Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          XILoe3iBwq2hfcSwwUoD0J7DWDYuD2ldji41E/OQPrI=
Subject key identifier:   7E:47:DF:4F:E1:92:19:C0:DB:33:7C:BF:6A:B2:D2:68:68:DE:F8:71
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019A4DE1E54640EBAF97F88BD49CC6ECBFD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          1710
Signing time:             Tue 04 Nov 2025 08:00:41 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:41 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:41 +0000
Files and hashes:         1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: jINtRf55VogGN6QSKX+QzhFsEOOTM5gRODsly2lkAOk=)
                          3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
                          4: VbGX6V55_AUgh-706a5pCl3f9Kg.roa (hash: IviXGlaLtNBbBi+wGZOwysY/nW7XfiJY8zoOrjfnvG8=)
                          5: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
                          6: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:e5:46:40:eb:af:97:f8:8b:d4:9c:c6:ec:bf:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Nov  4 08:00:41 2025 GMT
            Not After : Nov  5 08:00:41 2025 GMT
        Subject: CN=7e47df4fe19219c0db337cbf6ab2d26868def871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:7f:40:83:66:07:32:20:29:45:df:fa:4d:
                    e7:cd:62:9e:16:73:59:cf:56:b0:f5:e0:3e:0e:57:
                    8c:05:ab:c4:80:89:5e:8b:88:50:f1:98:ca:9c:34:
                    29:12:6e:66:f1:f8:87:e0:82:aa:2a:95:fc:38:f2:
                    cd:25:b7:84:e1:53:b3:82:04:33:8b:a6:80:72:c7:
                    ce:1a:04:c3:0d:3c:a9:20:6c:6a:80:21:6c:05:48:
                    b5:7d:ad:bf:93:f1:cb:52:8c:b6:8e:33:4a:3b:f1:
                    f9:fc:87:9c:74:27:13:19:a2:6a:f7:6e:66:5d:9e:
                    b8:44:e8:c4:be:9c:1b:59:47:08:29:c1:00:b0:68:
                    6e:9c:6d:10:1a:aa:b2:f2:b6:59:56:0d:74:04:ea:
                    69:39:99:65:41:40:a8:9f:d0:a9:54:5e:c0:bd:c4:
                    7b:e8:71:6f:0b:e6:67:bf:c6:64:a0:0f:05:30:9e:
                    dd:63:06:f3:83:a5:01:89:ee:bf:11:36:54:b9:16:
                    2d:42:22:2e:51:d5:db:a9:d4:83:22:68:08:9c:f0:
                    18:7f:7f:47:7b:89:0d:3d:bf:d3:dc:60:5a:44:d9:
                    17:18:83:fe:10:41:86:c7:50:a7:2a:31:d9:e5:86:
                    e3:c6:d0:84:1a:cd:66:fb:3b:88:c8:b4:d2:ae:ec:
                    1f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:47:DF:4F:E1:92:19:C0:DB:33:7C:BF:6A:B2:D2:68:68:DE:F8:71
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:2c:f5:87:25:94:19:59:16:4e:d6:56:35:a9:78:65:a0:21:
         17:f9:1d:f0:ee:48:c6:97:86:3d:96:58:7a:43:5d:e0:c1:c9:
         60:f3:79:8a:c7:95:7e:ee:d0:49:83:9a:25:0c:f8:fd:f0:79:
         c0:a8:f8:06:e8:ea:6b:75:12:94:3f:1e:65:b5:db:43:13:d3:
         06:3d:ac:13:28:ba:dc:14:8a:9f:a2:b6:c9:9e:73:3b:9d:49:
         e6:bf:0a:78:36:b2:1a:53:98:3a:f5:ea:34:4b:46:ea:eb:2e:
         b3:b1:1d:cc:51:ce:ec:9d:1b:d2:27:51:85:8a:34:45:da:6f:
         d3:b2:e1:01:46:e0:07:68:38:8e:ef:19:47:00:84:bb:63:77:
         be:8b:1c:56:25:17:b7:b4:dd:ab:4f:b9:fd:7a:e8:c0:97:c0:
         6f:a9:df:53:8b:8f:b2:69:39:ad:09:5d:23:03:f0:f9:0f:9b:
         0d:03:5f:78:f2:c8:ad:21:49:8e:2b:e8:f3:64:fa:1d:f8:29:
         de:93:1b:a0:a3:5d:51:11:fb:9e:b1:32:92:f8:9e:01:bf:50:
         26:e0:8a:c6:14:c0:f3:95:f5:e3:7e:74:30:fe:05:36:28:ec:
         f3:9f:ac:04:3e:f9:e9:5b:38:2e:3b:0a:29:ff:c2:cd:73:66:
         5b:92:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:02 2025 by rpki-client