Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File:                     eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier:          2pz4Jk3kziZDN8th2EX62KMvvQ2dMagYUYo27RTKS3U=
Subject key identifier:   BD:43:7C:81:51:8D:1D:F1:8F:99:DE:CE:9F:B4:37:29:E3:A7:55:EE
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer:       /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial:       019A4E4FBAE8F057DB2C27ADE83ED4475F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number:          0B56
Signing time:             Tue 04 Nov 2025 10:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:39 +0000
Files and hashes:         1: 0U0iwiffVettO-vogpqMch7csq4.roa (hash: uPiED/FamX8UNur9ecAQaLp7MXQZVhIJRf73CMOjMOY=)
                          2: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: swiQpZZP46Lj+KYzZoTCnw/TlbjBTCKDJEeRjEM50AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:ba:e8:f0:57:db:2c:27:ad:e8:3e:d4:47:5f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
        Validity
            Not Before: Nov  4 10:00:39 2025 GMT
            Not After : Nov  5 10:00:39 2025 GMT
        Subject: CN=bd437c81518d1df18f99dece9fb43729e3a755ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2e:78:1e:90:40:82:f0:f8:c0:45:63:1b:eb:
                    b9:4f:a4:eb:b1:92:e0:55:96:77:84:34:b1:8c:21:
                    83:db:04:43:56:7c:36:fd:e6:fe:2e:c8:68:37:05:
                    16:2a:a5:65:20:65:ea:2e:c6:e5:c8:c5:49:8b:69:
                    16:70:24:f0:b8:9e:60:93:34:10:bc:d9:d4:4a:4d:
                    8a:7f:0a:b0:77:64:de:c0:d5:9a:15:43:31:62:12:
                    d2:9c:b1:d0:4a:ab:25:4e:7f:e8:c8:0e:43:0c:c3:
                    38:69:fb:83:2d:a7:05:06:8b:9d:d7:99:29:73:c6:
                    41:6d:c0:93:ba:7e:b3:8d:70:ff:ee:1a:9d:9c:37:
                    4b:02:77:31:b4:8b:65:32:76:20:9a:9f:4d:43:d3:
                    90:b6:7c:38:8a:dd:ce:ef:60:43:53:ef:00:39:61:
                    f0:bf:ba:9d:a9:24:48:1b:af:6c:ca:f4:33:8f:90:
                    98:67:f9:09:8e:ab:bd:9d:0e:2a:62:6d:08:53:82:
                    ae:83:b9:d3:16:80:6e:3f:64:42:ce:d1:41:4b:a3:
                    39:ac:d9:c0:69:4a:25:9e:1a:a7:9b:2b:9a:42:e6:
                    dc:5b:b4:33:54:39:9b:e2:22:23:b9:6b:00:2c:1d:
                    6a:71:6e:61:f3:a4:ec:83:ef:69:0e:ed:91:33:dc:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:7C:81:51:8D:1D:F1:8F:99:DE:CE:9F:B4:37:29:E3:A7:55:EE
            X509v3 Authority Key Identifier:
                keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:77:ff:06:dd:19:3e:13:ef:f3:b1:b4:b4:11:38:b0:79:ef:
         aa:d1:1f:7e:58:73:3f:4e:1f:4d:3f:f1:60:c0:f8:ab:c2:53:
         2a:90:36:2e:c5:ce:4c:a5:ee:f6:35:ab:fd:00:64:91:3f:0e:
         68:ab:7f:4f:16:59:4a:74:7f:7e:bd:e4:0f:0e:b6:81:44:4a:
         54:7d:57:16:84:9e:2a:b8:4b:70:8b:66:fd:56:9a:8a:0b:2d:
         7d:4f:09:ab:a8:d6:01:4c:75:ed:2a:b3:a0:d7:09:ab:4a:84:
         b5:a5:e3:1e:30:aa:c3:e2:de:c0:c7:e5:2c:93:ce:ce:36:84:
         be:21:70:4d:59:61:6c:f1:10:c4:90:fc:af:5f:bc:21:10:35:
         19:5a:f1:9f:f8:e7:d5:ce:95:e4:b4:9e:52:60:b2:bf:23:41:
         e8:25:80:22:a1:58:4c:37:fa:be:03:1c:fa:d8:4e:9c:18:14:
         72:7c:ff:65:78:c1:cf:a5:85:37:ac:08:92:95:23:17:1d:10:
         46:d3:be:fb:59:ff:28:e2:0b:37:96:fd:9e:0b:25:64:0b:01:
         71:be:07:34:54:b0:8e:45:01:74:38:52:4b:a6:80:48:74:bb:
         7c:9d:72:b6:f2:83:0a:1d:06:b5:54:c2:52:e7:cc:b1:e1:55:
         ec:11:77:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:18 2025 by rpki-client