Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
File:                     eBC14tQZE_koo06ZYbf8iWSFAEY.mft (raw, json)
Hash identifier:          y6zIM40LtCeyTtONaE/I+UmUIhxV009/NLZSy14/9S8=
Subject key identifier:   AC:BD:B5:31:E7:3B:8D:DF:C5:85:CC:46:C1:A7:CE:73:B8:5F:97:C3
Authority key identifier: 78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46
Certificate issuer:       /CN=7810b5e2d41913f928a34e9961b7fc8964850046
Certificate serial:       0199FC21570F31B34695EC01044974C2C87A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
Manifest number:          32
Signing time:             Sun 19 Oct 2025 11:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:07 +0000
Files and hashes:         1: cE7D59zxehJZdZNEvYWQXDVNz7A.roa (hash: p6fUjsKyUdQv5Z7o25/yMrHwWCat6eLyUeS3asqc+Yo=)
                          2: eBC14tQZE_koo06ZYbf8iWSFAEY.crl (hash: qCsy++fU8D4a0qJGe+OMWhsc7WtqVIws6lOeJzZPzVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:57:0f:31:b3:46:95:ec:01:04:49:74:c2:c8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7810b5e2d41913f928a34e9961b7fc8964850046
        Validity
            Not Before: Oct 19 11:01:07 2025 GMT
            Not After : Oct 20 11:01:07 2025 GMT
        Subject: CN=acbdb531e73b8ddfc585cc46c1a7ce73b85f97c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5a:91:fb:f5:a5:da:f3:f7:0e:18:84:e3:b5:
                    78:2d:77:08:89:cf:4e:4b:8b:cc:5a:d4:46:67:a0:
                    16:7d:f7:32:55:3e:e4:d7:7e:78:8e:c7:f7:b8:34:
                    e2:f5:a1:64:4d:c4:c5:54:c1:6c:f4:82:a7:02:25:
                    78:e1:fc:f5:46:e0:20:ed:2c:9a:e3:f3:9a:37:4f:
                    17:f4:fa:04:9d:a4:8a:5f:fc:d0:5e:aa:9d:70:bf:
                    d4:11:0d:6b:30:d5:65:48:14:b1:57:02:7b:b1:f7:
                    ff:93:1b:9b:c0:b6:96:da:a2:59:74:d2:dc:ec:a9:
                    68:3f:ba:16:43:ae:3d:a4:79:38:6f:7b:7f:50:cd:
                    c0:9b:ec:14:64:f5:ea:e2:c7:9c:a6:cc:1f:88:25:
                    33:f2:84:b6:e9:94:b1:c2:3b:3e:7e:1c:1c:17:c0:
                    15:16:a4:bf:8f:88:4b:f6:90:8e:7e:c5:43:4b:f4:
                    c2:8f:7d:79:3e:6b:dc:7a:06:75:97:8a:39:35:5f:
                    ab:1c:46:61:29:40:e9:91:d5:9f:ad:33:c7:22:d2:
                    b8:78:31:9d:34:f2:cd:a9:84:d3:bc:b4:d1:b7:4d:
                    92:e9:b8:aa:dc:38:6c:89:77:16:b4:55:8c:a0:12:
                    6e:cc:0c:b2:df:b9:35:7e:cc:0d:89:8b:98:9c:b3:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:B5:31:E7:3B:8D:DF:C5:85:CC:46:C1:A7:CE:73:B8:5F:97:C3
            X509v3 Authority Key Identifier:
                keyid:78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:dd:26:be:02:00:96:b0:eb:c9:36:fd:9e:ec:8b:5b:c5:5b:
         a3:a0:0f:89:d5:38:fc:c2:75:68:28:8f:37:79:93:e0:b7:35:
         f3:70:12:1b:3b:ca:9c:af:35:af:d2:76:64:38:04:21:fa:ba:
         e5:bf:31:aa:7e:70:0b:ff:a0:1c:cc:b5:8c:3a:16:e1:07:00:
         7a:2b:a3:80:ee:df:35:b4:22:2e:d1:06:85:63:69:d5:c5:60:
         ae:f6:85:55:74:0e:49:c8:45:2f:a6:62:f5:ed:58:02:a1:ae:
         4f:37:b0:47:f4:4e:08:82:f6:79:97:05:16:56:6e:7f:cb:83:
         4e:d5:a9:5e:43:75:4d:e6:dc:39:9d:28:2c:e3:4b:f2:19:45:
         89:06:70:0e:32:cf:33:67:b6:cd:94:c7:8e:9b:0c:f7:ba:0a:
         b6:57:b2:dd:7e:a1:26:1e:7b:29:53:a5:e8:d7:40:15:6a:bf:
         51:c7:ab:99:85:b1:33:50:8f:75:b2:6b:b5:36:e1:7a:44:d8:
         d2:3f:83:12:3e:ee:73:dc:5e:4c:af:c4:b5:de:4a:b3:d9:e8:
         9a:66:aa:d5:79:0e:aa:85:53:ef:71:3c:c7:87:56:41:b1:11:
         fe:0f:d8:e4:18:79:65:1f:fd:e8:04:9e:75:23:9e:93:c3:e4:
         7f:ee:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:09 2025 by rpki-client