
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File:                     EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier:          Y56ekV7iOtLExhjRODN3ZIjLwDg7MeyQCezvUtMR/+Y=
Subject key identifier:   D3:24:6D:E3:CA:6C:CD:DD:4B:DD:C5:69:92:80:AC:4A:2F:B1:0E:80
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer:       /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial:       019A4DAB1C0E00694796F9D8C5B3B39C2873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number:          1456
Signing time:             Tue 04 Nov 2025 07:00:50 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:50 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:50 +0000
Files and hashes:         1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: UXAmsqF7iPsgb3gwUQ4oPHLqp2qGsdz922jr/4dbvT4=)
                          2: h1bxrd9ZQSHnWEsCAF5tNHnFIO4.roa (hash: bzjeTqPcjaJhOMAteDMwXrvi1f6qBvlBTlDeNbXA0mc=)
                          3: kkhZtXnFFbbyksJB3tfkXPoindU.roa (hash: AnX+QPeb1iA6tYHpW/GJq8CbkdKou5XvPzQURX4/+g0=)
                          4: n7z_DfOtkGmMleyu2ItBMkfbWIg.roa (hash: JfGahSu9V1xovP5pxrTlWe3nwAxY6TrxY6kTUEokFws=)
                          5: uBAndVEu4g2uOttKjyLkMFr3ADc.roa (hash: RQpI8/9SZFmhxGwLcGtsCyax4v0wvsItiR+xv1PadRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:50 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:ab:1c:0e:00:69:47:96:f9:d8:c5:b3:b3:9c:28:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
        Validity
            Not Before: Nov  4 07:00:50 2025 GMT
            Not After : Nov  5 07:00:50 2025 GMT
        Subject: CN=d3246de3ca6ccddd4bddc5699280ac4a2fb10e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:12:fd:f7:85:8f:fe:6e:a1:2f:8c:83:e3:
                    7d:94:d1:70:48:09:23:1c:13:29:84:4b:8f:07:74:
                    8a:26:d3:a0:b4:91:63:2c:1b:12:0c:21:5c:96:a2:
                    1c:64:b9:91:5b:cc:d9:6e:9c:7c:9b:ff:0b:6a:00:
                    8d:be:73:7c:35:50:d2:4f:df:92:55:b8:12:ee:19:
                    eb:fa:1e:cd:d7:e8:91:ef:d5:d4:7b:8b:da:e0:95:
                    46:ce:88:da:7a:03:7a:d2:bc:5c:ce:30:96:49:54:
                    ff:55:25:9e:8a:fd:98:48:dd:b2:bf:0b:c5:2b:55:
                    8f:63:33:75:1a:d3:49:02:9b:67:62:de:f9:59:af:
                    68:09:16:81:51:9c:4c:dd:05:9f:0a:5b:35:32:2f:
                    0c:fe:f0:0e:64:05:15:23:5d:9f:f9:5c:f3:0e:ea:
                    c1:61:be:7c:ac:3d:42:a4:81:41:aa:28:67:15:7d:
                    c1:18:0a:36:7f:ec:e8:be:e8:1c:bd:35:f5:6a:81:
                    74:52:08:a9:00:9c:ab:13:8c:5f:cf:eb:d4:3b:b9:
                    35:ac:57:74:f3:2a:25:ae:93:d1:4d:5c:86:ac:49:
                    e2:ec:83:c4:15:c1:15:05:5c:fd:f6:7b:91:26:29:
                    bf:77:16:7e:6d:39:75:e6:b3:ca:19:fe:df:3a:98:
                    5e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:6D:E3:CA:6C:CD:DD:4B:DD:C5:69:92:80:AC:4A:2F:B1:0E:80
            X509v3 Authority Key Identifier:
                keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         42:44:91:26:6e:6d:b5:b8:55:f3:c5:9e:43:d8:20:38:75:3c:
         37:3d:b6:02:49:76:80:af:5f:63:cf:29:e4:c8:34:13:8f:87:
         02:0c:0d:3c:e4:18:bf:85:48:68:e5:da:ea:1f:d4:40:24:9d:
         96:b9:fa:38:0e:7c:a0:cf:04:44:86:d9:b6:5c:d4:6d:73:2f:
         c5:e2:70:c8:2c:8b:b4:22:39:c1:6a:bb:32:e3:30:e9:51:52:
         c3:8d:33:f9:ed:14:04:57:07:49:f2:2f:62:b4:51:ce:ec:8c:
         71:8d:7b:08:4a:56:e3:6b:42:fe:82:bc:b2:3d:ee:fe:7f:87:
         d8:37:5c:73:b5:ff:80:82:02:da:c8:c5:2e:db:93:af:20:d2:
         cf:7c:f7:af:ee:e4:c1:36:a9:82:1f:14:13:76:d3:4a:ea:a2:
         98:d9:d5:cc:18:78:f1:e2:ad:4e:c6:57:57:c9:05:97:3e:be:
         aa:31:02:00:54:96:e6:40:9d:cd:a2:0a:13:ca:e1:05:af:07:
         eb:c6:ea:6f:e3:45:54:fc:52:97:78:8f:22:60:2e:a0:b2:27:
         70:80:7b:3d:19:7e:19:22:72:eb:6e:5f:1f:b3:fe:56:10:36:
         ae:36:85:e1:f9:b4:f9:05:25:6c:0b:b0:3f:f0:14:b3:1f:1b:
         be:75:1f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:46:35 2025 by rpki-client