Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
File:                     EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft (raw, json)
Hash identifier:          vm7PuoaoMasWiNk8iK6DlPP0Ry+koXWBSqCSoefLdh4=
Subject key identifier:   BA:E8:33:69:E3:5E:D5:2C:2A:72:53:9A:81:38:7F:2E:08:5D:81:9C
Authority key identifier: 13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A
Certificate issuer:       /CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
Certificate serial:       0199FB0F333983FF8D12E1DCCB9F2E4FD25D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
Manifest number:          0B45
Signing time:             Sun 19 Oct 2025 06:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:41 +0000
Files and hashes:         1: EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl (hash: n9wu75xLEaNxwXTYLI51DjGsLIdac5iogg5Z1qCPyfQ=)
                          2: R1ddoQVjmFWdQ8WN4xWjS6BWjCw.roa (hash: oSyFhN1ovW7xy9oFAp6jlzZPhvsjlMjehmNfek88Rzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:33:39:83:ff:8d:12:e1:dc:cb:9f:2e:4f:d2:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1335738c6c13c2a092e4c4a21d5d55c10ee05c5a
        Validity
            Not Before: Oct 19 06:01:41 2025 GMT
            Not After : Oct 20 06:01:41 2025 GMT
        Subject: CN=bae83369e35ed52c2a72539a81387f2e085d819c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:90:73:a7:e7:6e:87:b3:3b:4a:74:26:60:
                    45:e8:51:f7:fb:21:be:35:25:6c:ec:db:5d:82:e0:
                    98:95:c0:e6:85:7e:a9:f5:b5:02:b8:44:b6:3d:36:
                    18:e7:1e:94:16:a8:5a:fa:00:19:a2:b2:95:72:68:
                    8a:d8:65:3f:d3:cb:d9:25:1a:05:ee:81:36:f4:f9:
                    7d:72:a1:02:33:61:c1:57:d0:bb:92:0c:9f:93:96:
                    80:3a:13:da:a6:1a:73:58:df:e3:c7:5a:7d:b1:68:
                    b3:98:06:b5:ea:a9:b3:62:7e:a4:7c:6f:2c:9d:d9:
                    d6:c5:7a:3c:6d:f7:49:25:78:b6:71:f0:c3:c8:97:
                    61:c5:65:bb:3b:c8:28:4e:0f:cd:fb:eb:97:58:a2:
                    fc:4d:e7:76:e6:c5:ec:2f:a5:51:13:cc:5d:97:ae:
                    f5:4b:c5:55:9a:89:29:93:3e:38:0c:5a:45:bc:23:
                    6f:6b:41:ac:b1:9f:9e:ca:73:8b:5d:23:7a:ca:02:
                    5d:29:8f:ad:36:06:b0:cd:d9:6c:5c:21:c5:4d:72:
                    1a:45:11:54:47:22:d2:8b:fd:78:a7:6c:73:8f:a7:
                    b0:3e:94:a2:cd:66:13:f8:20:33:13:62:f6:b7:c2:
                    c3:f6:6f:a7:1d:aa:71:af:dc:45:52:ca:e2:b0:3c:
                    0e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E8:33:69:E3:5E:D5:2C:2A:72:53:9A:81:38:7F:2E:08:5D:81:9C
            X509v3 Authority Key Identifier:
                keyid:13:35:73:8C:6C:13:C2:A0:92:E4:C4:A2:1D:5D:55:C1:0E:E0:5C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e89b06-9b24-46a1-8ecf-244c1776a7ad/1/EzVzjGwTwqCS5MSiHV1VwQ7gXFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:81:c0:f9:04:f5:b6:35:02:d1:9f:cb:98:d6:c1:23:f0:b8:
         5c:29:15:3b:13:f2:84:31:f9:40:1b:05:bf:12:85:21:83:b5:
         b4:f0:66:2b:7b:4b:ab:ca:0e:42:4a:21:3b:b3:90:60:b1:46:
         da:db:cf:3c:c5:4b:5b:92:ef:96:42:79:a3:dd:30:cf:a9:d0:
         b1:7e:01:8b:b0:d0:d7:46:6f:fa:79:09:02:92:fc:9c:06:c0:
         bf:a7:21:df:27:d0:c0:e8:be:df:3c:9c:bb:bd:5a:d8:4a:c1:
         46:31:09:0f:23:cd:b1:dc:b7:d2:b5:ab:f5:f2:80:03:33:c8:
         76:01:fd:0e:8a:3c:57:01:4f:0e:86:1b:4a:1f:94:5e:e9:a6:
         6d:db:a9:22:c2:9c:ec:82:ea:4a:da:bd:32:3e:2f:6b:45:3b:
         92:1f:5b:41:a5:31:c6:e3:d8:21:91:cc:c4:c6:d3:4a:22:27:
         e4:47:9c:d4:23:0e:03:75:9d:43:b6:de:8b:03:9c:93:8d:74:
         d1:46:6e:0c:0e:f5:c0:5d:62:f7:82:90:d0:ef:29:7a:02:2d:
         4e:c4:f2:6b:d5:68:ab:1f:c1:e2:4f:46:e8:f9:32:6c:07:28:
         8d:08:fb:45:e9:e5:5f:35:eb:18:0a:60:66:b5:b0:4e:a7:cd:
         c0:37:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:50 2025 by rpki-client