Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
File:                     eh_3AnJudbOmjxGC5H_7zcrlFeU.mft (raw, json)
Hash identifier:          k7fvEfKrF9dxJuHM9G5+9TI4+BPnfs/2ejpUQsCH5rA=
Subject key identifier:   BC:39:16:B8:3D:12:3F:D5:2E:13:1A:4E:78:C7:0F:96:7B:0B:BE:84
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Certificate issuer:       /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial:       0199FDD9953A566F60C4C5384924E99517DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
Manifest number:          158B
Signing time:             Sun 19 Oct 2025 19:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:59 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:59 +0000
Files and hashes:         1: eh_3AnJudbOmjxGC5H_7zcrlFeU.crl (hash: EhBFt3GaAfn6hzf+MxsEGjowmoTnttjE+i8a+X0duS4=)
                          2: mp3Ps9Wb-eE83MSoTQrKorxtZTg.roa (hash: Whr3Evryw6Na+L//5TTMD5LCJqnqbVVaoyp0nqLqIfA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:95:3a:56:6f:60:c4:c5:38:49:24:e9:95:17:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
        Validity
            Not Before: Oct 19 19:01:59 2025 GMT
            Not After : Oct 20 19:01:59 2025 GMT
        Subject: CN=bc3916b83d123fd52e131a4e78c70f967b0bbe84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:09:d0:41:b6:cb:3e:c6:aa:09:49:5d:78:
                    a1:0c:4c:97:8e:a6:40:8b:1e:cc:0b:df:5d:17:d6:
                    6a:59:5f:ba:b0:1e:55:5e:1a:2f:84:9e:ea:5b:8e:
                    73:53:dc:16:9c:02:9d:05:b8:7d:a1:36:a5:08:c6:
                    42:81:87:38:3c:92:6f:1b:a6:5e:77:b0:c2:6f:c4:
                    4b:13:bb:89:ec:5b:17:b1:41:46:61:35:b4:e6:a4:
                    64:26:c3:8c:aa:3d:0a:11:74:51:69:64:36:8c:c2:
                    dd:d3:00:5f:f8:cb:85:40:c0:3f:a4:f6:d1:bb:eb:
                    d5:f6:f8:f8:79:42:2b:79:ef:69:ae:6a:b1:d2:d3:
                    45:4a:33:27:fc:2d:d5:62:ce:df:d9:68:89:26:ae:
                    f3:06:78:8e:b8:a4:8d:15:7b:ef:cf:7d:93:39:bf:
                    b8:1e:3a:7c:45:64:ce:35:64:cc:05:b0:0f:32:c7:
                    62:79:2e:a6:1a:47:fd:e3:43:57:ec:87:90:c7:67:
                    58:6a:76:af:54:f2:1c:5d:8d:0a:07:f9:78:8f:29:
                    30:ef:c1:9f:65:a5:44:1c:53:2a:6f:75:89:a8:c3:
                    4a:15:e6:81:a2:9d:4f:56:f1:30:44:e3:26:96:76:
                    6a:6e:43:98:97:76:51:e7:de:1d:63:75:62:8f:11:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:39:16:B8:3D:12:3F:D5:2E:13:1A:4E:78:C7:0F:96:7B:0B:BE:84
            X509v3 Authority Key Identifier:
                keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:8b:09:0c:e6:3f:2f:d1:89:c3:ca:45:a2:65:af:c7:92:de:
         10:c9:fd:f2:e5:76:eb:a8:46:2a:99:77:89:18:4d:15:fe:65:
         4e:75:83:4e:b3:02:da:47:0d:2c:be:35:99:66:f8:0f:8d:55:
         d8:a6:1c:89:1f:c4:83:48:06:24:e9:d8:a5:d3:17:2a:3e:da:
         18:99:1c:ad:4a:ba:78:65:02:fb:a1:a0:08:ea:b5:aa:19:13:
         78:c3:3a:eb:b0:58:e7:a2:9d:3c:80:91:6d:ee:5c:24:93:e3:
         7f:02:42:7f:8a:93:fb:f2:2f:fe:f2:bd:61:30:8b:66:3f:be:
         72:9b:ea:c9:5b:da:07:6d:16:57:0f:25:3c:97:61:71:01:14:
         48:98:98:e0:f7:72:d6:89:ea:ae:f8:a5:71:25:3c:ed:77:76:
         33:f0:d3:2c:7b:c3:09:40:f7:24:b1:f8:12:bd:d0:0d:8d:c0:
         93:eb:5a:9b:15:01:a9:bb:30:ab:53:8c:81:65:46:d1:87:7a:
         87:b6:08:c0:c3:b1:d9:1b:c4:be:22:36:23:f9:bc:6f:6e:15:
         e8:a2:3f:d4:89:f6:2b:fe:4c:e2:cb:f0:3c:a0:ee:cf:b6:4b:
         6b:95:d6:9f:58:d7:51:dd:12:f7:a0:15:d3:ca:b1:8f:8d:b4:
         12:93:d9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:12:09 2025 by rpki-client