Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
File:                     eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft (raw, json)
Hash identifier:          UjozYJ0AzQ/yTqJkGG4kVkwLxhGR0cxWac5KTtV+5yA=
Subject key identifier:   B7:3D:CD:EA:A8:62:88:EF:B9:F0:F8:B8:75:D9:BB:7A:32:1C:7D:BD
Authority key identifier: 78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F
Certificate issuer:       /CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
Certificate serial:       019A4F992C8AABDF720CC9D24D7BDD014698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
Manifest number:          06E9
Signing time:             Tue 04 Nov 2025 16:00:29 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:29 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:29 +0000
Files and hashes:         1: eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl (hash: /zhCTJL8HUJFI2vLIGfC3LmY3d8BE2vMgGzFII3Bc1s=)
                          2: rDcpoyvrVBT_cWdGmT4H-hyPLg0.roa (hash: ZIVMbBVJwlrHJ75Ki0ODTTpJ9+ylEgTfPq67Cig5C+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:2c:8a:ab:df:72:0c:c9:d2:4d:7b:dd:01:46:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0b19d50d61a7e333f3d300f1149cefde7b64f
        Validity
            Not Before: Nov  4 16:00:29 2025 GMT
            Not After : Nov  5 16:00:29 2025 GMT
        Subject: CN=b73dcdeaa86288efb9f0f8b875d9bb7a321c7dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:92:63:f6:22:89:b3:0d:48:02:ff:54:c2:
                    b4:0d:81:d0:d2:e6:0f:15:8d:32:b1:8c:2a:fa:6b:
                    93:04:27:4b:95:a2:c7:d9:5e:2b:00:49:d1:2a:23:
                    5c:96:06:cd:b7:42:0c:78:d9:46:79:f1:e4:d9:76:
                    ee:8e:6a:40:55:03:8f:fe:59:81:a7:87:f8:a5:ec:
                    57:d7:77:1c:19:2d:c1:34:bd:cd:72:dc:c2:0c:f0:
                    93:ed:a7:5b:99:e6:ae:d1:57:64:24:04:dd:08:6a:
                    4d:bc:3e:e6:29:8b:45:9f:40:0c:65:b3:9a:a2:fc:
                    ef:7e:a6:ab:82:d7:13:dc:0c:48:86:56:66:a4:ed:
                    de:4f:3a:59:d9:a3:6a:51:e0:81:98:2a:d0:be:23:
                    9b:6e:a5:73:98:71:c5:d5:d3:86:79:26:6d:ad:35:
                    eb:20:4d:36:ec:20:34:24:a4:d4:d1:92:37:3f:e3:
                    d2:60:f3:87:0e:c7:35:7a:84:89:50:db:80:cf:49:
                    34:f9:e2:03:4b:e6:a1:b5:70:ae:44:0a:1a:79:18:
                    91:31:a9:28:9c:43:4e:1e:a2:55:2b:40:42:92:cf:
                    0e:ba:4c:dd:7b:d4:22:6f:d6:c3:4a:3b:9d:21:c3:
                    18:ca:d5:ed:2c:cc:8e:33:bb:b4:9d:a3:b7:4e:e9:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:CD:EA:A8:62:88:EF:B9:F0:F8:B8:75:D9:BB:7A:32:1C:7D:BD
            X509v3 Authority Key Identifier:
                keyid:78:B0:B1:9D:50:D6:1A:7E:33:3F:3D:30:0F:11:49:CE:FD:E7:B6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLCxnVDWGn4zPz0wDxFJzv3ntk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e8cfb0-9568-4157-b802-f0ed9a2ab654/1/eLCxnVDWGn4zPz0wDxFJzv3ntk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:69:4e:d6:b9:c5:53:38:4c:5a:03:0c:80:bb:73:7f:08:01:
         de:eb:54:af:f6:21:f8:b4:9d:af:02:f7:74:6e:9f:ad:95:08:
         b8:55:f8:d5:b2:14:09:b3:2c:ae:4f:70:61:eb:b5:e9:a4:a7:
         c5:79:c1:1c:f4:f7:1f:2e:9f:69:7d:b0:03:d1:c3:d8:da:5d:
         bd:d6:30:58:3a:68:d8:d9:a7:8f:e9:29:c9:e0:92:49:ab:7c:
         af:1c:91:e2:5d:1d:c5:dc:41:d7:77:ea:62:43:63:43:37:cf:
         61:16:1e:05:8a:ef:6a:7a:2a:c9:1d:de:82:e4:83:ea:91:27:
         22:01:29:98:9c:f1:f3:f8:bf:15:3f:36:69:4d:e3:f2:70:76:
         fa:ab:b0:22:0f:5a:ec:c1:21:d5:34:05:3d:ac:a8:26:49:b4:
         7a:ee:3e:f2:3e:4b:9f:73:ff:91:34:ff:d8:be:3b:4f:16:f4:
         fc:50:87:a0:fd:c9:11:d8:3b:d9:8d:f9:fa:07:9d:3b:ba:d4:
         de:3b:e5:f2:97:72:d8:28:f4:6d:92:2b:09:16:95:5b:14:52:
         0d:71:70:0e:93:c7:15:8a:ae:18:72:d0:59:f5:ee:02:ca:6f:
         e6:24:56:d1:09:0f:6a:e0:3b:bd:b1:4a:ed:15:8b:c2:b1:d3:
         8d:55:c0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmSyKq99yDMnSTXvdAUaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YjBiMTlkNTBkNjFhN2UzMzNmM2QzMDBmMTE0OWNlZmRl
N2I2NGYwHhcNMjUxMTA0MTYwMDI5WhcNMjUxMTA1MTYwMDI5WjAzMTEwLwYDVQQD
EyhiNzNkY2RlYWE4NjI4OGVmYjlmMGY4Yjg3NWQ5YmI3YTMyMWM3ZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2KSY/YiibMNSAL/VMK0DYHQ0uYP
FY0ysYwq+muTBCdLlaLH2V4rAEnRKiNclgbNt0IMeNlGefHk2XbujmpAVQOP/lmB
p4f4pexX13ccGS3BNL3NctzCDPCT7adbmeau0VdkJATdCGpNvD7mKYtFn0AMZbOa
ovzvfqargtcT3AxIhlZmpO3eTzpZ2aNqUeCBmCrQviObbqVzmHHF1dOGeSZtrTXr
IE027CA0JKTU0ZI3P+PSYPOHDsc1eoSJUNuAz0k0+eIDS+ahtXCuRAoaeRiRMako
nENOHqJVK0BCks8Oukzde9Qib9bDSjudIcMYytXtLMyOM7u0naO3TunkQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc9zeqoYojvufD4uHXZu3oyHH29MB8GA1UdIwQY
MBaAFHiwsZ1Q1hp+Mz89MA8RSc7957ZPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDIt
ZjBlZDlhMmFiNjU0LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lOGNmYjAtOTU2OC00MTU3LWI4MDItZjBlZDlhMmFiNjU0
LzEvZUxDeG5WRFdHbjR6UHowd0R4Rkp6djNudGs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWlO1rnF
UzhMWgMMgLtzfwgB3utUr/Yh+LSdrwL3dG6frZUIuFX41bIUCbMsrk9wYeu16aSn
xXnBHPT3Hy6faX2wA9HD2NpdvdYwWDpo2Nmnj+kpyeCSSat8rxyR4l0dxdxB13fq
YkNjQzfPYRYeBYrvanoqyR3eguSD6pEnIgEpmJzx8/i/FT82aU3j8nB2+quwIg9a
7MEh1TQFPayoJkm0eu4+8j5Ln3P/kTT/2L47Txb0/FCHoP3JEdg72Y35+gedO7rU
3jvl8pdy2Cj0bZIrCRaVWxRSDXFwDpPHFYquGHLQWfXuAspv5iRW0QkPauA7vbFK
7RWLwrHTjVXAUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:42 2025 by rpki-client