Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          99/XzuyBQZlLi/RgOotMzW43vgcY+cq8nDshLwNttNw=
Subject key identifier:   B8:84:93:4A:27:9F:06:AA:AE:7C:43:5C:BF:D8:7C:90:68:2E:56:01
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       0199FC21A9877732DF939A1F239C61ACCF3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0EF7
Signing time:             Sun 19 Oct 2025 11:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:28 +0000
Files and hashes:         1: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: X65S8QwitRXwd/BuJctF+1Ua7ZILp2YSSewQnx31ahU=)
                          3: j19e3OGI3m7IPEQhb3MKwpoUOCs.roa (hash: +WycMWrDP/rwdaeXbKTNVGF1PSRCM5JvbxR88xQEwA0=)
                          4: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a9:87:77:32:df:93:9a:1f:23:9c:61:ac:cf:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Oct 19 11:01:28 2025 GMT
            Not After : Oct 20 11:01:28 2025 GMT
        Subject: CN=b884934a279f06aaae7c435cbfd87c90682e5601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8d:c1:a0:de:f4:8f:a7:5b:f8:ba:dd:71:06:
                    44:31:3a:b0:23:b8:44:40:8a:23:8d:ec:14:f6:95:
                    36:e0:4d:c6:d5:10:4a:72:ce:7d:20:00:09:f5:f3:
                    46:1a:e8:64:b1:0b:b4:fe:16:86:e4:32:68:22:19:
                    68:97:ea:3c:fb:6c:49:0c:4d:1a:12:64:b1:0e:8a:
                    2f:48:fd:49:1f:25:32:f2:49:58:96:5f:d6:df:e3:
                    d6:a8:a9:34:8a:94:65:f6:52:46:f8:1e:4d:c1:82:
                    e7:6d:00:43:74:13:82:29:38:ac:1f:83:ec:3a:5d:
                    9a:d3:a0:d9:a5:2e:36:1b:99:54:26:61:54:1c:86:
                    65:49:3b:03:92:e2:cc:0b:c1:d0:c9:a9:5a:28:0b:
                    cd:b6:b3:37:c2:f9:cb:a9:c3:43:8b:98:8d:cb:08:
                    c1:7d:27:a7:67:f1:30:d1:f6:45:70:62:e3:32:7a:
                    e5:4a:e2:b5:6f:4e:9a:e7:47:83:67:67:4e:25:b4:
                    af:71:ba:a2:5c:29:17:ea:d5:bb:f1:6d:46:c6:4c:
                    48:61:7d:74:5a:b7:69:2d:c7:39:71:4d:bc:30:a0:
                    7a:67:4d:b8:a8:27:96:d3:78:24:c1:5c:dd:bf:04:
                    5d:b9:cf:68:e7:2e:c6:7f:b1:39:a7:77:64:c6:e9:
                    65:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:93:4A:27:9F:06:AA:AE:7C:43:5C:BF:D8:7C:90:68:2E:56:01
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ad:ac:50:f5:08:40:76:8f:22:4f:a5:2f:a6:0d:ca:e0:bf:
         c4:aa:a2:7b:62:5e:19:03:44:65:fe:d2:24:1c:0e:84:bd:ac:
         13:c0:fc:e3:b1:a0:21:38:cc:c7:e5:1a:7e:17:ad:89:48:d5:
         5e:aa:82:73:89:69:40:6a:77:14:d3:5a:93:ac:cc:6b:87:8f:
         0e:62:41:2f:a9:3f:8d:bb:e2:99:9e:10:f9:9f:41:08:bf:03:
         12:04:ac:39:58:ae:0c:2c:c1:b2:5c:41:d8:28:ba:62:0d:d6:
         f1:a5:3d:5f:1a:cf:25:ec:3b:7b:03:54:d9:40:ce:9d:b9:f7:
         2a:fc:fb:f2:30:8f:b6:14:55:54:d1:74:e3:fc:f1:f1:f0:d0:
         8f:0c:b4:1c:f7:b0:2b:aa:d1:a4:0a:aa:89:6d:c3:da:37:d9:
         49:c4:c6:46:5c:df:06:06:52:53:3d:5f:77:d0:2f:c5:c2:4f:
         74:b8:c6:05:16:21:e9:4d:c6:d0:af:73:4f:f5:14:22:0f:42:
         eb:93:8e:fb:b1:b8:7e:a0:00:c2:ec:fd:10:cb:f3:d1:d0:70:
         a1:ee:11:95:e9:ca:a3:6b:18:1f:76:6e:0e:33:49:fa:69:ea:
         68:01:3a:dc:82:7c:c7:18:fc:a8:f7:fd:84:2e:34:72:20:c6:
         4b:80:84:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IamHdzLfk5ofI5xhrM89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjUxMDE5MTEwMTI4WhcNMjUxMDIwMTEwMTI4WjAzMTEwLwYDVQQD
EyhiODg0OTM0YTI3OWYwNmFhYWU3YzQzNWNiZmQ4N2M5MDY4MmU1NjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw43BoN70j6db+LrdcQZEMTqwI7hE
QIojjewU9pU24E3G1RBKcs59IAAJ9fNGGuhksQu0/haG5DJoIhlol+o8+2xJDE0a
EmSxDoovSP1JHyUy8klYll/W3+PWqKk0ipRl9lJG+B5NwYLnbQBDdBOCKTisH4Ps
Ol2a06DZpS42G5lUJmFUHIZlSTsDkuLMC8HQyalaKAvNtrM3wvnLqcNDi5iNywjB
fSenZ/Ew0fZFcGLjMnrlSuK1b06a50eDZ2dOJbSvcbqiXCkX6tW78W1GxkxIYX10
WrdpLcc5cU28MKB6Z024qCeW03gkwVzdvwRduc9o5y7Gf7E5p3dkxullfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiEk0onnwaqrnxDXL/YfJBoLlYBMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba2sUPUI
QHaPIk+lL6YNyuC/xKqie2JeGQNEZf7SJBwOhL2sE8D847GgITjMx+UafhetiUjV
XqqCc4lpQGp3FNNak6zMa4ePDmJBL6k/jbvimZ4Q+Z9BCL8DEgSsOViuDCzBslxB
2Ci6Yg3W8aU9XxrPJew7ewNU2UDOnbn3Kvz78jCPthRVVNF04/zx8fDQjwy0HPew
K6rRpAqqiW3D2jfZScTGRlzfBgZSUz1fd9AvxcJPdLjGBRYh6U3G0K9zT/UUIg9C
65OO+7G4fqAAwuz9EMvz0dBwoe4RlenKo2sYH3ZuDjNJ+mnqaAE63IJ8xxj8qPf9
hC40ciDGS4CE9A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:07 2025 by rpki-client