Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          ELIXSq5BSDI0FxpyPWzM/r3LCUDR90bmru2U87PgUDg=
Subject key identifier:   FD:EF:F0:60:EB:4E:33:D0:56:A8:8D:9B:0F:45:71:39:C2:0C:EE:07
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       0199FEB4825ED0E9D35A81DB62D0BBF64116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          C4
Signing time:             Sun 19 Oct 2025 23:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:06 +0000
Files and hashes:         1: DyDiidWZS3iA7B2blKmA9bXsSRk.roa (hash: 8Th9ZjmszvDIlprvR+a1tMmoJ0kkYSailEtQfsqFMeY=)
                          2: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: 35bf+q7XSZSNVeEJkO8YTVb7OTLIavbph6XCbQdSGRE=)
                          3: EZZjtsRZB4At2QcIZcqmfQeU5tg.roa (hash: vbbShe8wdndeEL7lS6dm5FZSSpF2qDaTf1tgRMD7QrU=)
                          4: L6E0N5We5qeZ-y9d2NJMforAByY.roa (hash: ZYC/BS1PJtF8W5Ev9dV+L5Rd8Gl/CdhyxKHOzd5pCTw=)
                          5: YaE-516tO0-vxtzgzUQCVeYa6sM.roa (hash: yKU5PrBmHLHt75hheXsS4PIrNLFdDNALNLqvpMN9xYM=)
                          6: sb-GCH9IlUVV1HBTwu_2sGH00L8.roa (hash: NIEwuhjNP7AJ1aGJG2ysJUL1eP2V5WuknrN1zsvlhbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:82:5e:d0:e9:d3:5a:81:db:62:d0:bb:f6:41:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Oct 19 23:01:06 2025 GMT
            Not After : Oct 20 23:01:06 2025 GMT
        Subject: CN=fdeff060eb4e33d056a88d9b0f457139c20cee07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c9:37:93:71:27:8c:d9:0e:5e:6d:3e:85:ae:
                    2a:5d:05:98:f7:28:30:34:50:e7:34:c1:c8:00:27:
                    22:60:87:2a:5a:fc:df:e4:89:a9:08:09:85:64:d2:
                    54:97:2b:d5:4a:b3:84:37:7c:3d:27:8f:50:9e:a7:
                    e2:31:26:1f:5b:db:ed:59:b5:c3:85:48:0e:33:5c:
                    cf:ba:e7:92:63:04:af:db:ec:0b:f9:cf:01:a7:77:
                    f7:e1:5e:ec:8a:0b:f9:ec:92:da:5f:d5:6d:eb:cf:
                    7b:48:3c:35:14:6a:ac:72:7c:d2:e8:75:98:91:1e:
                    5b:8a:24:7f:7d:13:d5:71:19:d8:7d:a5:67:9a:f2:
                    1f:44:f4:06:c8:05:9f:0c:39:55:5f:4e:b7:40:f2:
                    ed:57:de:18:85:b7:ec:83:93:be:b8:fb:6f:e5:ae:
                    52:1c:d2:bd:15:a8:1e:34:69:81:2b:40:3c:4d:37:
                    2a:b0:d9:80:15:6f:b3:12:3c:26:35:29:db:26:f3:
                    9a:0b:d3:3a:da:d6:ab:0c:d3:4a:59:94:c3:93:50:
                    8a:08:ab:33:ef:ab:c9:86:23:94:6e:84:c7:f1:0d:
                    ba:39:cb:76:24:d2:77:22:71:62:99:67:da:3c:dd:
                    73:73:83:54:e3:2f:03:15:49:a5:f0:e1:cb:bb:97:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EF:F0:60:EB:4E:33:D0:56:A8:8D:9B:0F:45:71:39:C2:0C:EE:07
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:0a:87:bf:24:1d:9b:35:41:0a:50:3f:0e:a1:7f:31:a6:
         01:35:68:1e:98:a0:45:73:9b:23:87:cb:7c:46:3e:a1:83:24:
         9d:c4:82:b7:10:6d:1d:c8:64:44:01:d6:51:da:64:7e:7c:02:
         f0:a3:ec:d1:d3:f5:7f:7f:de:82:26:8c:b2:85:44:d5:f2:3a:
         e3:5a:f9:ef:7f:60:a4:dd:81:14:c3:1e:95:58:15:3a:db:9b:
         fb:80:fa:87:1b:21:4f:ea:30:af:3e:d6:05:dc:12:0e:c3:3a:
         37:97:24:71:ce:7c:7e:d9:fc:ab:7e:5e:aa:f3:7f:e0:38:e3:
         79:a9:57:aa:74:ae:21:e5:04:a1:eb:10:6f:85:68:a4:87:18:
         70:74:6a:4e:e5:ba:be:fd:d1:5f:5e:9a:69:a7:2c:d3:73:69:
         2c:21:bd:7f:0c:63:f4:40:d9:9b:b4:1b:11:d9:4e:ed:97:68:
         d9:11:1f:15:88:53:91:84:01:8d:c9:60:0b:66:30:91:ac:7e:
         23:47:e3:a8:09:78:82:79:b6:95:f5:f4:4b:a5:96:15:26:5a:
         de:59:40:eb:73:26:68:8f:d0:61:35:8e:a3:9d:4a:8b:48:9d:
         a3:b1:b8:c6:5e:74:2e:68:50:a5:57:f2:52:be:b0:26:64:92:
         2b:d4:c4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:43 2025 by rpki-client