
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          xslWy5dZ6obMhuYf/2uKQ3701DmABSsn4Ky83qhNyT0=
Subject key identifier:   57:E8:C2:57:5B:56:58:10:DE:26:3E:0A:5C:2F:81:8A:E8:1E:05:4C
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019A4E4F8F142B44D2F3CDA232EF13D4B40E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0674
Signing time:             Tue 04 Nov 2025 10:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:28 +0000
Files and hashes:         1: 7uqgpP9wFK8eGPAcoJ-sEDnAHd0.roa (hash: Xz+LC7Kd3zBVRX5yVg4o11ClYwI2C9PnbUjpiLfa0yU=)
                          2: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: AvKpCuPngGUn8U2Lcbc98cngaqWd1Y1z8JaJCa+CtYg=)
                          3: G7iDQ4AJCfPlSLJm51qXvFLT34Q.roa (hash: ypV03h6J08o2WIBzZwFVWtQuB9T4WQvABamDXKjZwKk=)
                          4: HRwZymnXLOUIoxoUINYn4to6JUk.roa (hash: pQiZ5yxU+9mvgspIHMzwMKG+1Uq0GJpzfxG88McUc/c=)
                          5: KZgShytB2Dg6qgF16xBAvAwz96A.roa (hash: q4wJLWishIa1PGKUkxxT9s0b4UEcNNHxlEthcKoGKVE=)
                          6: KluOERwO7JD42tSY7SzaYIk0yRU.roa (hash: YLxJf9E85QadUhVAMwy+yrs3X+SooJumuq1itcsYnpw=)
                          7: LozgjGA37xFvEWDTYPM2lAwAduA.roa (hash: 8YO3hU1Ao5pQO7Cei7oHHsrN3p6eZUJVpQ+H7w2cew8=)
                          8: Njz6tF05e2JuE_pdVlzt9icM_i0.roa (hash: nLxr25oD4ktf4kRizFewbb9TO/Wnl/IT0Qm+FXkeMF0=)
                          9: RDzymZpCcV0bpni3siQGqq1farc.roa (hash: NbY5Sdgr9o+O/ZEjGJenKUtZltIspdl+18YYsBTTJSE=)
                          10: UGz5ST9xLeR326lNlIlQUU1TOM0.roa (hash: eBdiuMt/l6dkQCdthTlhmOdw9OFMh/UNcOXGzcvKrwo=)
                          11: UShzAf12IpfTGieZ1mCIrzrhJHg.roa (hash: qL31JBNYAcgAOjoHZe+Zvz2ftY9LCEZFAxatlXu2rsY=)
                          12: X0YGyVP66ZGqkiDVT4gjqfkDpbw.roa (hash: 6i5H9KoMGNY5mA0wdWKUYrifDwq1Buv6W9ygAz3wN8s=)
                          13: YFz6rAUzGpohLtyvc_KB5nklIPk.roa (hash: u4TO53ZBZpbqtJ9VFPMzXBqk+r34NnQWFKA4gYqkSEA=)
                          14: YJlnZEqnS37-I2Pc0d4O5814-u0.roa (hash: zdgbWKDI7O/AK1o+TR6T6xJN+uAFFoKLguHyz0cngBg=)
                          15: guLTM5a0sG8d8PuqoNee-jjL86Y.roa (hash: foLzuPt71A9R7m4Zr/AiIAiz2ulaqdDrSGiOeT2DEkU=)
                          16: hvyCjD-sr1w6tm5UxwSderd8UxE.roa (hash: yEejB8VN7eRKYdvOBcuTAVJxtwqqoPVaxdtPUz/eqYQ=)
                          17: jnYTysXrOb_StYu-PzKs4M4hD2Q.roa (hash: J4kuRDOOkIbQT59LbGJVlXERckVcWQAPxH2vewJm0Sc=)
                          18: nOQG8M5trDQh4XjFetXQ5gl5hAk.roa (hash: jO9QLXj1bBC/jibhnilQOLleHuZugOPI3ebTy+5yP/A=)
                          19: q7g7bJqMRqL3UFLw4pvgYLZJf1A.roa (hash: IOGkhvWvFOvN3iY+ALSxpXygSJS0I9J4sN93HYJBrcI=)
                          20: uUxZil2b159003xfkfWtUQreHkQ.roa (hash: J/52Jbvu/goI1MIOwJZWmsnYU2my4DOGAr8T0IS/l48=)
                          21: uu7x8ws28T4QdM70FvKBJCd6ke0.roa (hash: mYpdS0B5YDMrQaeH22PB2fPiErznb3n7AJTmk2e5j1U=)
                          22: vgsTODUN4DNu4XsvZWX7_dDziEU.roa (hash: OpvsJv1O2mE0888WpNjBckKl+Q9vODkDoyJf989gi1w=)
                          23: xzuQISkcD-LDwaStk5Po8cHtiJw.roa (hash: MTlh23S7S0fGqADN5d5jEOMtMCQeo6fF2QEVS5QqY6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:8f:14:2b:44:d2:f3:cd:a2:32:ef:13:d4:b4:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Nov  4 10:00:28 2025 GMT
            Not After : Nov  5 10:00:28 2025 GMT
        Subject: CN=57e8c2575b565810de263e0a5c2f818ae81e054c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:8a:44:73:b2:6c:ea:ba:98:a9:8d:64:6a:
                    64:e6:66:ef:0b:93:4b:55:f3:66:0b:c7:90:09:82:
                    e6:13:6d:79:2d:85:c6:2c:44:a4:21:82:95:52:44:
                    e6:06:5e:f6:fa:7d:48:89:03:38:3a:14:75:a2:d2:
                    3f:df:89:3e:78:d7:b1:82:82:da:65:45:de:d1:9d:
                    aa:9f:e4:bd:02:84:d7:c9:02:42:5e:6c:ab:0c:27:
                    7d:4c:64:af:5d:5a:98:ba:3f:a5:a8:cb:56:8f:e3:
                    33:64:63:31:29:d4:5e:bb:9f:c4:3a:43:f0:43:a6:
                    6f:a9:cd:b9:cc:0d:fe:14:8b:6e:ef:6f:97:3d:e3:
                    53:7b:86:0a:8b:c3:2b:8e:17:2e:f7:ae:1f:a3:8e:
                    8a:cb:f9:e5:e8:10:57:86:41:28:6f:d3:48:2e:ec:
                    8d:1a:33:a5:c2:55:e1:97:52:3f:aa:51:f4:b7:ef:
                    b1:38:ab:76:5b:93:47:27:a3:89:26:77:c8:93:58:
                    31:b2:9d:47:8d:1d:92:90:7d:98:fc:62:26:46:69:
                    6d:f4:63:87:d1:b6:78:2e:39:10:cb:c6:12:65:17:
                    35:78:6f:d7:32:27:18:23:9c:61:05:f8:31:b5:e6:
                    de:4a:4e:d7:1f:4d:28:d5:8a:f1:a9:8e:36:96:54:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:C2:57:5B:56:58:10:DE:26:3E:0A:5C:2F:81:8A:E8:1E:05:4C
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         67:1d:a7:ac:40:98:a5:e1:86:f1:54:24:8c:a7:b4:e4:bf:64:
         1f:db:06:d6:cc:ef:78:c7:06:69:d8:87:7f:04:a1:4f:d2:71:
         28:78:f1:93:b3:6d:2c:e0:f3:8f:b9:8a:cc:ed:a9:2a:35:38:
         9a:20:b1:ac:30:90:fe:37:37:94:40:58:9b:67:3a:f3:cd:e8:
         c5:7c:e5:60:a6:46:3e:cd:b8:ca:d2:bf:ea:67:59:aa:e2:ba:
         17:43:2d:ea:f4:92:0d:9a:06:d5:00:8d:74:21:3c:fa:3e:c3:
         4d:ac:73:af:c5:19:9d:76:ac:c5:8f:d4:21:c1:b8:a5:d6:cf:
         1d:38:11:47:6f:d4:d9:51:e9:50:5e:bd:ef:44:25:00:89:01:
         3b:7f:dc:af:13:54:00:2a:c1:80:27:ef:45:7c:61:e4:e2:c4:
         5c:5b:97:df:3a:88:91:ab:a3:9f:af:26:e5:13:8a:4d:8c:4e:
         84:a5:b1:35:a1:0b:dc:00:65:35:33:39:67:20:4d:0d:e1:5b:
         94:e2:0d:4c:fe:b9:77:3b:09:18:1a:ec:c9:b3:83:33:65:fe:
         da:7e:36:35:0d:86:22:7d:1a:25:86:51:7b:a9:29:77:f7:53:
         5f:cc:d3:f8:c6:31:b5:b1:9d:8e:2f:ee:bd:c9:7d:b5:33:3e:
         55:3a:8d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 15:08:02 2025 by rpki-client