Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          QCKWvYZ/Jh977wIIYcJn0nQMvDQOph0XgEGyxBsMrF0=
Subject key identifier:   EC:34:6B:C7:A1:B9:4E:98:0C:45:21:D0:68:B0:49:EE:06:6A:85:5D
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       019A4D3D36D198D4C56830C148BB435BA88E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          0A50
Signing time:             Tue 04 Nov 2025 05:00:48 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:48 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:48 +0000
Files and hashes:         1: 5t_mW-9iAJF947yBRX7z3c1fKCA.roa (hash: j0+9GFhRaH2kiOAKMhZj5W1LMt1cB4nhSOqQQ9Re6jI=)
                          2: CWu5dKrEuf-0nBCltKLJ6Qa-UyY.roa (hash: ykK1nj6nlxboFcnLj7DFZHuLWYTPt9DhUF2Ryrd0hQo=)
                          3: Yhx7BXYzTzzS5t_9FaN3gvqDvvU.roa (hash: 6o6oe2/9E1nYEVGVicr/zo6Y4uqUD4D2A8TAd6evSwY=)
                          4: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: b3jIBwF7tQeOba/gPF/MWE3Z/EOi9piZ/41hNH8xN2A=)
                          5: ylQ_YVvSmjC4xYfDg6NlfrIxtJs.roa (hash: BS+LVNZet6aS5JWtp0wpo0XqwvlqhVLSQja2K9qhIAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:36:d1:98:d4:c5:68:30:c1:48:bb:43:5b:a8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: Nov  4 05:00:48 2025 GMT
            Not After : Nov  5 05:00:48 2025 GMT
        Subject: CN=ec346bc7a1b94e980c4521d068b049ee066a855d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:61:64:7f:31:71:4a:90:63:e2:33:71:15:de:
                    1c:b7:0a:12:e4:d7:69:44:02:1b:3e:8d:de:2b:fb:
                    cb:32:37:a8:45:78:4b:3d:3f:3b:95:87:f1:31:0e:
                    92:ac:3a:57:83:e2:2e:8d:c5:50:57:96:e4:c4:ac:
                    9b:97:98:0d:a2:b6:40:db:85:aa:44:58:a5:22:5f:
                    43:92:57:87:3f:1e:5d:30:3a:e4:61:c7:e1:2d:22:
                    ac:77:5b:17:6d:86:95:66:e5:71:0f:ae:f2:b3:60:
                    15:e2:9b:75:7f:f9:a2:d1:bf:2c:ec:b9:f2:22:71:
                    5f:64:2e:66:32:28:82:b2:1d:7e:f6:e6:3c:a9:7d:
                    89:4d:f5:bf:5f:0c:af:b5:ac:b7:fb:75:b8:21:2e:
                    fc:e9:c6:c6:43:78:28:ab:cc:55:6b:f9:71:77:81:
                    56:b1:2b:77:28:16:62:85:1e:5a:73:f1:1f:0d:6b:
                    c7:51:5c:03:7b:b0:74:48:11:a3:82:61:b1:18:08:
                    e6:7d:43:16:4c:55:31:15:66:28:1d:ec:7f:2a:aa:
                    b7:e3:3b:8e:5f:5c:aa:b5:f5:33:9e:cb:ed:5d:aa:
                    85:7c:c9:d8:2b:f5:bd:9c:1f:05:e4:e3:96:7d:f4:
                    8e:b4:1d:cf:8e:90:5e:0f:cb:b5:28:95:d4:9e:da:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:34:6B:C7:A1:B9:4E:98:0C:45:21:D0:68:B0:49:EE:06:6A:85:5D
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:88:d1:49:2a:8e:87:d1:02:84:a1:b3:83:43:9e:e1:6a:a9:
         3f:f9:f2:4d:c8:73:0c:9a:bc:41:ed:4d:31:03:8e:42:df:07:
         5d:e6:f4:52:48:33:39:5c:d8:c5:5d:b1:ea:73:96:ac:9d:27:
         41:0b:41:37:86:53:88:a2:40:d9:3c:d3:e0:43:1d:b2:fc:43:
         e8:3a:9c:f5:84:ab:67:6f:6b:a6:6b:92:db:05:78:4a:c9:78:
         6f:49:14:39:ac:fa:f1:bc:19:fa:bd:47:93:34:a3:26:71:ad:
         f9:56:d2:97:75:e4:6e:10:70:a3:6a:01:41:f1:bc:8f:99:4b:
         11:7e:90:8f:ba:04:59:a8:81:eb:62:fa:e0:1f:ab:81:36:97:
         29:6e:73:55:14:f0:94:92:b4:e7:f8:df:ce:a9:3c:f9:b0:c4:
         01:e8:8c:22:a6:3c:8b:68:0e:48:a6:db:3b:cb:0d:d0:53:75:
         fd:33:7f:74:55:fe:cb:f4:3b:78:94:26:b9:fd:5b:ae:05:38:
         7f:d4:81:3a:71:2c:04:63:a7:ec:2a:c9:4f:94:a8:b3:76:12:
         cb:41:f3:47:72:37:28:db:50:e8:39:13:13:59:c2:09:4e:92:
         02:35:55:cf:40:f7:4e:12:88:84:b2:93:e0:b7:f4:a0:e5:8f:
         27:ce:92:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:58:11 2025 by rpki-client