Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File:                     4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier:          AJR90voWJdGBiwVAfBXKDC4etCvzz50OQnRj0J3duuQ=
Subject key identifier:   2A:0B:0F:EA:1B:3B:5B:AB:F3:47:EC:03:F9:21:10:A4:BF:87:81:66
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer:       /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial:       0199FBEC03C93D7229FD9473E3697084AACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number:          0BAD
Signing time:             Sun 19 Oct 2025 10:02:52 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:52 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:52 +0000
Files and hashes:         1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: 55ac88hRS5u6O2krX44r5FT2WIasD7lXDK9FVMDZL4o=)
                          2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=)
                          3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=)
                          4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=)
                          5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=)
                          6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:03:c9:3d:72:29:fd:94:73:e3:69:70:84:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
        Validity
            Not Before: Oct 19 10:02:52 2025 GMT
            Not After : Oct 20 10:02:52 2025 GMT
        Subject: CN=2a0b0fea1b3b5babf347ec03f92110a4bf878166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:11:31:1a:6a:46:f1:f3:d0:df:52:1b:52:
                    a0:98:57:de:c6:13:38:f6:6c:1f:9b:51:49:51:65:
                    6a:fa:10:10:32:5d:90:dd:8f:7e:c8:f7:80:f4:ef:
                    13:64:dc:de:08:56:d1:cb:e0:1b:74:fc:33:52:dc:
                    3d:7f:6c:20:1a:7b:6c:20:70:b0:a1:89:23:f2:e8:
                    0b:52:de:12:d5:eb:c8:c1:ac:f8:16:76:a8:5c:d8:
                    cb:4f:36:14:a0:8e:29:71:da:e8:1a:3f:a9:0b:26:
                    69:3e:a8:ea:d6:1a:7b:40:f6:b7:d0:2d:c0:cb:8d:
                    8f:11:72:dc:01:49:3e:01:7d:8e:e1:41:a3:b2:f5:
                    a8:2c:5e:fc:43:ee:85:3b:41:0b:ed:d2:94:c8:0f:
                    f6:11:3a:c7:ed:02:11:35:2e:78:7a:52:67:b9:53:
                    f1:80:a3:96:71:7b:25:3d:53:4c:58:d4:80:52:ed:
                    c3:a6:b1:31:d2:18:c3:0d:c5:98:ce:df:db:ae:b7:
                    19:ac:e9:a6:a6:52:79:6b:40:ba:e6:94:47:99:7a:
                    eb:b1:ff:59:60:fe:6e:d2:60:f3:65:0d:0e:bc:91:
                    2d:21:e3:e1:31:5e:96:4f:f9:c4:52:3c:8d:d2:7f:
                    1a:ce:33:da:52:f6:60:3f:29:37:f6:18:5d:6c:c1:
                    f6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0B:0F:EA:1B:3B:5B:AB:F3:47:EC:03:F9:21:10:A4:BF:87:81:66
            X509v3 Authority Key Identifier:
                keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d3:1d:a2:dc:d3:1d:52:a6:79:ac:ab:3e:c9:2d:b2:aa:ed:
         64:a5:9a:49:5d:1d:be:47:8e:bc:33:4f:7c:47:e1:57:f3:6d:
         ad:17:09:08:5e:37:33:f4:2f:39:ca:81:5b:dd:06:85:79:ac:
         cb:07:8c:31:3c:d1:3d:a7:49:e5:6d:df:df:57:b4:2f:d5:b4:
         5c:f3:03:63:86:97:03:99:eb:db:b2:d7:16:35:9c:58:bd:44:
         ea:0b:d7:88:0f:cd:bc:da:2f:f4:cc:a6:1b:6e:1b:30:3f:c9:
         a1:fa:d8:8c:de:11:d8:8d:71:f7:35:b0:50:ea:1f:e5:54:04:
         da:d7:17:1b:43:4a:31:4f:b6:30:3f:54:51:cd:64:80:ee:ef:
         9c:d4:e5:79:dd:17:4e:d1:46:ad:8f:eb:25:87:1f:85:81:09:
         a8:b1:ad:1e:76:b3:e8:01:15:ee:b8:07:58:2e:56:93:b6:c3:
         f5:dc:dd:2f:22:2b:1c:7b:84:9e:fb:03:14:e7:88:5d:e0:53:
         66:8a:5a:ad:be:bb:ed:1e:6c:1f:19:07:b5:62:ce:e9:af:a0:
         5f:21:7a:f5:d7:7e:9a:86:73:fb:31:4d:84:9f:9a:b3:98:79:
         00:68:4a:cf:98:b4:a8:df:9c:80:60:7a:ab:1b:4d:2b:fb:58:
         dd:d2:92:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:53 2025 by rpki-client