Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
File:                     E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft (raw, json)
Hash identifier:          6+827JnLja0MieIFlbYxwY8J5LLcFRctKLz3DUiopgo=
Subject key identifier:   E0:C9:A9:3A:FB:1D:DF:76:CE:61:86:8C:65:5A:9E:C6:B3:42:72:12
Authority key identifier: 13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3
Certificate issuer:       /CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
Certificate serial:       0199FBEC3EB4B5F827F7C92D940A7A397DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
Manifest number:          0E6A
Signing time:             Sun 19 Oct 2025 10:03:07 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:07 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:07 +0000
Files and hashes:         1: 8uZf_YXrnrFcX5OGm1hy0aMncrA.roa (hash: FJ+rC+vSFCLpeii+a3s75dE3+VofCsTHLoOQv8k1S8Q=)
                          2: E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl (hash: BW/RJUO9XY6yTaKK/A2Tc9L16YzNVJp3Wsb8lVHr1G8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:3e:b4:b5:f8:27:f7:c9:2d:94:0a:7a:39:7d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=139e83616f51f00b1e55c0c617b3a5f04ab741a3
        Validity
            Not Before: Oct 19 10:03:07 2025 GMT
            Not After : Oct 20 10:03:07 2025 GMT
        Subject: CN=e0c9a93afb1ddf76ce61868c655a9ec6b3427212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:73:16:f4:f6:9c:56:f3:82:3d:0c:db:c8:
                    70:e2:aa:e6:fd:b2:a8:3a:f1:cf:a9:db:30:62:64:
                    0f:18:e7:0e:97:eb:a0:a4:6c:eb:5f:26:76:d3:36:
                    a8:6e:bb:9c:00:86:90:b3:02:41:d8:52:1a:af:23:
                    69:42:79:b6:56:dd:83:73:13:e2:dd:7d:d6:07:71:
                    0c:56:18:c0:b6:2f:a3:40:d0:0d:75:c6:99:aa:69:
                    11:b0:22:b9:10:8a:80:47:fb:a4:fc:df:65:7f:5c:
                    f8:8b:1c:b7:a4:93:e9:4c:bf:55:01:09:5d:42:78:
                    1c:b8:26:db:c9:c3:ec:d0:5f:8d:31:05:67:08:53:
                    d3:1a:6f:f5:94:7c:5e:5c:34:01:c6:6e:c0:a1:73:
                    f8:31:0a:99:c4:f3:5c:3a:9f:c8:54:42:22:0a:8d:
                    d5:48:67:78:55:3f:48:78:0e:ea:10:40:56:9e:be:
                    28:46:2d:ca:80:c1:2b:bf:27:c5:8a:5f:0f:e2:c9:
                    47:70:6c:02:7f:ca:e3:14:df:32:03:8c:84:ab:ed:
                    f9:16:b7:7a:67:7c:bc:cf:f0:d8:56:24:34:36:1d:
                    bb:29:54:4b:35:65:ee:cd:bb:60:5d:5f:b8:5b:6d:
                    ee:06:02:58:4b:36:e2:06:fe:9d:86:0e:91:f5:d1:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:A9:3A:FB:1D:DF:76:CE:61:86:8C:65:5A:9E:C6:B3:42:72:12
            X509v3 Authority Key Identifier:
                keyid:13:9E:83:61:6F:51:F0:0B:1E:55:C0:C6:17:B3:A5:F0:4A:B7:41:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E56DYW9R8AseVcDGF7Ol8Eq3QaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/36f378-a4d2-4758-93e2-6782e2daef74/1/E56DYW9R8AseVcDGF7Ol8Eq3QaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:8f:44:05:6e:10:ab:28:fa:04:b3:c3:52:73:97:96:2d:32:
         80:c3:17:33:99:c0:a6:45:c8:a7:83:7d:33:6a:06:04:e0:cc:
         8b:1f:02:42:2f:b9:1d:09:51:e8:bd:2b:e0:36:12:b2:f2:80:
         d5:68:83:22:91:3a:89:22:c5:1f:1e:e2:b3:ea:b0:f6:4b:73:
         7f:cb:3d:26:1b:39:a2:6a:6a:75:b0:ff:74:be:3c:7e:31:46:
         a1:d2:a6:a7:e5:a9:ab:4a:88:44:40:7b:f2:fe:42:16:be:9c:
         3f:74:d7:ad:ef:5a:a6:6f:25:71:d5:41:df:b4:34:27:e1:f9:
         e9:e4:ab:10:ed:a2:df:bf:2e:d6:f0:0b:af:17:05:00:9c:ea:
         fc:8a:50:58:b5:cb:ac:6a:4a:3e:17:db:3d:22:f3:5f:f5:f1:
         85:70:71:b7:33:ae:31:0b:08:2e:34:2f:b8:40:9b:23:4e:28:
         33:4d:e1:ff:ca:0c:c9:53:72:ba:c6:e9:47:1e:39:fa:98:71:
         9f:d7:db:97:f6:ee:ee:17:5d:11:63:94:91:95:5c:83:68:17:
         7a:3c:19:04:54:97:f6:81:86:4f:5c:a2:df:da:6d:e5:f1:e9:
         6d:29:65:d4:a1:05:35:69:98:2e:bd:b0:bc:d6:88:e1:ea:a3:
         a9:00:67:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:52 2025 by rpki-client