Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
File:                     EImgJR4yvzxID1qUq7X7TrkGpbM.mft (raw, json)
Hash identifier:          YbDPROwZE/R+P6S/iCqjmPOjpPSFCr8lrLgUFAkB7UM=
Subject key identifier:   A8:9A:F1:F9:98:B8:85:BF:A9:A4:EF:E5:61:0E:C3:33:23:05:71:E3
Authority key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Certificate issuer:       /CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Certificate serial:       019A03DA0FB0E3C505BF9AB5A15A618EC05F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
Manifest number:          163D
Signing time:             Mon 20 Oct 2025 23:00:13 +0000
Manifest this update:     Mon 20 Oct 2025 23:00:13 +0000
Manifest next update:     Tue 21 Oct 2025 23:00:13 +0000
Files and hashes:         1: EImgJR4yvzxID1qUq7X7TrkGpbM.crl (hash: WKxBuYzJ6kKVPJFWoNA4J/y2IDzpuUsZdQeBbGBbTyE=)
                          2: eyb6eqppLLPxMbrCASM5HQ3Qcz0.roa (hash: JIfJaEQmA4YKP2iyQoTDZ86/DkjjTynNwrFbTDmVcaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:da:0f:b0:e3:c5:05:bf:9a:b5:a1:5a:61:8e:c0:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
        Validity
            Not Before: Oct 20 23:00:13 2025 GMT
            Not After : Oct 21 23:00:13 2025 GMT
        Subject: CN=a89af1f998b885bfa9a4efe5610ec333230571e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:b3:d7:04:41:f5:6f:8d:46:a7:ba:aa:17:
                    d5:3f:29:5d:a2:2c:89:e6:af:7f:46:df:c6:a9:64:
                    79:5e:2e:56:f2:10:6c:b9:b7:c0:93:8e:92:d4:b8:
                    f8:0a:0a:5a:ef:05:81:2e:52:86:ba:ae:0e:dd:35:
                    b3:bc:2c:64:ae:70:23:f8:dc:44:26:5b:65:f7:59:
                    dc:33:4e:20:a1:e1:60:aa:3b:89:91:ab:ee:0d:d3:
                    c3:7a:43:fb:92:c2:c4:6b:4f:6e:cc:f4:13:52:57:
                    cb:d7:ef:88:0d:17:4a:50:d3:9d:1e:41:f9:c6:8c:
                    92:fb:81:62:c9:e2:b1:0b:21:91:42:cb:45:46:4b:
                    a8:d0:f9:7e:aa:b7:32:a3:b8:e6:89:54:e8:17:9e:
                    ad:4a:17:ef:a1:6c:20:52:fd:42:eb:de:5a:bc:5f:
                    15:08:48:06:66:8b:d3:61:9b:1c:ad:d5:e6:de:54:
                    8a:1c:02:f4:d3:db:05:cc:12:89:7f:7b:a5:f7:dd:
                    a7:f3:15:bd:12:6e:8e:c3:70:00:cf:2b:ae:23:64:
                    0f:52:52:2e:95:ce:c5:37:8c:8f:6b:ab:1f:c0:8b:
                    38:6a:f3:d9:b0:24:cd:a4:7f:e2:47:81:ab:74:f9:
                    33:af:48:71:19:25:e1:eb:28:76:55:12:db:ec:4d:
                    ba:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9A:F1:F9:98:B8:85:BF:A9:A4:EF:E5:61:0E:C3:33:23:05:71:E3
            X509v3 Authority Key Identifier:
                keyid:10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:49:78:1c:81:e0:5e:74:d2:45:0c:83:c8:87:a8:b9:52:fd:
         6f:05:19:21:fa:e2:0e:15:b8:76:2a:fe:f8:a8:71:69:06:d5:
         3d:28:d9:3e:3a:9e:f6:7e:2d:c6:15:b2:6e:63:8c:46:07:0c:
         e6:34:ae:7a:40:63:87:f1:54:1f:ea:71:46:b2:9b:8e:b4:cc:
         59:e9:12:58:e5:9c:78:02:4a:5f:08:cb:32:78:e0:4c:dd:0a:
         03:22:63:8b:97:98:c0:8b:fd:2f:3b:95:84:f9:da:8d:45:85:
         47:cc:70:e9:4a:02:c2:95:ca:5d:cf:18:b8:6e:a4:6b:e0:e9:
         ba:1a:0c:b8:f9:47:f7:a8:97:8e:4b:32:e3:df:07:0e:52:25:
         60:60:80:f1:81:f6:ec:d9:99:8a:4c:ec:ef:b1:75:76:7f:5b:
         dd:ca:07:f2:28:6d:19:32:43:0b:0e:33:7c:52:e7:53:c7:07:
         54:c0:d3:46:37:a2:8f:24:1b:09:9b:38:04:d5:5e:de:1e:ab:
         e2:67:a9:c2:f3:a0:b2:b1:36:d4:dd:38:98:03:d3:36:53:24:
         ea:d6:ea:65:f7:d4:e9:6b:a6:27:92:ec:65:55:3a:d7:70:d4:
         29:da:17:c6:de:e0:38:01:9a:2e:1c:f5:07:0b:8b:a8:49:bb:
         2b:11:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:32:22 2025 by rpki-client