Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File:                     EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier:          +SxFSHjdqVrZulvDj51RCcmh+XlXRgF7U4NcYGkZ2Kg=
Subject key identifier:   67:32:F2:AB:3B:A0:57:7F:8C:F4:E4:87:92:1D:D5:97:31:6D:BF:E2
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer:       /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial:       019A4E18C3C7E209AB65A601CE889AFEDC79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number:          09B4
Signing time:             Tue 04 Nov 2025 09:00:37 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:37 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:37 +0000
Files and hashes:         1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: zOTaqICQRwVvHN/uz8+qISUhfwOMukOjzrxTbqKDaN8=)
                          2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:c3:c7:e2:09:ab:65:a6:01:ce:88:9a:fe:dc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
        Validity
            Not Before: Nov  4 09:00:37 2025 GMT
            Not After : Nov  5 09:00:37 2025 GMT
        Subject: CN=6732f2ab3ba0577f8cf4e487921dd597316dbfe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:f2:6e:3b:9f:d3:2e:14:01:e7:6f:65:d6:
                    d4:bb:1b:a6:c7:8c:37:cc:36:40:b1:99:41:7a:1d:
                    93:7d:22:8e:fc:89:b3:58:64:b3:72:46:f4:17:d1:
                    09:e7:4d:07:56:38:39:79:8f:09:50:c0:89:f8:54:
                    3f:29:11:95:cc:3b:d4:25:d3:3e:e4:88:fe:10:c8:
                    97:ea:80:5c:0e:27:a0:38:e4:85:96:9c:ce:86:8f:
                    f8:e0:35:2f:04:fa:42:e6:e8:fa:4c:c4:ad:4b:9c:
                    f0:86:b2:23:5e:b2:b2:4e:d2:47:ba:2d:e4:99:b1:
                    70:f0:09:6c:69:de:ee:ea:69:eb:e4:42:0f:ad:e0:
                    ed:d2:28:ac:00:56:0d:3e:16:05:c8:6a:b6:12:fb:
                    80:5e:4d:3d:27:82:5d:e6:88:c2:00:8e:a2:92:17:
                    ef:46:5a:49:71:84:be:7a:ab:16:8d:b1:8a:a8:62:
                    30:e3:7c:c1:51:58:39:21:7f:69:ac:67:64:37:fa:
                    a7:c2:a1:ac:e1:b5:a4:84:e2:75:ce:01:cc:0b:db:
                    a2:73:b8:32:a7:e4:5a:40:95:e9:29:0b:bc:8a:16:
                    e7:08:db:06:a1:de:bf:82:5b:0c:5b:e5:0f:c1:dd:
                    31:ca:94:aa:61:81:43:41:9d:1a:68:ed:a4:b8:ef:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:32:F2:AB:3B:A0:57:7F:8C:F4:E4:87:92:1D:D5:97:31:6D:BF:E2
            X509v3 Authority Key Identifier:
                keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b4:06:fe:b7:4c:9c:af:6a:72:80:a4:d0:de:f5:29:27:55:
         8b:6d:21:ef:f6:26:7a:a4:0a:83:c6:85:34:2b:f7:5a:84:b8:
         90:53:5a:6a:e3:98:ac:1d:6e:72:2a:f5:11:a0:c6:4a:3c:28:
         41:8a:b0:ab:d4:e7:63:e9:7c:de:76:32:34:9c:41:9e:46:c2:
         a5:4d:29:46:dd:66:ad:b1:36:eb:75:7d:7c:30:d1:c6:b8:57:
         ae:75:32:88:37:6e:65:72:8e:75:d0:30:e4:0e:fe:dd:21:50:
         8c:37:bf:99:ac:b5:91:1c:0a:d2:68:a2:39:06:e9:3c:bf:54:
         db:f3:90:ed:d8:fa:52:f3:68:f7:2c:22:6e:a0:bb:ac:ce:b4:
         7b:55:ae:1c:59:1e:cc:4e:13:c5:79:13:13:b5:d6:65:8c:55:
         24:06:b9:1c:f4:8d:6c:90:eb:bd:f4:4d:d6:05:86:cf:08:bd:
         a0:d5:75:82:0d:e2:01:79:da:13:2f:79:e4:dd:a5:34:60:85:
         54:26:03:c7:f1:78:f7:b2:25:28:4e:01:6b:08:ee:e2:9d:7d:
         c5:60:b7:72:07:be:8c:ea:94:c7:a4:7d:87:eb:0d:0a:19:3f:
         f5:71:5b:57:91:e4:95:7e:70:5f:a1:2e:f9:0e:c9:42:bd:b3:
         86:f7:c6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:48 2025 by rpki-client