Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
File:                     EIOmQReWv3Jjh_elXPhLV8qJm-s.mft (raw, json)
Hash identifier:          qiXbUmpM1CBI5pl3V3cdxnB6vyIPsYGG4uSfwHK5H+8=
Subject key identifier:   77:1B:40:07:03:1D:FC:B5:ED:82:08:FC:A4:2D:2E:48:BD:D4:B0:83
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Certificate issuer:       /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial:       0199FAD7F072DE0F473BA71A4E2610C6BA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
Manifest number:          0A02
Signing time:             Sun 19 Oct 2025 05:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:19 +0000
Files and hashes:         1: 1eXto-EsRD2_BRDc9smA9RA0iPI.roa (hash: g1hRvTrzsnVFScKTJJdFlUgNjwgiZOniAlwWxxAKEuA=)
                          2: EIOmQReWv3Jjh_elXPhLV8qJm-s.crl (hash: 1vVOHMxRlShgfDCrwtVITS5YQpyshk+wUZi27Iqge84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:f0:72:de:0f:47:3b:a7:1a:4e:26:10:c6:ba:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
        Validity
            Not Before: Oct 19 05:01:19 2025 GMT
            Not After : Oct 20 05:01:19 2025 GMT
        Subject: CN=771b4007031dfcb5ed8208fca42d2e48bdd4b083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:38:1c:59:32:e5:02:52:a6:f6:9f:94:ba:
                    d5:07:41:e9:88:db:2b:f7:09:f5:f2:6e:3e:98:8e:
                    44:1e:69:88:14:37:e8:7c:34:df:f8:07:d0:46:72:
                    cc:04:af:94:2f:ae:a4:91:ae:ab:1a:f4:4f:2e:48:
                    f6:51:d8:55:71:c8:59:b3:51:66:78:54:ab:f3:73:
                    28:38:34:f7:d9:5d:73:34:92:f2:d6:7c:6f:13:51:
                    8d:31:cc:6e:2d:33:a6:8d:2a:d0:ba:3b:04:90:4b:
                    42:26:60:64:a5:c4:f8:9b:0b:53:1a:bc:6d:74:96:
                    21:ab:78:33:0e:d1:af:d9:8c:65:a5:30:e7:1a:3e:
                    6b:b2:e4:b8:0a:f4:9d:a4:90:c0:99:8f:7f:81:d5:
                    cc:f9:65:91:17:ca:49:94:0f:60:52:ba:ee:91:d6:
                    2e:16:3a:9d:9f:85:45:74:a8:fe:60:5f:2a:d2:7d:
                    2e:29:ce:1d:ac:92:2c:9d:2a:52:53:16:9f:f9:f7:
                    80:e0:73:93:15:11:1a:3f:bb:a8:2b:43:5d:88:f0:
                    73:ba:41:72:c0:c3:94:fa:dc:3a:94:16:26:4e:c2:
                    a5:03:f9:c8:9f:f7:f0:55:e2:b9:c6:2f:d6:5e:17:
                    3f:23:0f:3a:06:54:01:d7:16:b7:48:a2:b2:81:9d:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1B:40:07:03:1D:FC:B5:ED:82:08:FC:A4:2D:2E:48:BD:D4:B0:83
            X509v3 Authority Key Identifier:
                keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:70:6a:5f:4e:01:cf:bd:55:d5:1b:c0:8a:54:b6:07:39:4a:
         b3:5e:4b:c4:d6:d7:91:32:cb:0b:47:21:4d:8f:24:47:7e:57:
         c4:1d:b9:51:9a:2f:18:3d:a2:09:c4:92:b2:5b:9f:e2:2f:3f:
         41:ce:82:2a:3e:22:74:82:06:c5:8d:d1:33:9c:e5:24:63:02:
         49:22:09:05:c6:31:fa:f3:11:67:32:96:0d:26:53:84:9e:6a:
         65:c0:ec:a2:c4:17:46:6e:ac:34:d2:15:c2:29:f4:93:c1:56:
         16:04:1d:7b:26:bb:f1:29:a8:c5:f4:38:8a:34:e6:e2:07:5a:
         b0:9b:8c:07:a8:4d:49:b2:ed:67:6e:84:ee:17:4d:25:8f:b7:
         65:98:46:b3:c3:69:c7:68:72:87:0d:39:4f:50:f4:20:76:f1:
         a1:08:25:a3:00:6b:13:76:86:5c:41:66:1d:4e:87:d4:37:ce:
         3d:47:3f:8d:fc:b1:2e:20:70:bd:ff:72:fe:a2:6b:4a:48:2b:
         61:b3:24:9d:e7:74:f8:dd:65:cb:f2:d4:dd:67:4d:31:0c:98:
         52:d7:35:41:87:5c:b4:d7:53:ec:62:f2:5c:8f:68:e3:b1:12:
         5f:82:dc:c7:d9:88:d4:e0:09:a9:a0:19:c7:9f:ae:25:41:5c:
         dd:a2:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:16 2025 by rpki-client