Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
File:                     eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json)
Hash identifier:          vXdP75tML08fyTHuXKHG/L1ZUziAsquyRTn1QwD/9sc=
Subject key identifier:   DC:14:CD:85:EA:A5:C0:44:F0:88:D6:31:3D:BF:64:E7:7F:74:72:73
Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36
Certificate issuer:       /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
Certificate serial:       0199FCFD9A81E1A8B309E041B2C71F28EBA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
Manifest number:          05C9
Signing time:             Sun 19 Oct 2025 15:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:42 +0000
Files and hashes:         1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: VvifdWBc6ZR3KYO6U9FLgw+vreTZ7UKhPutOmex3/ls=)
                          2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:9a:81:e1:a8:b3:09:e0:41:b2:c7:1f:28:eb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36
        Validity
            Not Before: Oct 19 15:01:42 2025 GMT
            Not After : Oct 20 15:01:42 2025 GMT
        Subject: CN=dc14cd85eaa5c044f088d6313dbf64e77f747273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:4e:9b:88:87:4e:ef:56:9e:38:d5:78:7d:
                    fb:8a:a0:47:30:5a:99:22:91:e2:24:9d:1e:89:ea:
                    e4:98:eb:3a:d9:17:1f:13:4e:aa:57:e5:a8:5c:d2:
                    4b:e5:ec:c6:b6:a9:f4:80:a2:cf:92:e6:1f:64:d4:
                    13:32:65:01:f9:a2:7c:5f:6e:96:ca:f6:ff:79:c7:
                    86:d4:ed:cb:a4:57:b1:3e:1c:80:b8:9b:f1:a6:c7:
                    c4:82:d3:42:fa:06:eb:7d:ca:20:d2:8b:76:2a:02:
                    5a:f2:01:99:12:7b:27:9e:54:27:fd:d7:d9:da:37:
                    4b:af:0b:57:85:81:ab:48:6f:fa:db:9c:56:f9:01:
                    c2:a6:f1:6d:6f:9d:26:97:bf:cd:20:50:ae:cc:a3:
                    be:64:eb:6c:91:77:f6:59:4a:78:3c:52:31:a0:f9:
                    e1:fc:83:48:12:10:55:a0:2e:27:75:c2:2f:2b:05:
                    61:5f:b7:0a:20:4f:1b:64:34:a1:46:15:dd:7c:01:
                    1d:99:fc:99:15:2b:d2:ff:35:25:2e:e8:d3:d9:34:
                    ca:2d:05:2a:53:0d:5d:97:7a:be:59:d5:7c:43:23:
                    2b:d6:50:86:ac:7c:88:1f:6b:08:b0:4c:ca:a3:a0:
                    bc:d4:83:b0:a8:22:cb:2e:68:db:66:c7:a2:46:5e:
                    8f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:14:CD:85:EA:A5:C0:44:F0:88:D6:31:3D:BF:64:E7:7F:74:72:73
            X509v3 Authority Key Identifier:
                keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:5c:12:88:f6:9f:97:28:0b:dd:7e:64:c1:c3:58:88:7f:59:
         f3:92:89:79:b0:43:a9:62:d6:0c:23:54:b5:14:61:a7:2a:6d:
         8e:59:7b:a7:1e:5d:c3:32:d1:fa:48:c4:eb:6d:e2:a8:a6:45:
         2d:3f:b3:d3:e6:40:49:9f:46:e4:f5:60:2f:a9:54:01:89:72:
         c6:cf:ac:af:c0:d0:25:36:e3:19:82:37:9f:ad:b0:67:55:d8:
         12:79:84:78:49:d6:21:c8:42:97:57:05:48:f7:44:04:d8:db:
         d2:0a:8a:7f:b6:4f:7a:9e:fd:8d:20:41:d0:00:a3:04:b4:bf:
         a0:9e:2c:85:b8:c6:21:1b:a8:3a:85:dc:52:94:5b:db:4b:df:
         be:61:c6:64:7e:99:5a:3b:29:19:79:d0:72:9f:78:d5:40:a6:
         4d:3c:c4:36:f0:fa:fc:a6:75:f3:55:05:78:6c:d1:e7:30:35:
         e5:97:01:66:1f:9c:f9:8f:81:7b:57:0b:83:0c:ce:05:60:cd:
         99:d6:75:0f:e3:c3:90:b8:03:4d:40:21:b3:18:f4:62:f0:d1:
         ea:e3:2e:bd:1b:fb:93:bb:4c:40:e4:51:ae:3e:95:60:4c:e1:
         bb:62:92:cf:a4:87:3a:71:34:80:42:dd:d4:50:41:f4:e8:aa:
         98:57:2a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:33 2025 by rpki-client