Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
File:                     eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft (raw, json)
Hash identifier:          /b9bHfBCvSqA+y1gShwGNTJ12+0d1clMKiBU5Jy0yMI=
Subject key identifier:   3A:F0:E9:64:FA:2E:74:5F:0F:38:1D:3B:30:79:34:05:C0:A8:C6:DA
Authority key identifier: 79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C
Certificate issuer:       /CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
Certificate serial:       0199FBEBE0E7E95203E1C6CDC073BF2CB9BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
Manifest number:          1628
Signing time:             Sun 19 Oct 2025 10:02:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:43 +0000
Files and hashes:         1: 9I8dngV1JT7KKjRI32gIyKSSyUk.roa (hash: mTvlNqWvha6TIOSslNPhqnseo6bfcEXwllcJxrieLVA=)
                          2: WIbpjNFgyL8FweUsKsihkm_PI28.roa (hash: VoeMP15IKS+YATCW5k8jloGWeOvqG6TTy+tPBwoxnfM=)
                          3: eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl (hash: aDIr/GFhTN0FqgMLvC/KRagfNgZkNKCF/DOmu+Ge2/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e0:e7:e9:52:03:e1:c6:cd:c0:73:bf:2c:b9:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79646b38c3d87d33145b634b4e1dcc2145f6416c
        Validity
            Not Before: Oct 19 10:02:43 2025 GMT
            Not After : Oct 20 10:02:43 2025 GMT
        Subject: CN=3af0e964fa2e745f0f381d3b30793405c0a8c6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:df:f0:0a:97:3f:34:92:8d:97:72:1b:ef:92:
                    7b:48:30:b3:04:d4:da:d9:f2:01:f8:ac:5f:a1:ae:
                    71:97:1b:2a:15:4a:46:b2:f6:6c:91:a3:d7:f1:c7:
                    fd:a8:3c:8c:83:fa:0a:59:1c:89:57:bc:72:b6:a4:
                    46:a6:2d:4b:a1:75:c5:cb:9e:c4:e4:89:66:8d:80:
                    88:3a:84:da:e2:be:c6:38:61:9c:20:be:6b:f4:fb:
                    7c:e5:6e:18:4a:f1:92:d4:f4:34:56:c7:34:31:b4:
                    d9:8d:c6:e0:49:b0:7b:11:72:ce:ec:80:10:a5:59:
                    36:8d:15:bd:50:86:53:cf:b7:11:f6:81:7f:07:30:
                    85:3e:5b:bf:bc:a6:70:b6:d2:16:44:77:a8:65:0a:
                    e5:16:bd:13:be:f7:f1:3e:25:ec:f4:0f:79:d4:1f:
                    f6:ad:92:3c:9f:d3:f5:eb:e8:19:6e:4a:ee:94:1e:
                    eb:21:98:63:c1:1a:ac:93:60:9a:ff:4e:29:12:0e:
                    09:46:2b:bc:b2:e7:94:5f:2a:16:6f:91:a5:d6:cc:
                    fe:fe:86:f0:35:2e:2c:bc:91:6a:8b:74:5d:00:89:
                    ea:77:15:37:a0:8d:d1:21:e2:44:f7:2c:ca:4a:5a:
                    52:fd:22:e3:e3:e9:79:46:93:d0:dd:78:c2:5c:bd:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F0:E9:64:FA:2E:74:5F:0F:38:1D:3B:30:79:34:05:C0:A8:C6:DA
            X509v3 Authority Key Identifier:
                keyid:79:64:6B:38:C3:D8:7D:33:14:5B:63:4B:4E:1D:CC:21:45:F6:41:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWRrOMPYfTMUW2NLTh3MIUX2QWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b378e0-cf99-41b1-a38a-e136c989be33/1/eWRrOMPYfTMUW2NLTh3MIUX2QWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9f:c7:a0:e8:cd:3b:d8:87:da:5f:e6:b0:33:99:76:95:cb:
         e2:60:ad:c6:97:f4:11:5d:2f:2c:51:e6:1f:c2:d3:1e:63:bf:
         7d:c0:46:9c:63:f9:0e:aa:36:66:fe:6b:35:a7:c9:73:8e:c9:
         91:06:83:90:69:8f:c1:15:8e:a4:6d:eb:4a:27:0e:92:d5:cd:
         a3:41:43:bc:8a:1c:e6:1f:0d:0f:99:c3:86:20:9b:10:8e:09:
         4f:f5:c8:a4:e1:95:3a:2c:a8:e9:a5:d4:bb:37:d2:82:49:1a:
         12:49:e8:66:2c:f1:d9:67:03:e6:6e:df:1c:bf:5d:a1:91:e6:
         53:c3:7f:db:f7:9d:4a:d4:72:42:49:3e:aa:e1:a4:93:c4:2f:
         b4:b1:9b:17:48:c4:68:8c:80:0b:d2:fa:08:53:d3:2b:b5:a6:
         a4:11:a8:e7:fe:90:52:73:33:e2:d2:17:03:0a:96:0e:13:cf:
         94:c6:f4:fc:0d:28:3f:9a:12:0e:1d:8a:07:f9:9b:7f:e5:35:
         53:74:05:22:d1:5a:3b:d8:f1:2a:74:2f:ed:fc:e2:fb:47:3b:
         5d:2c:56:11:6d:69:21:57:fe:67:02:01:ac:1c:e1:04:61:0f:
         d3:09:52:c1:69:e3:33:4d:8f:2b:0f:33:8c:e6:eb:af:c9:23:
         91:9a:3b:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+Dn6VID4cbNwHO/LLm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NjQ2YjM4YzNkODdkMzMxNDViNjM0YjRlMWRjYzIxNDVm
NjQxNmMwHhcNMjUxMDE5MTAwMjQzWhcNMjUxMDIwMTAwMjQzWjAzMTEwLwYDVQQD
EygzYWYwZTk2NGZhMmU3NDVmMGYzODFkM2IzMDc5MzQwNWMwYThjNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd/wCpc/NJKNl3Ib75J7SDCzBNTa
2fIB+Kxfoa5xlxsqFUpGsvZskaPX8cf9qDyMg/oKWRyJV7xytqRGpi1LoXXFy57E
5IlmjYCIOoTa4r7GOGGcIL5r9Pt85W4YSvGS1PQ0Vsc0MbTZjcbgSbB7EXLO7IAQ
pVk2jRW9UIZTz7cR9oF/BzCFPlu/vKZwttIWRHeoZQrlFr0TvvfxPiXs9A951B/2
rZI8n9P16+gZbkrulB7rIZhjwRqsk2Ca/04pEg4JRiu8sueUXyoWb5Gl1sz+/obw
NS4svJFqi3RdAInqdxU3oI3RIeJE9yzKSlpS/SLj4+l5RpPQ3XjCXL3ruwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrw6WT6LnRfDzgdOzB5NAXAqMbaMB8GA1UdIwQY
MBaAFHlkazjD2H0zFFtjS04dzCFF9kFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEt
ZTEzNmM5ODliZTMzLzEvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iMzc4ZTAtY2Y5OS00MWIxLWEzOGEtZTEzNmM5ODliZTMz
LzEvZVdSck9NUFlmVE1VVzJOTFRoM01JVVgyUVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5/HoOjN
O9iH2l/msDOZdpXL4mCtxpf0EV0vLFHmH8LTHmO/fcBGnGP5Dqo2Zv5rNafJc47J
kQaDkGmPwRWOpG3rSicOktXNo0FDvIoc5h8ND5nDhiCbEI4JT/XIpOGVOiyo6aXU
uzfSgkkaEknoZizx2WcD5m7fHL9doZHmU8N/2/edStRyQkk+quGkk8QvtLGbF0jE
aIyAC9L6CFPTK7WmpBGo5/6QUnMz4tIXAwqWDhPPlMb0/A0oP5oSDh2KB/mbf+U1
U3QFItFaO9jxKnQv7fzi+0c7XSxWEW1pIVf+ZwIBrBzhBGEP0wlSwWnjM02PKw8z
jObrr8kjkZo7Ew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:42 2025 by rpki-client