Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
File:                     EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft (raw, json)
Hash identifier:          kAwjZDt+NY1r0q5o220374OS0PAXOnHhNz55/eNN2yU=
Subject key identifier:   30:A6:42:CD:D8:FD:37:CF:57:F2:73:A3:A2:8D:44:F2:F2:A6:71:17
Authority key identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50
Certificate issuer:       /CN=1015129921e7e15faef736024a4337340c857050
Certificate serial:       0199FB461AB269C584586BA55CF558E8290E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
Manifest number:          6E
Signing time:             Sun 19 Oct 2025 07:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:39 +0000
Files and hashes:         1: EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl (hash: u8+0Ed5gIp40tB7JN3WzzNKfVBfpwi3PLxg2hqowf3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:1a:b2:69:c5:84:58:6b:a5:5c:f5:58:e8:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1015129921e7e15faef736024a4337340c857050
        Validity
            Not Before: Oct 19 07:01:39 2025 GMT
            Not After : Oct 20 07:01:39 2025 GMT
        Subject: CN=30a642cdd8fd37cf57f273a3a28d44f2f2a67117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:07:b4:14:cb:76:f7:f1:77:0b:f0:b5:b3:
                    a3:54:9f:74:09:70:cd:df:21:58:ba:8e:81:0b:64:
                    62:9e:86:f6:d5:39:62:d7:17:56:41:cc:e4:f7:69:
                    70:20:df:fa:fb:49:fe:b7:95:6e:f5:ba:b1:d2:1e:
                    ab:1f:45:ef:7e:4f:91:2b:65:c5:44:90:6d:28:dd:
                    94:01:b8:15:f2:bf:3b:b7:4d:2e:ae:79:9a:21:22:
                    cf:ed:54:eb:9a:96:d3:52:af:46:7f:42:5c:2b:a3:
                    30:7f:ac:e0:c8:f3:3d:db:07:6f:2b:c5:85:0e:86:
                    1f:70:71:aa:5f:80:68:41:0b:04:a1:c2:42:ae:9e:
                    ff:ce:15:e8:8a:19:aa:f3:21:94:29:48:2b:3c:9e:
                    17:09:d5:93:68:c7:88:9c:85:4e:ab:d1:95:7a:e8:
                    e8:46:83:3e:9d:28:53:a0:22:b7:c4:29:0e:50:e6:
                    3f:81:da:56:5f:0c:6f:49:30:52:ba:e1:33:d3:f7:
                    36:d4:3a:90:39:28:49:a9:fc:62:1e:1c:b8:27:f2:
                    c5:e7:ab:d7:8f:f1:eb:2f:24:de:ea:ad:a6:51:ba:
                    78:4f:e4:ce:6b:da:1b:b9:59:ec:09:e8:11:d5:56:
                    f9:3e:90:af:78:1c:aa:a3:82:4a:79:58:b3:cb:b5:
                    21:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A6:42:CD:D8:FD:37:CF:57:F2:73:A3:A2:8D:44:F2:F2:A6:71:17
            X509v3 Authority Key Identifier:
                keyid:10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ab:df:87:af:f8:59:d4:60:5e:a5:50:0e:98:dc:3b:31:f9:
         a2:f2:01:8b:3a:e8:40:49:25:65:3d:72:ad:b2:54:a9:e3:b3:
         74:11:e0:87:8b:1e:dc:99:29:c9:4b:0d:4f:59:91:a6:8b:12:
         5e:64:c2:b8:67:7c:27:eb:50:5d:d3:9b:c5:92:2d:63:ec:bb:
         52:fb:45:a5:97:18:02:b0:57:8d:86:42:f0:29:ce:e5:3d:c7:
         da:7b:8f:24:71:c1:b1:56:99:08:1d:90:ac:ee:bc:af:e0:a9:
         cc:57:cc:95:56:46:cf:8c:76:1a:7d:23:a3:37:a1:8f:62:26:
         9c:2b:26:41:b1:76:85:43:40:cf:2c:4a:b3:2b:54:b5:13:d8:
         c2:cc:5d:08:39:d6:13:70:7e:d1:7e:24:31:fc:4e:ef:dd:45:
         99:b0:9b:18:ad:c9:6a:59:6c:1c:4b:bb:40:f1:b4:4b:c3:12:
         53:f1:e7:7b:bc:2c:11:a0:3c:e6:e6:0a:b1:f7:d1:c6:e6:a6:
         e9:f9:1a:a3:fc:4b:96:ae:e9:cc:2a:91:04:97:e4:37:ef:d7:
         cc:c1:45:9e:83:fc:8c:cd:d3:b9:68:4d:10:bd:54:55:a3:3b:
         21:e8:21:20:08:b0:d9:a1:06:60:f3:7d:43:bf:68:07:da:b8:
         3a:31:07:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RhqyacWEWGulXPVY6CkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTUxMjk5MjFlN2UxNWZhZWY3MzYwMjRhNDMzNzM0MGM4
NTcwNTAwHhcNMjUxMDE5MDcwMTM5WhcNMjUxMDIwMDcwMTM5WjAzMTEwLwYDVQQD
EygzMGE2NDJjZGQ4ZmQzN2NmNTdmMjczYTNhMjhkNDRmMmYyYTY3MTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVoHtBTLdvfxdwvwtbOjVJ90CXDN
3yFYuo6BC2Rinob21Tli1xdWQczk92lwIN/6+0n+t5Vu9bqx0h6rH0Xvfk+RK2XF
RJBtKN2UAbgV8r87t00urnmaISLP7VTrmpbTUq9Gf0JcK6Mwf6zgyPM92wdvK8WF
DoYfcHGqX4BoQQsEocJCrp7/zhXoihmq8yGUKUgrPJ4XCdWTaMeInIVOq9GVeujo
RoM+nShToCK3xCkOUOY/gdpWXwxvSTBSuuEz0/c21DqQOShJqfxiHhy4J/LF56vX
j/HrLyTe6q2mUbp4T+TOa9obuVnsCegR1Vb5PpCveByqo4JKeVizy7UhtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCmQs3Y/TfPV/Jzo6KNRPLypnEXMB8GA1UdIwQY
MBaAFBAVEpkh5+Ffrvc2AkpDNzQMhXBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJVU21TSG40Vi11OXpZQ1NrTTNOQXlGY0ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mYzFmYTUtMTI1Mi00OTMyLTk4ZGMt
ZWQ5NWY1NmExYTU1LzEvRUJVU21TSG40Vi11OXpZQ1NrTTNOQXlGY0ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9mYzFmYTUtMTI1Mi00OTMyLTk4ZGMtZWQ5NWY1NmExYTU1
LzEvRUJVU21TSG40Vi11OXpZQ1NrTTNOQXlGY0ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOavfh6/4
WdRgXqVQDpjcOzH5ovIBizroQEklZT1yrbJUqeOzdBHgh4se3JkpyUsNT1mRposS
XmTCuGd8J+tQXdObxZItY+y7UvtFpZcYArBXjYZC8CnO5T3H2nuPJHHBsVaZCB2Q
rO68r+CpzFfMlVZGz4x2Gn0jozehj2ImnCsmQbF2hUNAzyxKsytUtRPYwsxdCDnW
E3B+0X4kMfxO791FmbCbGK3JallsHEu7QPG0S8MSU/Hne7wsEaA85uYKsffRxuam
6fkao/xLlq7pzCqRBJfkN+/XzMFFnoP8jM3TuWhNEL1UVaM7IeghIAiw2aEGYPN9
Q79oB9q4OjEHdA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:02:19 2025 by rpki-client