Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          xO8XNeoxYaMegxO5pTPQ969rALdJNceZlYfqoY9P66o=
Subject key identifier:   02:82:9F:A4:F7:92:5C:14:A2:18:7F:98:C4:3B:A6:28:C7:2E:03:27
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       0199FEB4F247FC48910289B55A63B894B91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 23:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:35 +0000
Files and hashes:         1: AVUcMAxEbDhM7vM-FUjcCVxpkZ4.roa (hash: XsWajvBJCQBaQCOPW97TUhH7waI4+kM6mJXjahHInmI=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: 5bJ+i81j9cu1SkzMg1EnHEVp4n21cjDEHSaZPX1VqiY=)
                          3: Pb3BR7I3yypN0jZXyhXVjX7_7qk.roa (hash: Hki992M/vj13WyFzgI/qTd7id5FfrVmsocjjt8H+8YY=)
                          4: SEzIpQlEdNO7qpFJFox8nqfBkU8.roa (hash: DyyJf3v7/p2uLPbLbI0Ax8tgSfmYrSUpfCXMF5ZFV0U=)
                          5: e6QKnd26NFxLpuuhAxML73T_BHw.roa (hash: WvnUhZyvWR50U69T375x8NsElxKc8FKV3YkOrKaAbIs=)
                          6: ilp0a42y4ZM8M4NmpHagTEQmfIY.roa (hash: b8xhghXOeNEICuuPH88EHMI0zu8DkuF/9JKbLv1CD0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:f2:47:fc:48:91:02:89:b5:5a:63:b8:94:b9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Oct 19 23:01:35 2025 GMT
            Not After : Oct 20 23:01:35 2025 GMT
        Subject: CN=02829fa4f7925c14a2187f98c43ba628c72e0327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8e:c0:94:6f:5d:d3:5a:15:21:dc:08:ff:d0:
                    9a:6b:85:f2:ab:86:9f:16:41:1d:90:22:e4:b9:5a:
                    fd:7e:47:9e:2d:b4:d2:f5:2d:52:39:3b:e1:50:79:
                    85:3b:2b:7e:f9:1f:62:d9:34:98:59:d0:fb:30:1a:
                    2e:28:89:cf:33:7d:11:03:d9:62:55:4c:2f:c3:3d:
                    0d:24:a5:22:b9:50:23:ee:ce:21:4c:b5:9c:a4:2b:
                    1d:23:74:2a:8d:79:14:d1:42:56:b4:89:11:20:40:
                    cc:70:dc:16:bb:fa:c0:05:45:63:6b:53:44:dd:80:
                    8f:4e:21:7c:cb:ba:f2:28:14:12:13:e1:40:36:76:
                    00:ed:5c:73:ca:96:50:e9:7d:ca:3c:22:44:91:c8:
                    95:d6:aa:ac:63:de:ea:2b:db:b3:7a:9a:d7:e3:e4:
                    8b:d5:fe:67:da:56:49:38:d5:43:5d:a3:fe:7e:4f:
                    20:a8:e3:d6:b3:fd:a5:38:1e:26:86:d7:4b:a7:2a:
                    cd:d0:35:ff:0c:a3:07:64:d1:84:76:26:0c:26:99:
                    99:2b:0b:fd:d4:a2:2b:85:ea:d3:4b:15:1e:f5:4c:
                    b6:41:bc:19:77:77:f2:b2:05:68:64:96:4a:ef:e7:
                    6c:4c:96:09:1c:20:a1:0d:41:1d:0a:a3:aa:66:59:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:82:9F:A4:F7:92:5C:14:A2:18:7F:98:C4:3B:A6:28:C7:2E:03:27
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:60:aa:ca:f7:08:d6:14:a0:5a:62:7a:65:d0:21:8c:e3:
         f1:8c:89:2c:40:b3:b2:25:ab:32:9d:c2:a8:e2:9c:48:b3:b5:
         ad:46:46:bc:9b:0f:37:13:eb:1c:90:73:1b:72:74:8f:c5:d7:
         7f:40:e6:f1:77:5d:dd:7f:a2:82:fd:39:29:45:a5:ad:fa:c7:
         d8:94:df:8b:99:e1:50:92:bd:52:99:17:06:2a:22:11:97:c7:
         cf:07:21:cd:7e:7c:0b:c2:00:60:a4:1c:2a:50:81:7d:ed:ec:
         62:0b:48:a2:b7:29:8e:86:04:ed:78:6c:4f:fb:0c:17:11:9f:
         97:ff:fd:a1:3b:12:a2:8b:1b:4e:39:d1:af:7f:54:33:fa:a9:
         37:29:56:c8:fc:01:12:e9:36:76:e5:26:d0:32:d6:59:11:80:
         94:6b:79:ec:e7:b4:1e:b2:b8:b1:ae:bc:88:83:fb:ba:96:d7:
         05:c9:0d:ab:7d:95:f9:2b:c2:6e:ba:e7:71:aa:ec:19:c9:bb:
         d2:57:35:e5:dd:16:4b:84:52:9c:5d:94:e7:e9:2a:8e:09:4e:
         8c:8c:ac:fa:44:01:81:d4:ba:bc:b7:48:41:77:91:1d:cd:0f:
         12:5e:d7:5e:be:00:2d:54:09:aa:c2:9d:5b:1b:dc:dd:fb:66:
         9c:8a:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:41 2025 by rpki-client