Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
File:                     V3EfIIg6YrwGORunslgs5ys_6Rw.mft (raw, json)
Hash identifier:          rbncpOQE1kWkioKDw0dztS6PGg37VkkxFqgglkshoVY=
Subject key identifier:   27:34:7F:E6:23:B3:88:03:F9:6C:9B:5A:50:9A:4B:03:FA:4E:FE:3C
Authority key identifier: 57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C
Certificate issuer:       /CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
Certificate serial:       019A4F99522A6364D806637640971143A499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
Manifest number:          12F4
Signing time:             Tue 04 Nov 2025 16:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:39 +0000
Files and hashes:         1: K1RXDd41ejHM6gE_h4XPr9eqXqg.roa (hash: HFPOwF7yl1DzvJdGJnqBFfDZ3/PqP2JlTX3PgCcBwh0=)
                          2: V3EfIIg6YrwGORunslgs5ys_6Rw.crl (hash: 4lCTVsB5oE+MCV/FmPcwAdbdlakqAORk9QjMWQFLQro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:52:2a:63:64:d8:06:63:76:40:97:11:43:a4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57711f20883a62bc06391ba7b2582ce72b3fe91c
        Validity
            Not Before: Nov  4 16:00:39 2025 GMT
            Not After : Nov  5 16:00:39 2025 GMT
        Subject: CN=27347fe623b38803f96c9b5a509a4b03fa4efe3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ee:b1:68:4a:88:b9:9c:45:45:1c:b0:09:d1:
                    32:e5:7c:97:6a:69:17:96:51:4f:35:da:65:70:8b:
                    6f:ce:33:45:cf:3b:3c:a5:87:73:f7:00:e7:45:2b:
                    16:e8:2a:49:a1:e6:ea:c0:cc:a4:04:68:4a:03:dc:
                    68:1c:b3:03:48:27:9e:06:ff:72:a9:d2:2c:36:ea:
                    45:59:09:14:64:e8:70:cc:64:ee:fb:a1:e9:08:29:
                    4f:ca:18:51:74:30:4d:d9:f4:9d:00:0b:18:ab:b7:
                    ac:11:88:ee:5d:97:c0:c9:90:85:67:6c:e9:4d:62:
                    1b:26:fc:11:cd:30:05:44:92:72:7c:7f:92:e6:b4:
                    e1:ed:ba:cb:d2:42:e1:d1:92:d4:e7:2c:31:1b:bc:
                    5f:e0:84:74:13:9e:3d:f3:24:f4:3b:70:76:d3:53:
                    0c:6f:f9:43:8b:aa:57:f2:24:fc:0b:7a:50:5e:ec:
                    87:df:f1:46:51:f2:d4:41:53:41:10:87:ca:f7:30:
                    b7:e1:3b:87:f2:5a:2a:0a:94:99:d6:f7:af:1b:8e:
                    89:99:77:bd:77:b5:2b:84:12:dd:62:7f:45:91:7f:
                    ed:32:c5:af:80:b8:2d:ca:10:0b:38:88:85:02:66:
                    99:9f:b1:41:9d:9d:4c:f6:8a:75:c0:bd:1a:8d:0a:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:34:7F:E6:23:B3:88:03:F9:6C:9B:5A:50:9A:4B:03:FA:4E:FE:3C
            X509v3 Authority Key Identifier:
                keyid:57:71:1F:20:88:3A:62:BC:06:39:1B:A7:B2:58:2C:E7:2B:3F:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3EfIIg6YrwGORunslgs5ys_6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d2b0aa-2636-4eec-a1e3-714d1958b77b/1/V3EfIIg6YrwGORunslgs5ys_6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:99:76:97:73:a2:51:ae:c7:53:f0:d6:69:71:a1:b6:66:65:
         55:93:e9:68:62:cd:d1:ca:db:85:e5:3f:36:37:a1:2c:f2:96:
         1e:0a:c6:52:ed:b7:56:cf:72:bc:93:be:4e:4c:6a:12:85:c3:
         46:03:a6:e2:58:8c:2b:ce:a2:63:e7:e2:1e:6d:a5:4a:ce:d6:
         bd:32:48:71:f6:69:75:0e:9c:6e:a5:d5:e6:e8:f5:0c:78:31:
         4a:59:06:52:af:3c:29:1a:d9:1f:7f:c4:6f:20:d3:8d:b0:40:
         dc:bd:45:83:9b:bd:54:88:11:b1:96:4b:bf:88:8e:33:f0:93:
         70:3d:59:8d:21:8b:e3:4c:35:cb:16:1b:1c:fc:09:cc:19:f0:
         d1:7b:14:ea:10:62:0d:00:6d:da:4d:11:04:a6:d1:d3:78:6a:
         52:d0:4c:56:14:e4:dd:2e:35:6a:38:a9:45:89:a1:2d:0c:3a:
         c4:9a:14:a4:89:96:78:74:b3:ce:62:eb:7e:60:ce:8f:b5:2b:
         3f:e6:f6:fc:a8:0a:3d:7e:14:46:e1:62:53:2a:28:ab:0d:ff:
         b5:cb:a7:71:28:7f:74:18:00:38:88:00:83:5b:d2:bf:9e:1b:
         da:aa:46:f8:6c:33:cf:f8:b5:3d:eb:b7:22:31:3a:da:40:bc:
         61:07:05:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:57 2025 by rpki-client