Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File:                     eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier:          IOQCSONwoX97seJHGRFmAsSLx2R5QMv1ZHFW74Z5AYE=
Subject key identifier:   11:07:6A:1C:A3:3C:23:27:CE:D5:27:D6:A9:C9:E9:57:90:3A:10:3A
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer:       /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial:       0199FB7C96773B8D03B2B42314019443A204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 08:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:10 +0000
Files and hashes:         1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: ykhXrM4aJNSOR3HS81tIe3pt7ild6tDvWS881y3XA3k=)
                          2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:96:77:3b:8d:03:b2:b4:23:14:01:94:43:a2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
        Validity
            Not Before: Oct 19 08:01:10 2025 GMT
            Not After : Oct 20 08:01:10 2025 GMT
        Subject: CN=11076a1ca33c2327ced527d6a9c9e957903a103a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:9e:e8:11:f5:38:2e:22:6f:a2:c9:19:47:
                    57:b1:65:ea:71:55:83:13:38:f7:6d:9c:6d:a0:97:
                    8d:95:93:b3:4e:87:27:5f:60:31:a9:44:6b:ab:87:
                    f2:75:27:3e:df:42:75:3f:13:ea:f4:c5:26:38:ba:
                    57:f6:df:56:a1:1d:14:2c:81:35:76:ab:73:77:40:
                    15:7a:f3:d6:97:4b:94:da:be:67:f7:77:6e:32:71:
                    35:0e:70:ee:48:5c:18:74:6c:56:41:dd:05:86:b7:
                    4a:1f:81:51:7c:20:2e:ef:3f:e1:09:5e:3c:92:07:
                    05:65:ea:a7:35:58:bb:3e:b9:31:b3:56:10:d6:d1:
                    1d:a7:78:2c:fb:47:c6:91:cc:23:37:08:84:e4:10:
                    86:e8:9c:f6:5d:a9:57:4e:55:3b:e2:94:1c:95:97:
                    4d:11:21:da:45:a1:3d:e0:b0:b2:5e:ad:d8:48:26:
                    d3:d3:d1:74:f6:d2:23:25:55:0a:39:e2:27:d6:10:
                    55:88:aa:91:41:cc:db:a3:21:e7:bc:43:2e:6c:72:
                    88:68:84:3a:97:e7:45:d5:ee:6c:db:47:7a:e4:cb:
                    a1:85:27:82:6b:b5:d9:88:38:26:80:68:8c:7c:b7:
                    6e:a9:92:1e:92:89:16:ae:24:6c:23:47:34:89:6f:
                    2e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:07:6A:1C:A3:3C:23:27:CE:D5:27:D6:A9:C9:E9:57:90:3A:10:3A
            X509v3 Authority Key Identifier:
                keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:29:df:b5:12:ba:db:b1:a3:ec:25:b7:71:e5:0f:6c:d8:8f:
         4c:2c:71:e0:b1:56:8e:09:74:46:71:4b:bb:89:1b:b0:85:e6:
         27:69:23:94:c2:0b:84:e2:f1:2d:ee:bd:5a:76:72:5d:5d:67:
         6c:a1:7c:15:e4:12:96:75:b4:f6:0a:bd:95:0e:c2:05:25:44:
         95:37:ab:5a:15:7c:2d:8e:8c:b3:75:b8:b3:ad:18:c9:1c:f8:
         e0:fc:32:f8:67:d5:52:95:a7:27:e9:f0:b4:f0:f7:db:2e:33:
         19:ed:ac:0a:35:d0:2e:06:e4:25:4d:be:43:06:9d:bc:d0:ce:
         a3:ed:c0:19:20:d8:d8:e2:ed:b8:b5:be:3b:f6:cd:b4:66:c7:
         71:d9:78:3c:0a:87:ee:9d:11:70:09:12:67:22:6c:9a:3b:17:
         2b:4c:16:9c:26:4b:b9:7d:d4:f3:40:cd:bd:59:59:5a:4c:46:
         c7:05:59:15:db:39:8f:48:16:f7:98:20:bc:85:f5:54:79:a7:
         19:a4:74:9e:fc:82:a8:90:b3:35:0b:3d:e4:52:88:94:ec:3e:
         02:8c:ec:52:2c:b8:ac:60:49:e9:ed:b2:6b:1f:88:fd:d3:33:
         21:a5:15:66:b2:b2:7d:fa:38:c8:31:ed:3d:75:7f:6d:6c:6a:
         ea:7d:51:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:10:52 2025 by rpki-client