Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
File:                     eaHQ6nMPz8shSZlceCib8tbRhvw.mft (raw, json)
Hash identifier:          HEk5A8Wu2fBUCOv7CMbu2400EN6+DYRXWOVXgAsYknk=
Subject key identifier:   3C:F0:1E:CF:E9:80:D8:52:93:94:EA:1C:D5:7F:A8:7A:34:2B:50:3F
Authority key identifier: 79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC
Certificate issuer:       /CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
Certificate serial:       0199FC58F45FD658497553702704994B831D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
Manifest number:          0550
Signing time:             Sun 19 Oct 2025 12:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:51 +0000
Files and hashes:         1: eaHQ6nMPz8shSZlceCib8tbRhvw.crl (hash: tjyEwn6Xgy3SbXtMsCkAt+BNaOvDgoYfp2f2zEPlMIo=)
                          2: goX035Hv0elR2rCiATveFLxA4oU.roa (hash: HjIa5HxfoLHz1fNA8faR+9nXcT/qazkCcjt+nSvQMlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:f4:5f:d6:58:49:75:53:70:27:04:99:4b:83:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1d0ea730fcfcb2149995c78289bf2d6d186fc
        Validity
            Not Before: Oct 19 12:01:51 2025 GMT
            Not After : Oct 20 12:01:51 2025 GMT
        Subject: CN=3cf01ecfe980d8529394ea1cd57fa87a342b503f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:34:36:50:ae:d1:cd:7d:b0:90:5e:7e:8b:
                    2c:c8:47:70:c8:7d:ff:99:fc:a1:c7:f9:19:15:ef:
                    81:d7:41:d4:49:d6:f0:2b:56:f7:49:bc:33:40:2a:
                    93:ad:a2:0d:b0:f5:da:1c:05:0e:6e:4a:25:8e:13:
                    e9:74:55:a2:6d:cb:66:68:84:18:bc:93:50:75:a4:
                    e6:26:6b:95:5d:3c:71:45:0f:c1:2d:aa:d0:ad:19:
                    a4:9f:ca:76:cf:69:c9:5f:e8:e6:50:0c:f0:38:e7:
                    ba:9c:33:4d:29:62:f0:d9:f4:87:fd:e3:4d:20:a3:
                    63:65:ee:0d:72:82:47:cf:f1:23:32:6d:8c:20:00:
                    c0:26:b2:e4:ac:e0:f9:f6:fe:09:d8:25:6c:f0:5f:
                    a7:11:02:1d:72:20:8a:6a:5f:34:8c:97:71:e0:29:
                    c9:45:21:1a:e1:a2:a7:e9:8d:07:3d:39:80:e5:96:
                    1b:dc:23:c9:e8:73:be:33:29:1c:03:ef:c2:c0:ac:
                    8c:c4:70:aa:85:e4:00:07:d4:e9:47:ff:63:df:a7:
                    13:4b:44:10:2d:fe:bd:44:59:6c:d6:fe:be:0e:40:
                    25:e0:1e:ad:89:07:33:1b:33:0b:1a:e2:36:61:8e:
                    c3:95:2f:61:5d:fb:04:c9:dd:32:9d:45:f2:cf:7c:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F0:1E:CF:E9:80:D8:52:93:94:EA:1C:D5:7F:A8:7A:34:2B:50:3F
            X509v3 Authority Key Identifier:
                keyid:79:A1:D0:EA:73:0F:CF:CB:21:49:99:5C:78:28:9B:F2:D6:D1:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHQ6nMPz8shSZlceCib8tbRhvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f4c47b-9dee-4e71-a6da-80a91af42a65/1/eaHQ6nMPz8shSZlceCib8tbRhvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:5b:ba:9a:90:83:9b:c6:bf:cd:3e:6d:f7:b9:d8:af:98:d3:
         34:5f:27:7d:73:53:39:bf:b0:2e:f1:f7:fc:83:15:68:3c:75:
         1c:a4:d5:03:69:84:43:2a:d9:7b:e8:1d:de:e4:75:59:d5:c7:
         97:97:ba:c7:18:93:0b:6f:4d:1b:d2:88:1f:55:3f:9c:9f:87:
         9c:59:f1:98:13:b8:72:7c:cf:d0:42:a2:cb:38:76:99:f9:1c:
         62:dd:a6:ea:0c:93:17:80:e8:97:47:5e:70:75:f7:17:ea:b4:
         f2:c2:32:21:f5:67:c2:8a:e7:74:c8:ac:2d:65:78:e8:b7:87:
         88:55:7f:6a:df:bf:25:11:28:fb:27:36:b2:3f:a5:1f:fe:ea:
         ec:59:3e:25:a0:f3:e0:a2:d2:8b:c6:62:53:1a:c7:38:84:f4:
         56:9d:fa:09:77:1c:b1:a8:1b:c4:35:41:88:ee:89:a8:bc:8b:
         fd:e8:ff:e3:98:3c:f3:5e:b6:14:3e:72:37:a6:72:7a:a7:da:
         53:7c:f3:77:15:42:dd:aa:53:b4:64:a1:03:63:ce:0a:47:21:
         2f:47:fa:c5:24:dd:c2:48:ed:20:45:0e:4f:3d:2a:f9:b7:89:
         d4:58:63:fc:cd:e9:d2:04:9c:d0:63:24:3a:b2:e0:fe:50:48:
         d8:0d:d6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:57 2025 by rpki-client