Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
File:                     EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft (raw, json)
Hash identifier:          Cgtn+02NZhbg35LWLfA14zL9Rc2s0ily6Svh4fHMUIU=
Subject key identifier:   69:A5:D2:D1:D8:46:42:E6:16:D2:E0:47:9B:B4:71:3B:32:B6:50:0F
Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07
Certificate issuer:       /CN=10e5efe934cf377ddf373b366721f1339243f907
Certificate serial:       019A54F66F301332077B7B423EA97AECE5D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
Manifest number:          01BE
Signing time:             Wed 05 Nov 2025 17:00:27 +0000
Manifest this update:     Wed 05 Nov 2025 17:00:27 +0000
Manifest next update:     Thu 06 Nov 2025 17:00:27 +0000
Files and hashes:         1: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl (hash: PCk+Wsn8zoutQGCG4CTvvtN9vsmjjC79VQcr58ttoPw=)
                          2: lexK-PZGa0dRIxHrAucmPZfoZH8.roa (hash: BTYzPVVTX+QrUsB9dt95kpnERBtDlHXeueDyzr/RAhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:f6:6f:30:13:32:07:7b:7b:42:3e:a9:7a:ec:e5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907
        Validity
            Not Before: Nov  5 17:00:27 2025 GMT
            Not After : Nov  6 17:00:27 2025 GMT
        Subject: CN=69a5d2d1d84642e616d2e0479bb4713b32b6500f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:03:ca:4f:17:f3:a9:97:cc:40:ce:90:70:
                    34:5f:5a:2b:1e:6a:86:d2:37:2a:12:66:cc:a7:c0:
                    de:86:f2:f3:32:31:87:fb:26:13:05:cc:cf:c2:a7:
                    43:a3:4a:6c:ac:5b:bd:e2:8d:44:bf:bc:60:d2:42:
                    30:14:57:f2:a2:e7:d8:e6:b3:39:f2:6a:fb:ac:86:
                    20:db:5e:2d:b7:90:96:b5:96:d5:e2:8b:82:de:26:
                    01:9e:c1:cc:c5:93:04:61:9d:95:0a:8d:24:44:3a:
                    60:3a:0a:71:3a:46:25:31:6d:4b:a9:0a:49:0f:06:
                    2e:32:ba:69:f8:8c:eb:c0:28:24:fc:83:a8:da:d7:
                    ff:60:ab:55:3a:50:ff:80:ad:a3:0d:5a:08:b3:df:
                    eb:42:60:0a:5c:b6:65:b9:53:81:7d:46:15:53:9d:
                    1e:a2:08:0a:d5:25:cb:86:35:0e:84:6e:62:d7:a0:
                    6c:17:3b:ae:30:69:70:39:9c:55:7b:07:a5:77:bd:
                    35:5d:ac:5b:4b:37:fb:6d:8a:52:a1:c3:d5:a0:96:
                    a4:3f:64:6b:06:43:3b:d8:16:29:29:65:b7:86:f9:
                    90:72:3e:0a:fa:58:62:29:c2:61:05:fa:42:89:29:
                    92:c0:5b:87:40:43:1f:b3:fc:a8:72:af:73:e7:ae:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A5:D2:D1:D8:46:42:E6:16:D2:E0:47:9B:B4:71:3B:32:B6:50:0F
            X509v3 Authority Key Identifier:
                keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:58:3d:b3:1d:a2:5f:9a:a7:1b:8c:c2:38:8d:74:4f:f2:
         b5:9e:58:3f:d5:96:f2:a4:ed:ab:73:32:f8:6a:a7:f3:dc:76:
         4a:b9:df:22:c8:78:73:63:f6:04:b0:de:5e:13:48:2c:8e:58:
         b9:f6:6c:ed:f9:04:0a:70:ae:83:c4:6c:78:92:06:80:45:ba:
         14:f8:c3:d1:e5:45:70:db:35:22:18:b4:82:2b:f6:f0:f7:fc:
         47:b0:e8:d5:8c:1f:ab:19:b4:47:c8:e3:c8:f4:e4:52:17:f8:
         0f:5f:f8:43:bf:6c:bf:12:16:79:bd:74:9b:c7:65:89:f0:2f:
         c7:03:a2:1f:b0:98:72:40:bf:d8:07:6b:34:31:7d:1d:99:28:
         c0:80:04:d8:36:86:c8:aa:82:60:ca:d6:58:21:ee:81:c9:fc:
         f1:23:d8:e2:62:af:80:59:ac:a9:52:df:bb:41:b9:75:e8:e4:
         77:04:36:6a:c9:df:c0:4e:59:87:93:f2:08:9e:9c:57:3c:00:
         a2:d8:ff:b8:b1:6a:b8:16:ad:04:64:1d:83:5e:d1:1d:86:04:
         1d:a2:28:2a:01:10:54:93:65:a4:dc:cf:94:f8:75:a5:59:f7:
         08:78:75:91:75:7c:0e:f9:cd:98:20:bb:12:8c:4d:07:f6:fc:
         59:4e:67:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:51 2025 by rpki-client