Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
File:                     IEmVw2J_eqzf4jkV5ELj05AGMa8.mft (raw, json)
Hash identifier:          6n7zdaXcUn5cw8vyiQ0fuXbd4ekmCiUUKY88t/sTClE=
Subject key identifier:   01:47:2F:8B:F8:15:4D:F0:B9:FD:49:5C:71:4B:30:10:FF:9C:F6:2C
Authority key identifier: 20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF
Certificate issuer:       /CN=204995c3627f7aacdfe23915e442e3d3900631af
Certificate serial:       0199FAD7BF901BFADAC262EE86C509275A0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
Manifest number:          078F
Signing time:             Sun 19 Oct 2025 05:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:07 +0000
Files and hashes:         1: 9-7PXLkycA5xYo3u8CzH5ezxMXA.roa (hash: LxSeuXbVik2u1NmfM2g79qr+/r9wrH4InvPIstg23Fs=)
                          2: IEmVw2J_eqzf4jkV5ELj05AGMa8.crl (hash: BwljqJN66T/VtUBE45YGWHheQ8l4wReDGl6xntD9jw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:bf:90:1b:fa:da:c2:62:ee:86:c5:09:27:5a:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204995c3627f7aacdfe23915e442e3d3900631af
        Validity
            Not Before: Oct 19 05:01:07 2025 GMT
            Not After : Oct 20 05:01:07 2025 GMT
        Subject: CN=01472f8bf8154df0b9fd495c714b3010ff9cf62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:85:ea:b6:0e:e2:0f:bf:20:78:86:0f:a3:
                    64:e1:f4:f5:28:bf:a2:ab:c5:19:81:29:b0:28:4a:
                    52:a3:4f:5e:2a:f7:82:00:fc:b2:9b:34:e3:6d:04:
                    99:3f:c5:29:02:e6:8c:65:3d:7d:a0:30:ef:aa:93:
                    04:34:4f:d9:35:9e:67:de:bc:13:47:06:3a:83:73:
                    26:b3:6a:ab:da:4e:d9:09:c8:fa:4e:55:19:57:f4:
                    83:25:56:7f:6d:1a:e3:86:88:09:8a:87:4a:6c:79:
                    8b:1e:98:5c:d0:74:7f:13:d9:7a:5a:07:3c:ec:c2:
                    cc:f8:5f:a6:37:2c:d8:9c:ee:01:01:0a:10:1e:de:
                    e5:cb:fd:f0:b7:28:48:f9:fa:6e:b1:1b:77:50:40:
                    22:67:3e:63:fd:64:4a:26:92:98:af:7a:f6:4e:ae:
                    7b:b7:11:4c:fd:44:6a:4f:69:4f:9d:03:e9:3c:eb:
                    ca:3a:19:3c:f1:97:6d:9b:99:0f:49:97:96:ed:7c:
                    1a:bd:08:ab:6a:a0:e6:6b:79:c4:09:f4:5c:5b:85:
                    c9:ec:f5:d0:95:83:fc:86:16:e6:7a:70:fe:28:b6:
                    aa:a7:c9:3f:6f:2c:39:fe:25:85:e5:9c:9b:86:50:
                    3d:13:f3:e3:48:4a:ec:a2:1b:f4:9e:0a:18:78:20:
                    6d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:47:2F:8B:F8:15:4D:F0:B9:FD:49:5C:71:4B:30:10:FF:9C:F6:2C
            X509v3 Authority Key Identifier:
                keyid:20:49:95:C3:62:7F:7A:AC:DF:E2:39:15:E4:42:E3:D3:90:06:31:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEmVw2J_eqzf4jkV5ELj05AGMa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eac2af-4bd3-4392-b5f4-48459d07b41e/1/IEmVw2J_eqzf4jkV5ELj05AGMa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:76:8d:b2:b9:7b:d1:11:7b:e3:68:4e:c2:bc:5c:c4:ff:f9:
         58:54:14:d8:e6:ea:a5:fc:34:62:3b:e7:bb:2b:e0:6a:87:77:
         b6:d9:3b:8e:fa:88:14:bf:ae:74:6a:85:c4:0a:fe:0a:a6:a8:
         63:94:25:51:01:06:3a:51:95:62:c2:f1:d8:ba:9d:b1:44:5e:
         36:ff:3b:02:0b:a7:39:c8:50:d8:a9:84:ff:42:f4:9c:f5:14:
         a1:5b:be:e7:cd:3d:55:02:86:df:28:3d:28:c5:68:5a:c0:82:
         5e:8a:d9:a4:41:11:a7:46:17:6d:98:b2:5d:2d:bc:80:f2:28:
         49:95:c9:59:a0:98:97:4c:9a:8d:0b:9d:9e:ee:b8:e6:d8:16:
         f2:d5:3c:0b:94:bf:f4:ba:48:4c:8a:36:c5:5b:b4:f8:23:cc:
         de:ac:9f:d8:12:b7:5f:32:61:bc:5b:0e:17:6c:f9:ac:f9:a0:
         de:2e:5b:c3:f5:3e:89:60:98:04:05:b0:53:24:f5:70:6f:53:
         b5:7c:00:38:31:0a:86:33:5d:77:93:90:47:27:82:4f:da:28:
         d5:23:0f:d2:b2:ee:8a:55:17:de:d6:8d:f2:93:6b:5c:cd:87:
         bf:4e:a3:13:04:3e:d9:3b:cf:d5:b2:ac:d5:07:84:9c:b9:ef:
         45:81:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:18 2025 by rpki-client