    fd:14:50:31:e0:c7:71:86:0d:35:ca:0e:16:57:fb:
                    94:f1:dd:1b:a2:4f:da:33:05:64:f3:d8:49:97:ff:
                    e8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A2:23:D2:EB:D5:2B:FE:76:6B:37:F0:4B:50:92:A5:5D:DE:09:EB
            X509v3 Authority Key Identifier:
                keyid:7A:80:57:A8:D8:6D:D3:30:F3:87:80:1F:10:3F:3E:BB:6F:DB:CA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoBXqNht0zDzh4AfED8-u2_byqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c48d45-63af-416b-8a24-f6976e540d94/1/eoBXqNht0zDzh4AfED8-u2_byqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:88:18:73:b0:d3:b6:71:d7:c4:6a:32:8c:d6:f9:54:04:87:
         9d:80:d8:50:3a:b1:a2:ca:21:d4:16:a5:03:2b:f9:85:76:79:
         64:1e:09:99:58:e0:b0:2a:31:5a:f9:c8:3f:53:2b:e9:88:dc:
         b1:4b:64:20:e8:82:e8:7b:b4:f6:f5:d9:95:00:2b:24:f7:9f:
         4f:9a:8c:25:b6:72:d8:b8:ae:de:eb:28:86:42:b5:f5:22:ce:
         94:b9:41:d9:70:6f:4f:c8:b2:e1:fa:c6:a2:c9:b3:e6:bd:9c:
         71:bb:59:41:27:54:9c:c4:64:59:ae:8c:68:9f:c7:5a:43:d1:
         a4:9b:06:e0:e9:46:36:ad:ce:5d:b4:87:11:dd:51:45:52:47:
         86:9c:8f:64:20:87:f8:e5:4c:e2:1d:7c:de:af:11:27:83:ec:
         d6:fa:c8:e9:4e:c7:2f:29:33:d1:fb:13:90:46:1c:8a:aa:45:
         7c:4f:96:c0:bf:ef:87:f3:11:7d:f2:db:aa:6f:1e:c9:0e:84:
         44:53:30:9d:9e:5c:56:fe:6c:87:01:03:a6:f8:67:0e:aa:d6:
         6f:d4:a6:42:33:a0:23:74:10:86:7a:22:44:06:ce:d6:6b:a5:
         7e:c4:fc:aa:62:84:d4:2c:0f:99:f5:c1:81:44:3e:08:71:91:
         17:56:11:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoANY3Y5YvVq15cQJAZ1kJMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODA1N2E4ZDg2ZGQzMzBmMzg3ODAxZjEwM2YzZWJiNmZk
YmNhYWEwHhcNMjUxMDIwMDYwMTQwWhcNMjUxMDIxMDYwMTQwWjAzMTEwLwYDVQQD
EyhhN2EyMjNkMmViZDUyYmZlNzY2YjM3ZjA0YjUwOTJhNTVkZGUwOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbGJubXU2GSJ3N1vzcmLfKTVs+Vu
Um/pCUItCFuXK/LCUcMzm6p5YKIPPJChHBtTQi6EbEl/xfhGcM3R5Jdg8ZbGo1Sb
499vn5sG8V88BKPQGvf+m1PVaaW9ZUJ4ypqToeYspYzVEVbRWA/wL0JrJb/G7lbV
0UW+KZYKlKfNqhKXZMuL87TOtIArGP31MpP9a+riu9k12EKPuNcgcpOZsec6AA/e
mWMfro3Ax1yhSJICR5HOT8u0ZEJPBzAcYT//7f5yLs5l5GZLcmm3opBL7Qjc02Z3
lZPfKknOH/pPF6v9FFAx4Mdxhg01yg4WV/uU8d0bok/aMwVk89hJl//oRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeiI9Lr1Sv+dms38EtQkqVd3gnrMB8GA1UdIwQY
MBaAFHqAV6jYbdMw84eAHxA/Prtv28qqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9CWHFOaHQwekR6aDRBZkVEOC11Ml9ieXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNDhkNDUtNjNhZi00MTZiLThhMjQt
ZjY5NzZlNTQwZDk0LzEvZW9CWHFOaHQwekR6aDRBZkVEOC11Ml9ieXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNDhkNDUtNjNhZi00MTZiLThhMjQtZjY5NzZlNTQwZDk0
LzEvZW9CWHFOaHQwekR6aDRBZkVEOC11Ml9ieXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4gYc7DT
tnHXxGoyjNb5VASHnYDYUDqxosoh1BalAyv5hXZ5ZB4JmVjgsCoxWvnIP1Mr6Yjc
sUtkIOiC6Hu09vXZlQArJPefT5qMJbZy2Liu3usohkK19SLOlLlB2XBvT8iy4frG
osmz5r2ccbtZQSdUnMRkWa6MaJ/HWkPRpJsG4OlGNq3OXbSHEd1RRVJHhpyPZCCH
+OVM4h183q8RJ4Ps1vrI6U7HLykz0fsTkEYciqpFfE+WwL/vh/MRffLbqm8eyQ6E
RFMwnZ5cVv5shwEDpvhnDqrWb9SmQjOgI3QQhnoiRAbO1mulfsT8qmKE1CwPmfXB
gUQ+CHGRF1YRDw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:06 2025 by rpki-client