Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
File:                     eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft (raw, json)
Hash identifier:          iTtqXxMreafKPke8mfeuHsOiWNwMDDkkzHwVdqB/kX8=
Subject key identifier:   47:2C:A5:03:F7:D6:D3:C1:06:66:E2:6C:EB:44:5A:55:39:12:37:E7
Authority key identifier: 7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78
Certificate issuer:       /CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
Certificate serial:       019A4DE20F3C9D69D6A5BDD5770A0A9EA26C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
Manifest number:          0C28
Signing time:             Tue 04 Nov 2025 08:00:51 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:51 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:51 +0000
Files and hashes:         1: BDcLQxnyKWB9gtN2Um0ArdAi4Yo.roa (hash: QoejBXywxlS59Ku6I9XeNMEgUGcsO7GymdNfXSFLhps=)
                          2: GBm_VAZMm95tvGvpR8c8CkKdzyw.roa (hash: /MkVaXn8Lh0U59FVf0qSK7VZuxTGbFM8GznUiwatBTk=)
                          3: bZEqWQ4d1wH8hJyV04MAPEO0Ygo.roa (hash: om8LxQrZJkACoqW8VxCdwbEW0cMygwUVSRnGureg1Lk=)
                          4: eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl (hash: nJomkg7cqCZYqF6D/00db5tE8b1SlFel/dtMuIZdD60=)
                          5: iYjj4YqAYkDaJ9eptskKUPFJFTk.roa (hash: ZJZirU9LjNKyBMjTuKlZGLz5q49ZAFYRK8BpWP4E6Qs=)
                          6: xv9HfwhggDXbUMv-czQzhIKTeZ8.roa (hash: 8zbraxRvCOHngoKaCuyrD6Tzu9xckameA/akAOr4XQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:0f:3c:9d:69:d6:a5:bd:d5:77:0a:0a:9e:a2:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef069e7e3ed5bf70f682ce40c5810ff3e5e378
        Validity
            Not Before: Nov  4 08:00:51 2025 GMT
            Not After : Nov  5 08:00:51 2025 GMT
        Subject: CN=472ca503f7d6d3c10666e26ceb445a55391237e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:22:f5:b5:41:ad:44:a8:82:1c:c4:a2:78:
                    c5:68:94:15:01:fa:6d:a4:65:cf:e3:47:94:97:2f:
                    3d:5f:26:da:b1:c7:04:4f:98:07:84:f6:10:e3:c9:
                    15:8c:5f:c3:8b:2e:33:1a:6e:a6:3d:67:73:45:b0:
                    d4:dd:d1:9b:ca:17:91:43:5b:6f:7a:fe:14:ef:c3:
                    db:fd:64:9f:81:bd:d2:3f:1b:01:67:dd:7b:6b:07:
                    77:92:d4:ea:d8:aa:bf:b8:1d:5e:c8:80:98:09:89:
                    78:8a:d3:02:65:48:d3:a0:b4:f0:12:44:a6:4f:d1:
                    5e:78:a5:07:59:51:d4:13:55:f3:ee:98:8b:47:52:
                    05:f3:3a:68:35:73:7e:d9:3d:1a:bd:01:1f:70:79:
                    68:f9:27:e3:2a:91:68:08:94:47:61:8b:50:52:81:
                    d1:64:de:6e:37:8d:99:e0:79:47:c0:59:5b:93:cb:
                    91:24:68:0c:04:6d:44:b8:f5:c6:ad:04:c0:ef:40:
                    aa:42:74:37:cb:aa:7f:02:93:4b:e1:79:63:d6:b9:
                    4b:af:7d:e7:2f:8e:75:b1:64:3e:6a:0f:4e:32:7a:
                    39:ed:f6:1e:c0:2a:b0:99:f5:dd:27:a0:f6:63:cc:
                    7e:e7:31:41:8e:5a:9e:60:43:50:ae:17:7e:b9:83:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2C:A5:03:F7:D6:D3:C1:06:66:E2:6C:EB:44:5A:55:39:12:37:E7
            X509v3 Authority Key Identifier:
                keyid:7A:EF:06:9E:7E:3E:D5:BF:70:F6:82:CE:40:C5:81:0F:F3:E5:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c0bb52-70de-4af0-a9fb-900034f00d9e/1/eu8Gnn4-1b9w9oLOQMWBD_Pl43g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:82:aa:2a:50:a9:ce:1c:2d:7f:ed:ff:86:80:1f:0c:c7:29:
         9f:b6:f6:1e:95:10:24:64:bd:19:40:6e:19:f5:cf:66:7e:0d:
         82:0a:5f:ee:4e:c8:44:6e:bc:e1:fc:a8:62:0d:de:26:33:1c:
         bf:f0:9d:6e:2a:e4:af:b4:cd:64:3a:2d:ea:cd:9c:c8:51:73:
         e7:d9:10:c7:59:88:c1:d8:ff:a5:64:8c:62:57:d1:e0:c8:e9:
         2b:dd:00:e4:8a:7e:a3:a3:9e:12:da:e1:87:77:7b:16:96:aa:
         73:b4:ca:6e:7d:cc:29:65:32:95:2a:76:80:f5:3d:c6:20:ed:
         06:30:ea:98:bf:c3:c4:9a:c2:81:75:86:41:05:f9:14:aa:bd:
         3b:da:67:52:2f:2b:9e:66:e4:ab:89:ab:2f:fc:45:12:1a:b1:
         f7:2a:04:13:51:27:b2:a3:bf:69:30:de:5c:5c:7e:e6:bb:69:
         fb:2f:a0:d1:36:e4:6d:31:eb:07:fb:25:7e:15:5f:3a:fe:80:
         f4:cc:0b:f5:f5:6a:12:eb:4e:40:d6:b1:2d:a5:c8:a2:72:ab:
         de:3c:8e:15:e1:a0:3e:33:6a:86:56:9e:5a:11:9a:44:09:c3:
         7c:b2:e8:c9:dd:ac:4a:5e:fe:bf:26:99:15:ae:bd:7a:44:4a:
         40:ec:d2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:11 2025 by rpki-client