Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
File:                     EeWvTHKGkglTmxGUWXsD-jpKVUo.mft (raw, json)
Hash identifier:          eskn5hYRi4tXNRhQ7rvawxhCz2Y/O9Vf7Zwqfbs1TXA=
Subject key identifier:   6F:FC:4F:AE:A5:D3:B4:5F:F6:0D:F2:59:0A:24:96:0F:DB:A0:A0:C7
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Certificate issuer:       /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial:       019A0259CD09D6B69E25448ED61EBAACB970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
Manifest number:          0FE4
Signing time:             Mon 20 Oct 2025 16:00:30 +0000
Manifest this update:     Mon 20 Oct 2025 16:00:30 +0000
Manifest next update:     Tue 21 Oct 2025 16:00:30 +0000
Files and hashes:         1: EeWvTHKGkglTmxGUWXsD-jpKVUo.crl (hash: jA16YfdCD11p7gBG+Llz9y4TGHflmu8SjSYB7x+vxi4=)
                          2: Jzm46CCydGnaow81u1_xNN5mK1k.roa (hash: 6dqJE3+wgexU/DPorZ1i735/Z7zxtOoeBz+MZoeVtcw=)
                          3: M7RGBrVeR3KtQIYcHYRjTMd4sP4.roa (hash: ISb1VwFVgG+G0QkVMeOYR3KKNz/PbEusd5lSF/7EVsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:59:cd:09:d6:b6:9e:25:44:8e:d6:1e:ba:ac:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
        Validity
            Not Before: Oct 20 16:00:30 2025 GMT
            Not After : Oct 21 16:00:30 2025 GMT
        Subject: CN=6ffc4faea5d3b45ff60df2590a24960fdba0a0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:f9:cc:aa:ad:55:79:e1:ca:9e:7f:e2:0e:
                    e7:96:e8:32:7d:41:0c:bc:5e:a0:02:26:51:da:d8:
                    19:84:a2:27:68:57:90:68:c2:d1:d3:b4:36:5a:fb:
                    73:71:42:c0:a0:ef:1c:46:c6:ec:64:b4:20:5b:55:
                    ce:ff:62:09:28:5d:91:e1:c2:ca:fe:19:83:97:31:
                    cd:66:99:3d:9a:2b:71:df:b9:da:61:73:91:d3:82:
                    bc:77:6e:c7:bc:79:ff:4f:52:f8:6d:7c:04:3c:8f:
                    62:15:4c:cf:e5:b5:f5:fc:a8:57:a1:bc:12:70:6a:
                    34:64:f7:08:e7:d0:39:a8:48:14:28:3e:45:b9:f0:
                    c8:24:dd:90:06:67:d8:cc:bb:13:8d:ab:6f:70:17:
                    e2:00:9a:be:4a:fe:5c:9e:7a:d7:c3:5c:ad:88:e7:
                    2b:a1:cf:9a:c2:f5:b4:63:1e:2e:4d:5a:84:f6:28:
                    38:52:63:4b:c0:16:3e:fc:ac:73:a2:06:83:9e:1b:
                    56:d8:74:5c:0f:04:d8:fd:af:84:48:20:1c:91:22:
                    19:31:e9:bf:cc:c6:7b:9a:17:7c:9b:86:f0:c1:b0:
                    f6:f8:2b:3e:8b:ca:b6:3f:d0:08:07:9f:fd:12:bf:
                    36:70:9b:44:22:f8:34:6f:15:51:e2:7d:4c:e8:df:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FC:4F:AE:A5:D3:B4:5F:F6:0D:F2:59:0A:24:96:0F:DB:A0:A0:C7
            X509v3 Authority Key Identifier:
                keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:81:0a:ff:69:e3:97:2b:85:68:68:e5:2e:ff:50:2a:16:09:
         50:74:7c:5b:50:11:0c:e7:9e:fe:15:0c:0c:e5:5f:c6:97:87:
         b2:44:e1:f1:d5:d1:23:74:d1:bf:f9:5d:be:05:b9:ad:58:eb:
         b0:30:61:29:33:9e:8e:bb:79:3e:32:42:ba:45:b3:84:40:0d:
         70:0b:17:44:9b:98:0f:a4:11:e1:32:bd:3b:5a:2a:e6:49:b8:
         58:00:0c:d2:ba:94:4d:a2:68:e2:a9:ce:cc:ca:1b:f9:73:64:
         83:4a:5c:fd:dc:8f:93:0c:7b:ad:fa:15:b6:b1:27:00:cd:0f:
         32:ec:70:e4:be:13:35:59:a5:7c:b3:b7:1a:08:1e:7e:f6:12:
         86:ab:4a:9e:1f:63:82:c3:fe:41:98:ac:e6:d8:c5:59:b8:8c:
         f8:46:3b:b4:b4:b3:c9:51:d9:48:52:d3:89:45:40:31:ee:90:
         7a:12:8f:42:23:6a:56:da:c0:11:67:36:c8:0e:98:eb:26:9b:
         6c:a2:fa:ab:8f:1b:b7:90:55:b9:27:2c:cf:52:ca:8b:bf:b4:
         2d:a9:42:33:61:24:06:7a:b5:b9:67:09:87:3d:90:94:39:2c:
         fb:ac:c3:6c:c9:af:06:e2:a9:48:78:3d:73:24:94:ab:fc:1c:
         e1:a1:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:31:11 2025 by rpki-client