Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          zC6+GCZlzxaaMqK3uKEIOwtBO3VuDEjxs/WGhlcG2TM=
Subject key identifier:   F0:42:F8:03:FC:B9:C9:2C:8D:52:54:B7:10:C0:E2:C6:FB:C6:E7:92
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       019A4FCFEB1EA3EB00BB79376B6E8F61C988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          06C6
Signing time:             Tue 04 Nov 2025 17:00:17 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:17 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:17 +0000
Files and hashes:         1: Ei-k7RiW07sWpfPP67i23htmomc.roa (hash: NiFmAUaoToM3PE1q94mcr4KCSU+oRmSZyOhAcNpUk0I=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: HV2Y+t6TwUg0NVXR8aujFfPFQhe5Rbj49RYN6PGn3U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:cf:eb:1e:a3:eb:00:bb:79:37:6b:6e:8f:61:c9:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Nov  4 17:00:17 2025 GMT
            Not After : Nov  5 17:00:17 2025 GMT
        Subject: CN=f042f803fcb9c92c8d5254b710c0e2c6fbc6e792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2c:86:4d:2e:2c:e5:e7:86:7d:61:58:bf:3d:
                    2f:6d:39:32:ae:7f:53:94:7c:87:f8:07:d5:ce:dd:
                    f7:7d:23:f9:87:26:0b:0b:ca:05:90:f2:66:fb:f1:
                    51:7c:e7:88:0a:b7:a3:10:9f:86:0d:8c:86:db:1c:
                    66:3c:26:fb:2b:3b:92:71:1a:5d:f9:bd:7e:55:ed:
                    52:2d:27:fc:5a:3b:42:16:a0:d1:90:7c:fc:a4:0e:
                    19:e1:bd:b9:68:1a:83:4e:93:50:22:b4:f7:ed:4d:
                    ce:0d:ea:db:46:6d:af:d3:72:a1:9e:77:a6:d8:4b:
                    8f:64:52:0b:a8:b3:00:63:cf:62:84:d4:b4:7e:2e:
                    bf:47:be:26:89:c1:eb:25:ce:94:65:c5:7c:fb:b1:
                    5c:5f:08:35:d0:c3:87:27:b2:79:69:21:62:47:b7:
                    d9:82:9a:86:fc:26:67:43:72:2d:99:ff:ee:57:ba:
                    87:7e:3c:59:d2:fe:fd:f4:bf:19:43:89:9e:1a:81:
                    2a:fe:39:b9:c7:c4:be:b2:e2:5f:e5:1b:8a:d9:df:
                    82:78:6c:a5:b2:17:ef:40:6b:32:09:97:d5:b9:a2:
                    40:dd:eb:1b:d9:aa:e3:2b:9a:e4:5e:ad:ed:7e:18:
                    74:02:1e:98:56:86:a7:cf:47:f0:10:97:02:bf:54:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:42:F8:03:FC:B9:C9:2C:8D:52:54:B7:10:C0:E2:C6:FB:C6:E7:92
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:37:cf:c5:c7:db:ea:fb:cb:f7:0d:b2:0b:a0:82:52:51:a8:
         61:ec:cb:aa:d5:49:b3:4e:c5:7b:63:7b:d2:0d:46:43:9f:19:
         ae:1a:8b:6a:35:40:61:e5:0e:bf:01:15:1a:f5:01:d5:25:26:
         60:47:b4:3d:9b:ec:ad:11:4e:c7:ae:f4:a0:d8:e8:a5:cd:53:
         f9:d5:9e:8c:56:94:ba:24:cf:63:d2:4f:0c:da:0b:fa:26:71:
         c2:b6:fa:3f:4e:3b:5e:86:44:6f:f0:92:f8:7e:dd:a9:26:f1:
         88:ee:d6:b2:41:2c:56:4b:97:23:98:0d:ed:f3:00:62:8c:51:
         e3:29:2f:13:5c:70:35:42:be:ed:4f:42:f7:d3:5e:63:8d:3a:
         5a:c8:8c:ef:f6:33:c9:b1:71:22:ae:58:fb:92:76:d4:37:eb:
         4a:b4:c1:94:da:44:46:c3:55:f3:94:8a:9d:3f:20:e5:f8:b6:
         17:e7:0d:51:a9:7f:6e:62:4b:0a:13:64:11:62:3a:c2:09:2a:
         78:43:ff:3c:85:f3:58:1f:6c:7a:8c:4a:6b:6a:c0:c8:0d:2c:
         f7:71:dd:41:fc:d1:be:d8:42:fa:d0:c1:56:fa:6f:e6:51:fd:
         32:3a:a1:9a:33:e9:bf:e0:0d:ec:19:d1:de:dd:51:5b:08:e9:
         87:2c:61:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:34:49 2025 by rpki-client