Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File:                     EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier:          vNNAk0sTudyhRBV9Xs7ruS2q7LRTCSmgSZrJMLOEtQg=
Subject key identifier:   80:C2:EF:5A:02:D0:50:B6:F7:93:8C:6E:6A:7E:C1:44:E6:16:2F:0D
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer:       /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial:       019A5299EFF250D8F4C593B805E5715E1129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number:          022B
Signing time:             Wed 05 Nov 2025 06:00:11 +0000
Manifest this update:     Wed 05 Nov 2025 06:00:11 +0000
Manifest next update:     Thu 06 Nov 2025 06:00:11 +0000
Files and hashes:         1: 8Qkj-OL1DBWAUGxyf__SID7DvY0.roa (hash: FohvUxuind4X94r0B623U5wmhvbScHzDNUfxcV28qbg=)
                          2: 8XAK_n9Ijdz-1TJV-cnMoV4PDJI.roa (hash: hpzRZ9fG9vy0NkMEhpRLlojbHPEYeYp5I8KcchuS0u0=)
                          3: 9PgT8am9GX2lNTUWeiRs0LXntY0.roa (hash: X5SDKNQRKe6G52wQx4wpF/A5KQNfS5fj8rskXwcraIA=)
                          4: D8akI8P5Xi8Ifp8LsQyslMH9ydQ.roa (hash: AKGzJiWAK4O0wOeiBq1pBQs9Et3quYVUdawmatMGbA4=)
                          5: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: ZE4v9DzlMRdkmIImpnZCCyNc1NO7qZw+/9ArOxdH3RQ=)
                          6: MQJ9Tms8NtZHBjFKGd8tRATLgzU.roa (hash: JQ9FShj97dGuiiKP4b3nhes/Pu/ifqQ1fWpnjpSUqN0=)
                          7: Ru8ZRa3us3EXd4Kuc_gCxyMaY_w.roa (hash: 8tvJstphtGeZ6QzHvnWs5W3Xee9kE5jmY/6KMv2k9ic=)
                          8: ScAR3uPyATYgU_nmPSEp-uOF-dw.roa (hash: /Djsq98hUPSTRPRTBh6WF392L0FrLeU6LETIMEXpAeg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:99:ef:f2:50:d8:f4:c5:93:b8:05:e5:71:5e:11:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
        Validity
            Not Before: Nov  5 06:00:11 2025 GMT
            Not After : Nov  6 06:00:11 2025 GMT
        Subject: CN=80c2ef5a02d050b6f7938c6e6a7ec144e6162f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d8:9e:d4:cf:e7:3f:7a:4e:0f:b3:19:a0:12:
                    27:4c:cb:12:1a:8a:7d:d3:8f:e7:e2:33:9d:8e:05:
                    48:2f:80:e3:ce:c7:57:c7:4f:ca:46:13:c6:7b:33:
                    30:01:78:cc:d1:94:02:1c:80:bb:1e:3e:57:ec:bf:
                    2a:8b:18:24:fd:8c:93:dc:94:dd:4a:3a:96:9f:fb:
                    ad:d8:83:ce:63:ee:85:4e:f8:73:d2:97:63:e1:b2:
                    cb:5f:3a:a7:49:bb:55:39:1c:9b:b5:bf:ff:94:1e:
                    32:ff:9a:41:48:07:c7:3c:82:83:ed:81:ca:2a:3d:
                    4f:d4:fe:90:2e:bd:66:5e:f0:95:e7:f9:5e:db:db:
                    81:6a:43:6c:20:80:91:94:00:e3:a8:25:3b:b6:94:
                    32:0c:f4:8c:ed:33:12:3c:6f:a7:45:7a:a5:e1:f4:
                    30:9a:92:51:69:95:96:e0:f4:d1:f2:79:f1:c4:95:
                    34:07:bd:b5:99:3b:48:45:9c:0b:e2:99:06:e0:0a:
                    fc:de:60:37:9a:c4:5f:e1:dd:bb:9f:03:a3:77:5a:
                    5d:b0:28:cc:9c:9a:43:ec:ad:89:39:04:a9:f2:33:
                    81:7f:33:a9:e5:3a:45:33:18:90:af:32:94:56:d2:
                    e9:89:87:30:bd:d2:f5:65:8f:dc:69:e6:08:0f:13:
                    2b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C2:EF:5A:02:D0:50:B6:F7:93:8C:6E:6A:7E:C1:44:E6:16:2F:0D
            X509v3 Authority Key Identifier:
                keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1d:0b:f5:c1:ee:53:6c:e7:51:41:cc:ed:5e:b5:dd:68:de:
         1a:c2:21:18:eb:a7:48:7d:29:31:4b:7a:ab:d2:77:1e:4c:6a:
         71:f0:cf:8f:59:1c:c9:19:f6:fb:91:e6:2f:a5:47:16:a3:01:
         c7:6f:7e:c2:20:06:37:a2:d9:99:d6:6b:d0:18:71:f9:fb:cd:
         25:dd:cd:44:86:50:19:ef:13:40:8a:0d:87:e9:ca:cc:c9:ed:
         47:e4:5c:88:89:3f:07:08:67:82:76:43:78:ae:f7:d4:4f:a1:
         d7:d7:3d:88:0c:5f:70:59:24:40:a1:13:e3:f5:0d:b0:95:ee:
         c5:f1:08:25:34:23:28:b0:74:ae:ee:ff:41:1e:6e:53:71:c1:
         39:ab:3a:7b:3f:cc:83:6f:25:9c:78:c0:a2:f4:86:2d:be:8d:
         54:95:3b:6e:3e:da:04:28:75:b7:05:11:c6:cb:9e:37:f5:47:
         4b:e3:e7:84:e5:bc:aa:e0:cf:06:9f:43:e5:9f:47:f7:56:4f:
         ca:99:1d:99:92:c3:d1:86:09:9a:14:64:af:4f:43:9d:24:56:
         25:4c:5c:4c:ce:22:dd:50:1f:45:a4:2d:dd:fb:21:06:cc:75:
         87:b8:53:13:81:2a:26:01:88:95:9f:60:19:d9:fc:d7:55:a5:
         04:3b:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:14 2025 by rpki-client