Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
File:                     meoF_mActoAa-DeT4GP3njlA8DA.mft (raw, json)
Hash identifier:          W0bUCU0gkAYcjCW+MmX0ehGaqgr69ibQamvbbHwJnSw=
Subject key identifier:   F8:40:58:98:DD:68:1B:ED:43:6A:7C:82:79:E2:7D:16:7B:B1:A2:84
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Certificate issuer:       /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial:       019A4DAA8E307D0CE6EEC1D82200913B7BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
Manifest number:          050E
Signing time:             Tue 04 Nov 2025 07:00:14 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:14 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:14 +0000
Files and hashes:         1: meoF_mActoAa-DeT4GP3njlA8DA.crl (hash: TIGvRkjNyF9DNwnqBRj8/apZh4gB6RSw/nAqlo2zlfc=)
                          2: qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa (hash: 8gjFPbJW7dVwtI9fHswSjjysn5cF6HSMFKylRSUUDrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:8e:30:7d:0c:e6:ee:c1:d8:22:00:91:3b:7b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
        Validity
            Not Before: Nov  4 07:00:14 2025 GMT
            Not After : Nov  5 07:00:14 2025 GMT
        Subject: CN=f8405898dd681bed436a7c8279e27d167bb1a284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1f:a5:7d:4f:c9:be:6c:5d:af:a8:09:2f:09:
                    d7:1c:bb:67:5a:dc:2f:d4:dc:29:b9:7e:a4:a6:6e:
                    67:fb:ee:d9:86:96:68:f3:1e:29:69:8e:06:70:bb:
                    7d:51:3f:34:11:08:e4:f9:25:ea:df:ba:4e:8d:9d:
                    5e:c1:61:e5:94:d5:5c:bd:6e:f3:9f:3b:71:63:42:
                    9a:77:fd:87:2f:01:a2:17:b7:ee:af:0a:4f:07:a0:
                    70:45:bb:a3:97:78:2a:6c:c1:98:58:09:c2:9d:3a:
                    b1:ad:71:6f:81:0c:2e:04:9d:02:94:01:8e:ac:d3:
                    78:f8:25:08:e5:e4:8c:27:59:3e:3a:dc:68:6b:00:
                    cc:81:15:b0:10:cc:47:62:56:82:63:87:58:46:5e:
                    b3:24:10:c9:fb:d5:1d:38:2a:a2:2b:cd:31:96:ba:
                    b2:e7:cc:9e:d5:26:43:d3:4d:16:33:51:a0:50:9c:
                    e8:f1:3b:27:e9:03:35:ec:0f:de:4a:be:66:b4:0d:
                    d9:99:50:f0:09:41:8f:c9:d4:62:25:5f:4f:22:c0:
                    10:b8:e1:4e:1f:c4:4e:45:eb:c1:63:ac:d0:d6:6c:
                    4c:c4:3e:9d:c6:22:18:c2:2b:6b:86:64:9d:26:d4:
                    8f:37:a4:80:bd:e9:0a:23:16:b0:0e:0f:92:f5:3e:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:40:58:98:DD:68:1B:ED:43:6A:7C:82:79:E2:7D:16:7B:B1:A2:84
            X509v3 Authority Key Identifier:
                keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ce:d5:e0:19:6f:58:54:4d:d5:ba:ef:d5:67:a5:59:10:97:
         ea:ef:d7:bb:fb:76:48:21:a4:5c:d0:bb:ef:89:5d:01:b4:f9:
         5d:08:77:e3:3c:c9:46:00:a6:ec:53:e0:c2:49:02:2e:00:64:
         29:f7:e4:7d:d7:ab:34:9c:cb:0c:65:cd:f5:c1:2e:67:0a:78:
         a2:66:26:14:24:6a:c5:c4:09:d1:cd:33:ac:3e:f5:8f:ed:a0:
         71:11:87:a8:0a:87:99:ed:3b:23:d4:72:5d:be:c8:c8:06:b9:
         22:01:61:de:b9:36:47:f2:2f:6a:ab:f9:b4:cc:fa:41:f7:ab:
         19:49:0d:f5:18:cb:8d:9e:08:3e:3f:a3:c9:3a:6f:58:e2:5e:
         12:5a:e1:53:71:3d:17:83:92:42:d9:54:e7:09:dc:82:a8:99:
         48:ef:e9:56:72:a3:f6:61:7c:87:ca:ae:72:45:a9:77:7b:fc:
         ef:af:ef:b4:5e:8b:d1:85:94:66:d2:c2:5a:e7:1c:6f:d1:9d:
         c6:38:35:d9:8a:34:b1:47:72:79:29:60:cb:59:63:94:d2:5c:
         39:f2:30:c7:6f:a4:76:69:d0:ed:57:89:b1:84:74:79:7c:9c:
         89:c3:14:c2:72:f9:2d:60:a9:4f:7d:d3:ed:2e:d8:2a:00:d4:
         8d:5e:e1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:20 2025 by rpki-client