Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
File:                     EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft (raw, json)
Hash identifier:          NRgHMIG2neap1sBssEs2seRfLIDDY+CMJS+VK+524Gg=
Subject key identifier:   B9:E8:39:83:2D:C6:09:54:45:1B:04:7A:39:E5:7E:45:20:E2:CA:F0
Authority key identifier: 11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C
Certificate issuer:       /CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
Certificate serial:       0199FCFD358FA1EB6FBF03FC0F5143C27DD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
Manifest number:          0E15
Signing time:             Sun 19 Oct 2025 15:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:16 +0000
Files and hashes:         1: CuC7YwLfcFdkBUn2FoNsTNOXfjk.roa (hash: I4hol0YsV7mnOp0GHtrq4UwhSCksN1Q1IbqUqZuz7o8=)
                          2: EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl (hash: gQsMa7TLvp1cupmasTrm4736Q20lBXHpc3f8HE8u+MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:35:8f:a1:eb:6f:bf:03:fc:0f:51:43:c2:7d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114c56d595de33cb8751739dbdd9b45edb2eff0c
        Validity
            Not Before: Oct 19 15:01:16 2025 GMT
            Not After : Oct 20 15:01:16 2025 GMT
        Subject: CN=b9e839832dc60954451b047a39e57e4520e2caf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:0c:b4:58:fd:fd:a0:9b:76:c4:3e:bf:42:
                    4f:fe:3c:81:8e:9f:29:02:21:d5:73:e5:dc:b7:5d:
                    0a:fd:06:ac:d5:12:7c:2a:91:b5:d4:0a:7f:8a:07:
                    bd:5d:2e:25:f8:52:9f:ad:7b:b1:79:cf:ae:ee:87:
                    2d:bd:6f:b4:64:8b:d9:94:10:b2:51:47:63:9b:62:
                    74:e1:61:bb:c0:94:78:d8:09:d4:73:62:10:f6:01:
                    1c:f1:c1:b3:eb:8b:06:f4:47:20:76:cf:b9:4c:6d:
                    bb:8d:ce:c2:21:a1:09:2f:11:bb:42:3f:32:70:86:
                    c5:43:4c:37:87:26:ce:99:94:ca:1b:3f:b3:66:c5:
                    f7:21:41:cd:e2:ce:e8:0f:d9:d1:16:c0:24:9e:eb:
                    85:19:ae:86:81:8c:08:a0:b3:eb:47:5c:a9:cd:09:
                    5d:b0:cc:58:04:64:13:8b:03:c4:30:8c:08:9e:45:
                    db:3d:03:61:47:bb:66:9b:c6:b0:06:86:8c:eb:ee:
                    8f:00:5a:0d:74:1b:9d:9a:46:66:f8:c4:8f:1a:45:
                    9e:71:c3:a2:d5:21:6b:47:b5:8a:fa:ac:68:fc:06:
                    76:15:9c:6d:50:45:7d:ce:ef:c1:05:ee:9f:4d:e2:
                    a8:bd:89:ab:ad:ac:cf:37:cb:24:89:f5:4e:0d:95:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E8:39:83:2D:C6:09:54:45:1B:04:7A:39:E5:7E:45:20:E2:CA:F0
            X509v3 Authority Key Identifier:
                keyid:11:4C:56:D5:95:DE:33:CB:87:51:73:9D:BD:D9:B4:5E:DB:2E:FF:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0f082c-b18f-41c5-9fd4-3011068eeb69/1/EUxW1ZXeM8uHUXOdvdm0Xtsu_ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1e:1c:73:4e:3b:9b:54:66:70:de:7e:1c:bd:a9:8e:ef:63:
         0f:50:79:ab:38:6d:6f:7b:73:99:5a:0b:18:1a:3b:11:99:0d:
         3d:c5:20:95:ce:db:eb:55:ff:54:62:9d:2d:26:fa:76:3f:c4:
         39:4b:d4:1b:02:b5:7a:1b:36:cd:59:64:a1:05:ef:6a:aa:22:
         19:11:aa:3b:08:7e:f0:4b:17:50:03:f8:53:75:c2:62:be:6b:
         40:03:23:02:bf:ee:79:93:d8:7e:d7:1a:4a:2a:9a:24:83:01:
         65:28:48:d7:14:8d:38:98:9c:c8:f8:7d:a2:90:69:41:a0:35:
         43:1d:f5:da:8a:ba:ff:b1:36:df:b0:98:4d:a3:ec:9e:c5:43:
         57:c0:8b:31:7d:f5:a9:f1:82:5a:43:44:45:23:ee:b3:13:78:
         d5:70:4c:d2:e5:61:91:56:51:27:56:f9:3f:09:1d:f4:3f:6e:
         2e:66:db:ef:1f:ff:ed:44:d9:47:4f:7f:ce:8e:1e:3c:ed:8e:
         ca:4f:d1:28:4e:03:f8:3a:76:28:af:a0:0c:b4:0f:99:98:95:
         e9:1b:e8:e4:8a:37:e0:25:92:a3:20:66:a3:f7:5a:e2:98:4c:
         9d:07:2a:c6:51:17:dd:c5:01:c6:56:06:a7:8d:5e:37:61:f1:
         3d:d3:14:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/TWPoetvvwP8D1FDwn3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNGM1NmQ1OTVkZTMzY2I4NzUxNzM5ZGJkZDliNDVlZGIy
ZWZmMGMwHhcNMjUxMDE5MTUwMTE2WhcNMjUxMDIwMTUwMTE2WjAzMTEwLwYDVQQD
EyhiOWU4Mzk4MzJkYzYwOTU0NDUxYjA0N2EzOWU1N2U0NTIwZTJjYWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkesMtFj9/aCbdsQ+v0JP/jyBjp8p
AiHVc+Xct10K/Qas1RJ8KpG11Ap/ige9XS4l+FKfrXuxec+u7octvW+0ZIvZlBCy
UUdjm2J04WG7wJR42AnUc2IQ9gEc8cGz64sG9Ecgds+5TG27jc7CIaEJLxG7Qj8y
cIbFQ0w3hybOmZTKGz+zZsX3IUHN4s7oD9nRFsAknuuFGa6GgYwIoLPrR1ypzQld
sMxYBGQTiwPEMIwInkXbPQNhR7tmm8awBoaM6+6PAFoNdBudmkZm+MSPGkWeccOi
1SFrR7WK+qxo/AZ2FZxtUEV9zu/BBe6fTeKovYmrrazPN8skifVODZXKDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnoOYMtxglURRsEejnlfkUg4srwMB8GA1UdIwQY
MBaAFBFMVtWV3jPLh1Fznb3ZtF7bLv8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQt
MzAxMTA2OGVlYjY5LzEvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZjA4MmMtYjE4Zi00MWM1LTlmZDQtMzAxMTA2OGVlYjY5
LzEvRVV4VzFaWGVNOHVIVVhPZHZkbTBYdHN1X3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWh4cc047
m1RmcN5+HL2pju9jD1B5qzhtb3tzmVoLGBo7EZkNPcUglc7b61X/VGKdLSb6dj/E
OUvUGwK1ehs2zVlkoQXvaqoiGRGqOwh+8EsXUAP4U3XCYr5rQAMjAr/ueZPYftca
SiqaJIMBZShI1xSNOJicyPh9opBpQaA1Qx312oq6/7E237CYTaPsnsVDV8CLMX31
qfGCWkNERSPusxN41XBM0uVhkVZRJ1b5Pwkd9D9uLmbb7x//7UTZR09/zo4ePO2O
yk/RKE4D+Dp2KK+gDLQPmZiV6Rvo5Io34CWSoyBmo/da4phMnQcqxlEX3cUBxlYG
p41eN2HxPdMUlg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:11 2025 by rpki-client