Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
File:                     eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json)
Hash identifier:          UN2gKFYVONR3hg59s+aRDWDc3eo38ImDZrgkAcg8YVQ=
Subject key identifier:   2E:64:A6:94:26:FA:EC:C0:D1:37:62:62:D4:9D:06:CB:1F:5A:FA:E2
Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31
Certificate issuer:       /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
Certificate serial:       019A5299E78FC430C9AFAFC2448EE6BE1FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
Manifest number:          09C3
Signing time:             Wed 05 Nov 2025 06:00:09 +0000
Manifest this update:     Wed 05 Nov 2025 06:00:09 +0000
Manifest next update:     Thu 06 Nov 2025 06:00:09 +0000
Files and hashes:         1: 1RsOc1yR94fLSIN7RSYKbs-UV5E.roa (hash: JvuB+fj7uwNhBJutx6Epbo+jH2P6sNnioKWN+1JAw2E=)
                          2: YsAD0xYI7fSatmxxWy_MtAq3uA0.roa (hash: +cmsgKhF+fbBw56PZtc3rlBguWm90CrfqJ6VEbk7b+k=)
                          3: ZUR3BAP_7QG_ADM2oChuL6mE8nQ.roa (hash: QC0NJCXzeiGu8pGCymaMWOTKZLqngTi+89jFQkLRMjU=)
                          4: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: qqPlD6oq8h7gTJdTDRRFIY76auf/XAxab7OLMlPqcLM=)
                          5: vijUo-1OjT7vzMvb4RvZKsG7aPY.roa (hash: cH5H5sB4I0MW9+cJs76Nq2CGqjMRYzxzdgNA4qe2C1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:99:e7:8f:c4:30:c9:af:af:c2:44:8e:e6:be:1f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231
        Validity
            Not Before: Nov  5 06:00:09 2025 GMT
            Not After : Nov  6 06:00:09 2025 GMT
        Subject: CN=2e64a69426faecc0d1376262d49d06cb1f5afae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:ca:22:0c:10:a0:cd:9a:b7:0f:03:de:43:
                    10:dc:01:7b:a3:69:88:ef:2e:38:c5:3a:49:01:1e:
                    4b:48:45:74:74:f6:69:f0:cc:92:88:8b:70:b6:9b:
                    53:2c:72:84:8d:66:24:50:f8:86:bd:8a:97:92:29:
                    d8:e6:aa:81:96:7b:c1:e6:0f:c8:77:c5:19:d8:a0:
                    fd:03:86:e9:86:34:c2:90:93:17:65:82:7d:8e:01:
                    16:06:93:dc:3b:ac:ad:fd:a7:71:87:0c:8b:e3:56:
                    06:10:b2:9c:ca:ac:c7:54:80:7d:9c:4b:90:dc:c4:
                    e6:90:72:1a:16:11:5f:6c:e3:1d:e5:81:7b:6c:a2:
                    3d:6a:4a:97:17:e2:e6:dc:9e:d3:50:36:c3:52:96:
                    04:46:b3:fa:ad:5b:80:89:84:9d:ab:d7:eb:2d:7c:
                    6d:d9:f0:39:89:53:f3:54:37:9b:03:08:85:a4:d2:
                    f4:12:04:95:b2:88:4f:4c:ce:23:3e:7d:77:4c:84:
                    08:a0:4b:b1:ad:42:84:c3:d7:6e:08:e1:2d:f6:c3:
                    7c:b1:35:7d:90:43:7b:fa:9d:22:b5:1d:25:f6:7b:
                    78:6f:4e:4d:a8:b8:63:a4:15:f2:10:b1:30:43:d0:
                    6b:06:fe:d8:54:fa:26:06:1a:af:9c:d8:8e:39:81:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:64:A6:94:26:FA:EC:C0:D1:37:62:62:D4:9D:06:CB:1F:5A:FA:E2
            X509v3 Authority Key Identifier:
                keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b7:7b:a7:4e:dd:f9:73:fb:d9:61:6e:d1:e9:99:27:3a:5e:
         2a:f0:9c:df:23:b1:d7:0d:71:bb:f3:a7:9b:2b:f6:e1:4d:fd:
         3c:71:01:9b:b7:95:73:58:83:41:95:c8:2e:b8:fa:e0:91:0a:
         5d:87:27:6b:a2:f8:fe:06:45:65:97:b3:f7:8c:9e:4e:70:64:
         8f:0a:e8:73:76:22:77:7f:c3:60:1f:7d:72:b7:bc:a0:fe:a0:
         ee:7b:a4:83:e8:0f:c1:bf:e3:f7:2c:e5:43:2b:72:c3:92:cc:
         26:4e:12:13:93:21:a3:e7:8b:d6:77:6d:c8:6b:52:ad:45:a6:
         9e:6f:0b:55:ce:b0:cc:e4:ad:8e:64:96:be:76:84:59:c3:fa:
         3b:3c:a8:34:2e:1b:44:d2:20:e8:50:dd:69:bd:a4:11:02:23:
         02:3e:75:13:96:f5:3c:8b:9f:10:b4:16:87:24:07:02:07:ba:
         7d:ff:e6:36:4d:4a:a7:36:61:cc:bd:68:a5:15:41:8f:f2:3d:
         81:e5:09:11:0a:d5:c7:92:48:79:50:5c:c5:59:22:7d:20:23:
         8f:c9:e3:1b:74:93:d5:bc:53:e3:36:01:5a:33:66:19:8d:65:
         22:e4:02:77:ab:c4:ae:7e:06:e2:a4:64:1e:a6:0c:0e:bb:d1:
         9d:a6:26:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:32:16 2025 by rpki-client