Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft
File:                     Eu5iV9DDorkwVhryUi2eWvf5y8c.mft (raw, json)
Hash identifier:          yGNvDG3ojcWg0ot4iKZIrJaPuLVlOMW7KClcT2/O7gA=
Subject key identifier:   A9:01:04:A5:6D:20:26:26:CC:54:86:7A:12:29:71:21:55:9A:AA:F0
Authority key identifier: 12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7
Certificate issuer:       /CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
Certificate serial:       019A4EF41CDB7824FCC3AF3136183AC44DB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft
Manifest number:          1712
Signing time:             Tue 04 Nov 2025 13:00:12 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:12 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:12 +0000
Files and hashes:         1: 1-g-eI2OgO4zZor0A412WKAODJ50.roa (hash: Hwiootkn4sAit4hhVLjLyU16720LmONg0Hs78oV4hss=)
                          2: Eu5iV9DDorkwVhryUi2eWvf5y8c.crl (hash: NEbSD2SH7wqzRuHbMNr61w0X7Zbef3nQ+IRGpN9PBjo=)
                          3: OJTVHABAPkMYaIPKGqmTFrqkijA.roa (hash: RLUy1JTxC7LtAaguP6mpqe/EZzZRDZ26pPa17dSCF0c=)
                          4: VpH6NdmEMri6-9x0sEVx5gZmOT4.roa (hash: dJFxGz10nN8N6LrUiqzV5+4+jpByHji6pA/wux4VDqI=)
                          5: xgAJzGKQjNFCM2JBKJizp1BMT3s.roa (hash: xalaZXFWFIVxCWkwdXHaCbPZ5E7vqyXNW3HRwSdLns8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:1c:db:78:24:fc:c3:af:31:36:18:3a:c4:4d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ee6257d0c3a2b930561af2522d9e5af7f9cbc7
        Validity
            Not Before: Nov  4 13:00:12 2025 GMT
            Not After : Nov  5 13:00:12 2025 GMT
        Subject: CN=a90104a56d202626cc54867a12297121559aaaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:2f:ec:f8:b2:7d:ed:1c:00:7e:49:6a:aa:
                    48:6e:d3:f5:e2:84:dc:0a:84:a9:65:da:73:0a:01:
                    e5:f4:05:68:43:a2:cb:d9:ba:80:d6:2d:b3:1e:21:
                    ec:b8:98:f0:b5:30:0e:ac:46:87:43:33:54:c2:b8:
                    4c:85:25:42:35:2e:f6:88:0d:da:65:b6:00:0d:42:
                    30:fa:06:f3:6d:9f:4c:3b:e1:27:0c:3a:d1:60:ca:
                    c5:99:cf:47:5c:c3:61:a8:7e:ba:65:dd:37:d0:b7:
                    f4:69:f7:b6:18:92:34:e3:09:97:92:e1:6b:83:4d:
                    67:a8:77:c7:11:9a:df:79:33:53:e5:e6:79:b3:19:
                    6d:f6:8a:88:20:5c:00:07:21:b4:7d:98:3e:25:4d:
                    17:53:fe:9b:82:9b:95:b7:ee:19:9d:bc:34:8e:48:
                    2b:8a:66:e3:f3:64:dc:c4:b5:df:3b:bc:e9:3c:86:
                    fb:0d:1d:7e:88:e3:dd:c8:3d:58:9b:03:f6:43:c6:
                    2f:99:97:6e:7b:36:a4:b0:57:de:fc:02:b0:f9:1c:
                    d7:2a:6b:33:a6:9f:2e:52:e6:64:d2:2c:4e:b5:43:
                    79:0f:21:54:a7:4d:b6:13:fa:39:e7:20:ea:83:2d:
                    ae:80:c8:d4:d1:58:c2:e6:d3:bc:54:6f:f2:f6:ee:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:01:04:A5:6D:20:26:26:CC:54:86:7A:12:29:71:21:55:9A:AA:F0
            X509v3 Authority Key Identifier:
                keyid:12:EE:62:57:D0:C3:A2:B9:30:56:1A:F2:52:2D:9E:5A:F7:F9:CB:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu5iV9DDorkwVhryUi2eWvf5y8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/71dee2-e1c1-40ce-b311-3f33866192d0/1/Eu5iV9DDorkwVhryUi2eWvf5y8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:bd:fe:8b:32:4d:78:44:ba:ee:df:f3:e1:d6:c9:ae:8a:4e:
         d7:6e:bc:e4:de:57:87:c9:dc:d2:99:36:27:03:a9:bf:52:19:
         fe:a9:df:51:f6:fc:82:df:5b:69:0d:59:3e:c3:cf:64:19:af:
         e1:e2:62:41:82:03:fe:ac:28:38:61:45:e3:4a:a0:1e:15:45:
         aa:18:d5:51:7c:d0:c9:b0:ce:9c:dd:7d:8b:6a:b7:22:56:3d:
         94:0e:cd:85:4e:a2:f2:7b:04:11:81:33:43:ba:e0:d5:06:84:
         d8:bb:ed:27:93:4f:76:a4:05:d7:af:16:dc:3b:c6:72:44:29:
         62:fa:ea:22:cf:88:85:d9:d4:3c:18:b9:46:6a:2c:33:dd:9e:
         87:3d:18:04:71:d6:4b:3c:92:3d:66:25:59:9a:10:fa:2e:61:
         4a:d6:ec:f7:60:a3:47:19:38:9b:fd:3e:04:e0:9e:31:90:da:
         c8:f8:a0:29:32:07:dd:2f:86:6b:61:1f:ba:29:f6:86:8a:d8:
         7d:28:aa:c0:6a:16:77:1e:06:18:78:df:7c:18:59:32:a6:c2:
         b8:48:13:83:69:65:74:ca:cc:5d:24:6b:aa:da:b5:20:9b:fd:
         b7:3f:46:35:e1:90:cd:6f:f0:ef:07:75:a8:44:20:50:77:f9:
         19:56:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:09:42 2025 by rpki-client