Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
File:                     egm3YjoIVFfYx2tJTs2ITY_vpNE.mft (raw, json)
Hash identifier:          ku/pW7aA2/V2g8gcoUTCyDZQyJLIHTiH6ESgcNbExvU=
Subject key identifier:   AC:F6:B9:7C:85:C7:83:60:4B:3A:5B:78:F6:8E:8C:B9:EB:1C:7C:45
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Certificate issuer:       /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial:       019A5150C4C617C740545A2512C8CC790F12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
Manifest number:          62
Signing time:             Wed 05 Nov 2025 00:00:38 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:38 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:38 +0000
Files and hashes:         1: BM0t-14d93ZG0R2K9vbiuUEqvH0.roa (hash: zILQAxauVBbxhkjsH77rTPNJrcJf7t+yGNN3JFnYJQc=)
                          2: FRQ7pByc3-uT5IL1xIxyImuQ-ow.roa (hash: AUFJunnKVDTZkyRZJ9wDpcrSrFiyzDTU1XjQT8n+JqU=)
                          3: egm3YjoIVFfYx2tJTs2ITY_vpNE.crl (hash: Ri3Zd1fmrD4HiONrzZtyq4inbax22OoCSxYvc4IW6Os=)
                          4: h6j3PofcBQDmfTGah59b1zPMf8o.roa (hash: q+IYqPK8ZddReCwkNGJqqDDyQQjRAwXJSYw+Ehyh7O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:c4:c6:17:c7:40:54:5a:25:12:c8:cc:79:0f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
        Validity
            Not Before: Nov  5 00:00:38 2025 GMT
            Not After : Nov  6 00:00:38 2025 GMT
        Subject: CN=acf6b97c85c783604b3a5b78f68e8cb9eb1c7c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:64:40:12:6e:4f:f9:e5:2e:bb:44:7c:87:99:
                    cd:90:8b:31:b6:0a:e8:8d:ad:ec:8c:86:b3:24:e1:
                    8a:ac:a9:80:61:eb:7c:fc:4b:51:88:06:05:28:ff:
                    7c:6d:7f:e9:aa:d2:0f:6c:1a:1d:64:da:f6:38:34:
                    c2:8e:c9:c5:1d:35:07:e4:bf:f1:78:b6:d6:d2:1c:
                    f3:48:92:14:89:3c:32:85:30:7d:61:ff:76:35:79:
                    6d:a3:e1:ac:83:59:2b:a2:1c:34:d6:5b:79:ca:4f:
                    f5:10:47:5e:f6:03:b6:e3:b0:72:7e:9a:ed:45:92:
                    f3:78:2d:03:5e:40:3e:82:49:63:c9:68:a1:0a:ea:
                    25:26:67:9e:24:eb:57:64:b8:00:52:07:fa:b9:39:
                    ba:9b:24:70:e5:72:3f:7d:a7:3b:b9:5d:de:dd:38:
                    da:45:f6:a2:95:f7:cc:14:8a:df:06:7a:02:41:d2:
                    65:8c:7b:6f:21:54:a3:03:cf:aa:33:84:65:04:db:
                    b1:0e:eb:1d:ef:7f:1d:42:b5:ab:fe:53:77:e0:e3:
                    28:5a:07:c2:b1:09:0e:36:09:b1:c2:a8:1f:4d:df:
                    e5:19:9c:17:f8:dd:45:66:60:2c:88:23:bc:5e:c4:
                    a2:11:02:28:ee:c3:b5:fb:82:c9:7a:a5:85:b3:75:
                    a6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F6:B9:7C:85:C7:83:60:4B:3A:5B:78:F6:8E:8C:B9:EB:1C:7C:45
            X509v3 Authority Key Identifier:
                keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:57:c1:54:0b:f9:82:c9:ff:e3:46:b2:9a:b4:ee:a9:95:
         07:b2:bf:5a:c6:d1:47:dc:02:e2:1f:7a:5e:43:f6:76:7c:3c:
         b0:4b:47:88:9e:fe:7a:68:4a:8e:96:11:48:d0:61:df:a8:03:
         f0:ab:a7:d4:01:6f:04:69:ee:57:22:b6:24:08:ef:97:94:b4:
         ea:f7:75:56:c5:6f:ed:93:59:8d:6c:54:1b:f8:92:f6:73:7d:
         90:2d:28:00:cb:c5:35:cd:41:ad:74:86:21:24:f5:68:98:87:
         28:3b:65:aa:e4:03:57:ac:fa:8e:80:17:21:82:61:b9:0c:6e:
         fe:ad:f9:41:e7:d4:80:33:91:a7:40:ec:cb:0b:53:73:9d:61:
         c6:41:12:04:c5:09:8b:c8:37:bd:6d:9f:96:59:b9:de:eb:fa:
         3a:bb:18:06:a5:44:de:e0:80:f9:f8:13:76:88:41:f7:70:b6:
         f6:1d:5c:1a:05:52:2e:6a:ee:14:4a:75:c3:81:1d:8d:f2:f4:
         a0:ac:05:f5:8b:86:73:ea:b0:89:3e:1f:b3:73:df:78:41:27:
         3f:bc:90:6f:6b:68:0d:71:86:bd:9f:77:3a:11:bb:4d:01:b6:
         b4:ed:61:59:0c:4f:3d:a0:ec:e6:46:e7:3b:12:b0:15:67:6f:
         a4:8b:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:24:47 2025 by rpki-client