Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
File:                     eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json)
Hash identifier:          3th6LNCPCaj8Nktp0knwyjxej31QLFISW/O+mCsEbjM=
Subject key identifier:   1A:87:79:49:30:D2:AF:76:9A:2A:7A:34:23:86:63:B4:16:CA:B5:B4
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Certificate issuer:       /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial:       019A0111251A74C4B78D656CB3B75AD3CF99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
Manifest number:          0DC6
Signing time:             Mon 20 Oct 2025 10:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:31 +0000
Files and hashes:         1: c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa (hash: L3mZu6WxGNpKrVa630mczwqlZOlcgqKqthoD3BhJb+k=)
                          2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: U83BS9gefhXPkGW4mmqfrT/YeOGGfrE3dtElKY6pNh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:11:25:1a:74:c4:b7:8d:65:6c:b3:b7:5a:d3:cf:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
        Validity
            Not Before: Oct 20 10:01:31 2025 GMT
            Not After : Oct 21 10:01:31 2025 GMT
        Subject: CN=1a87794930d2af769a2a7a34238663b416cab5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:90:97:1c:bb:2c:86:f3:8f:7f:e9:74:77:
                    36:3d:37:07:ba:05:63:82:f0:45:68:74:f5:f1:49:
                    85:62:bb:78:4f:27:69:a1:ee:61:f9:48:e9:aa:f6:
                    b2:bd:43:64:9a:99:e0:ab:44:f3:1b:4a:b3:c0:52:
                    d4:bd:91:9f:6b:91:da:93:14:22:fc:4b:9d:96:be:
                    e2:ed:c3:1c:f2:d2:32:b7:0c:79:44:22:eb:be:b0:
                    a7:4c:e0:20:f8:02:ac:24:ed:88:34:1c:43:2e:32:
                    21:a3:b9:4e:7e:04:21:9c:75:3e:6b:5f:08:69:01:
                    2f:56:35:0b:51:9c:79:98:5e:22:9c:40:6f:15:ea:
                    41:f4:dc:44:ea:ac:32:04:b9:70:21:46:e2:59:2e:
                    9f:a7:26:6b:d6:4d:57:1c:af:b8:f2:22:89:77:4f:
                    e9:84:a9:cf:7f:b8:4b:c9:54:cb:5a:34:ce:fc:b0:
                    10:b3:14:a0:62:5a:53:53:52:14:64:89:1b:86:c8:
                    71:c4:7a:63:99:39:c8:d1:d7:64:29:b7:44:31:75:
                    5e:05:ed:6a:26:a5:04:73:36:79:28:c2:8e:d3:28:
                    7d:3c:d8:09:08:77:d8:ae:45:0d:64:ba:f8:5f:26:
                    c7:45:0a:d9:a4:ea:89:63:fd:a5:54:5f:12:19:64:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:87:79:49:30:D2:AF:76:9A:2A:7A:34:23:86:63:B4:16:CA:B5:B4
            X509v3 Authority Key Identifier:
                keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:26:7d:ac:8d:82:cc:f2:5f:48:2d:15:25:af:8e:98:95:82:
         60:e0:08:87:2b:31:68:fc:12:53:eb:ff:c8:7f:55:c5:32:14:
         04:89:4d:cb:be:a8:62:6a:37:70:a5:a7:37:9c:5e:2a:ef:a9:
         56:b5:ce:c4:57:56:d1:e4:26:d4:b3:46:2e:5c:83:a2:42:81:
         67:2f:74:da:17:2f:1a:65:e4:73:02:57:4f:93:fa:f2:82:83:
         12:8e:a0:bb:76:1b:24:19:fa:76:9b:53:5d:3f:34:3f:b0:7a:
         fd:a4:65:e0:08:40:7b:49:ef:db:31:1a:de:63:06:77:ce:20:
         6f:55:51:92:6a:2a:3d:6d:88:bc:e0:8f:e1:93:4d:05:9c:5b:
         09:0c:39:64:27:b0:a3:51:91:15:22:c5:7f:f2:1c:78:ca:c1:
         84:1b:70:4c:01:3b:71:ae:dd:00:f3:ed:9b:e3:b7:b9:a1:35:
         08:b9:d5:7a:25:1f:67:0a:46:4d:dd:b2:67:1e:42:bc:60:e5:
         bb:29:19:e6:2f:07:1f:82:43:f5:50:51:61:8f:20:ba:0e:fd:
         e7:e5:4e:7c:21:9e:52:02:01:90:22:92:e9:52:28:98:0a:b5:
         ee:b7:75:ac:d4:97:ae:c1:f2:07:f6:81:c3:f3:13:da:37:cf:
         de:b5:ba:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:35 2025 by rpki-client