Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
File:                     ec1L08m_4g3M_isZ3iMJXKJHSDU.mft (raw, json)
Hash identifier:          e0uxNbCT9EJdVHIwvmwftQMukELUEVX8VkzpSrvC9EY=
Subject key identifier:   B3:81:C6:05:2A:6B:FB:37:A1:47:EE:2B:88:72:2D:11:25:A3:F5:64
Authority key identifier: 79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35
Certificate issuer:       /CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
Certificate serial:       019A571C31EFFBE7C4ACDA3605968FE9B430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
Manifest number:          0DF3
Signing time:             Thu 06 Nov 2025 03:00:56 +0000
Manifest this update:     Thu 06 Nov 2025 03:00:56 +0000
Manifest next update:     Fri 07 Nov 2025 03:00:56 +0000
Files and hashes:         1: RI4n8PF4rBIO32JAZiAFIMrum4w.roa (hash: 5SmITQJiZpZC1yYBE1LcmqDZ6YGT1Ir0nVy19fwLnlQ=)
                          2: ec1L08m_4g3M_isZ3iMJXKJHSDU.crl (hash: roeQYbVc7aNDE9P7Kc37HX6PKx/FgiCXTm9VCzerCCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Nov 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:57:1c:31:ef:fb:e7:c4:ac:da:36:05:96:8f:e9:b4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd4bd3c9bfe20dccfe2b19de23095ca2474835
        Validity
            Not Before: Nov  6 03:00:56 2025 GMT
            Not After : Nov  7 03:00:56 2025 GMT
        Subject: CN=b381c6052a6bfb37a147ee2b88722d1125a3f564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8b:e5:76:97:43:a6:13:0f:19:2f:8c:9e:7a:
                    1a:4d:dc:dd:78:bb:7f:42:82:1e:90:7a:33:72:91:
                    87:02:98:5f:72:13:ce:a3:f3:a0:09:48:0b:f5:ce:
                    12:81:1b:a8:2c:59:b2:36:41:1a:11:99:1b:a5:c3:
                    95:81:13:e9:0a:78:8a:81:52:33:78:57:22:9d:44:
                    be:6b:b1:7c:2b:93:f1:c0:cd:b2:6b:df:5e:ba:80:
                    10:a4:9f:08:12:8c:25:5d:f4:94:11:a1:d5:90:50:
                    dd:ac:f0:dd:69:8c:5e:ca:02:67:91:ec:77:1b:00:
                    c1:60:02:84:fb:39:e4:72:85:44:fc:25:2b:a8:16:
                    4f:31:86:b6:28:85:b7:90:43:e2:19:64:b4:80:62:
                    19:da:da:be:50:20:c4:b7:c2:9d:86:83:fb:ea:35:
                    d1:c0:ea:c4:93:58:8d:80:c6:af:d2:4e:0f:88:86:
                    85:e9:c1:bc:96:54:99:74:1f:ee:fa:f8:57:3a:20:
                    04:a3:24:e1:6b:90:2e:8b:de:44:81:88:ef:59:d2:
                    27:d3:bb:b8:96:0c:e0:a9:fe:c3:84:f0:a2:c4:e4:
                    a5:fb:f3:99:ce:88:88:f4:a8:73:af:64:be:28:fd:
                    da:51:6d:c3:24:e4:9a:9a:3f:6f:1e:40:32:35:79:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:81:C6:05:2A:6B:FB:37:A1:47:EE:2B:88:72:2D:11:25:A3:F5:64
            X509v3 Authority Key Identifier:
                keyid:79:CD:4B:D3:C9:BF:E2:0D:CC:FE:2B:19:DE:23:09:5C:A2:47:48:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1L08m_4g3M_isZ3iMJXKJHSDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ffa949-86c4-4984-8557-2c2c5fbda341/1/ec1L08m_4g3M_isZ3iMJXKJHSDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:80:d3:54:60:f8:5e:07:99:5c:cc:bb:41:1e:48:78:7d:9f:
         a4:c2:30:16:01:84:0a:b1:e8:67:fb:3c:6a:b5:25:c5:bf:c5:
         3e:a0:42:5f:a2:c8:c2:a3:a2:10:bd:c2:e1:35:bc:0a:99:c4:
         9b:35:25:88:57:ae:fb:56:bf:20:05:46:5c:65:72:04:16:bb:
         dc:04:89:12:4f:02:c1:44:3d:07:0a:27:3b:4f:2f:bb:31:2c:
         ad:ed:2c:a8:7f:c7:66:22:4a:e3:e4:cc:c8:f7:54:28:79:0a:
         29:01:6f:34:26:8e:65:59:7b:ff:c6:b7:09:4d:c0:5a:cf:e0:
         31:99:93:f7:16:04:7b:f1:b3:11:41:36:3d:40:b8:d9:0d:21:
         72:24:3a:43:66:3f:c5:6a:d1:37:39:68:43:65:c2:04:5d:ed:
         07:cf:f7:43:58:f2:9a:34:69:99:6b:1f:35:3f:32:d9:d4:01:
         bd:e2:9c:0d:77:8e:a2:59:88:40:3b:6d:fd:ef:a4:70:f1:6a:
         9e:b7:c0:dc:e3:57:0a:0b:76:2b:9f:e2:72:88:e8:da:96:9c:
         38:ad:bf:18:ae:5b:88:e4:bc:73:bc:74:85:08:56:18:4b:1d:
         1b:99:69:2b:cd:cc:3c:bd:5f:90:53:a6:6a:34:16:1d:50:07:
         ba:00:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:37:02 2025 by rpki-client