Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
File:                     eU9VHpehMlQuOwVukF3o89uiTJw.mft (raw, json)
Hash identifier:          1p3xZjHJw/6yBFf5MT8B1Ep2MuJOFJAKotQdfyLlzjo=
Subject key identifier:   31:2D:4C:00:2F:5B:3F:4E:DC:28:82:07:53:D7:FC:CE:EA:61:1A:82
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Certificate issuer:       /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial:       019A53E3AA001B41FCBBD61AB641BC43C3C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
Manifest number:          1710
Signing time:             Wed 05 Nov 2025 12:00:20 +0000
Manifest this update:     Wed 05 Nov 2025 12:00:20 +0000
Manifest next update:     Thu 06 Nov 2025 12:00:20 +0000
Files and hashes:         1: UrEAfPM3ogM6wM7GXnQkYHAZCco.roa (hash: fCwnlgtSJ3KON1AeMwzLRLTyiBxs5QtE3rqvCIKKpp0=)
                          2: eU9VHpehMlQuOwVukF3o89uiTJw.crl (hash: 7mDW1Rloujs8CeudePo0Y4noO1Y3/DIABFsFOHjZDhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:e3:aa:00:1b:41:fc:bb:d6:1a:b6:41:bc:43:c3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
        Validity
            Not Before: Nov  5 12:00:20 2025 GMT
            Not After : Nov  6 12:00:20 2025 GMT
        Subject: CN=312d4c002f5b3f4edc28820753d7fcceea611a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:21:0e:0a:18:5a:0d:c3:46:c5:d8:8e:40:
                    0b:92:44:21:8a:94:78:14:cc:08:15:f2:72:10:bf:
                    d0:42:3b:ba:c8:b0:70:36:d8:5b:b4:93:07:07:41:
                    5b:35:8a:4f:63:0b:bd:39:d7:f8:7c:b4:9e:ad:3a:
                    d6:c4:6b:71:05:17:5c:d7:4b:d0:21:77:60:0a:31:
                    61:fe:c4:cb:b1:a4:27:8c:d8:f9:28:46:07:89:36:
                    3c:60:c2:84:6c:de:a6:07:6a:2b:65:c1:03:ec:8e:
                    2f:65:bd:ea:33:59:a2:c2:c2:ea:8e:75:5b:ad:82:
                    56:c4:85:df:a7:a1:08:95:6e:bb:5b:49:5e:f3:4d:
                    75:77:d4:b7:ba:19:57:2e:02:42:63:a0:f9:f9:bf:
                    e1:a0:6b:1d:30:4b:7d:1c:00:9e:e8:d2:2f:1a:79:
                    ea:8e:bb:0b:76:fe:18:5e:63:dc:a1:7b:b4:a3:9d:
                    09:b9:3f:81:55:40:27:32:33:48:b4:68:8b:3d:18:
                    0e:23:b2:21:ba:05:37:61:22:09:b0:ba:3c:5d:6d:
                    b7:3d:6a:c9:4d:6a:25:ac:51:41:26:75:4c:68:c3:
                    38:1a:9c:d0:b1:2f:46:cc:3d:b6:9d:60:37:97:64:
                    36:ef:18:5a:a4:d3:f0:aa:5b:22:ba:49:14:dc:14:
                    11:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:4C:00:2F:5B:3F:4E:DC:28:82:07:53:D7:FC:CE:EA:61:1A:82
            X509v3 Authority Key Identifier:
                keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:08:6d:87:2a:5d:b5:3b:ce:db:6b:dd:98:f6:94:d8:73:57:
         18:61:73:3d:9e:5d:e0:ad:c5:61:db:76:ab:4e:d8:26:a5:43:
         21:df:58:8f:10:ee:0c:2f:7c:d1:36:19:2b:72:a0:e0:03:83:
         2e:59:07:63:f0:b9:14:e3:79:0a:f6:bc:d5:55:c3:81:69:d5:
         38:eb:90:86:7d:a0:bb:e4:a4:86:49:84:37:34:a8:cd:2a:a5:
         b3:92:bf:63:a0:c3:8d:02:96:23:1d:5a:d6:33:aa:1c:c3:52:
         0e:c4:d0:9e:90:7b:7f:d3:c5:c0:23:d7:63:c6:ce:13:12:4b:
         37:3a:83:d2:53:52:f5:0f:bd:3d:95:96:f3:2c:10:23:6f:7e:
         d1:ad:dc:d2:d6:86:89:4b:28:86:4c:29:cc:c0:c6:49:b1:f8:
         09:f3:84:85:9c:eb:c1:d7:2f:2e:76:29:5c:6d:9d:3a:f7:62:
         0d:d8:4f:e2:f9:a4:da:a6:c9:26:91:60:2e:6d:95:0d:2c:c6:
         35:58:15:f0:77:b2:2e:1f:62:a5:fa:48:9f:15:a8:d0:16:87:
         f4:a0:6f:6a:19:28:69:c8:f7:a3:ab:5e:6d:65:c0:9d:b8:07:
         e4:6d:88:e7:96:7b:59:95:50:ac:55:c9:5e:04:cf:9a:8a:2a:
         a1:2e:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:14 2025 by rpki-client