Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
File:                     eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json)
Hash identifier:          FSkKLYYrW0/DydgRZDWAYpf2hq6Xw87/Dv8lwzfNrOE=
Subject key identifier:   27:AA:3A:C8:41:F8:5B:C6:0E:E3:15:68:7B:9A:93:1C:58:7C:56:31
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Certificate issuer:       /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial:       019A50AB7F8F4E5007577B093A00A6C5C3DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
Manifest number:          170E
Signing time:             Tue 04 Nov 2025 21:00:07 +0000
Manifest this update:     Tue 04 Nov 2025 21:00:07 +0000
Manifest next update:     Wed 05 Nov 2025 21:00:07 +0000
Files and hashes:         1: bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa (hash: 3xaBBKosMJSpzXSuRQMz4T/JTkCvN7b+xo0iaMV0UsA=)
                          2: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: +ABd190F5eqxpIKRThASqZ7mVq1sqY+oTls9rf39cLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:ab:7f:8f:4e:50:07:57:7b:09:3a:00:a6:c5:c3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
        Validity
            Not Before: Nov  4 21:00:07 2025 GMT
            Not After : Nov  5 21:00:07 2025 GMT
        Subject: CN=27aa3ac841f85bc60ee315687b9a931c587c5631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:1f:d1:00:80:b1:34:26:e4:e5:58:d4:84:
                    0b:6f:a6:f5:2a:46:28:3d:83:11:31:36:45:8e:73:
                    f6:be:36:e9:cc:ba:ff:fe:43:11:09:99:53:b2:e4:
                    12:ab:0b:59:bd:f8:32:45:23:a1:48:4d:b7:82:66:
                    dc:21:d3:c6:93:d1:af:cc:92:18:97:47:72:68:d1:
                    8e:9c:88:45:63:db:8f:10:d4:65:b9:e1:da:da:34:
                    a9:a9:77:63:27:fd:4a:63:c3:e6:76:64:9c:d9:f9:
                    11:96:73:b2:fa:80:89:b7:b6:4a:43:2c:af:2a:12:
                    8e:7e:69:6f:e4:e2:b3:20:df:5b:b3:77:f9:86:1c:
                    17:0c:d5:c6:3b:0d:41:77:76:5d:6e:7a:96:fa:54:
                    ca:71:b7:89:3e:7b:0b:fe:45:88:cd:de:93:6d:0d:
                    e8:4e:e0:1a:db:f3:f9:a9:92:e1:00:13:8e:00:50:
                    08:8e:6d:bf:8d:13:8f:00:84:00:fc:cd:5d:64:07:
                    10:ef:73:78:d0:f8:eb:18:4c:d3:e9:ed:03:9b:2b:
                    ef:df:04:9c:5a:e5:81:c2:23:ee:ff:1b:9f:00:77:
                    63:f5:9b:b3:de:e9:c3:0a:07:33:8b:52:7b:35:10:
                    61:7b:be:b2:01:21:96:01:7d:65:8d:c3:61:b4:5b:
                    46:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AA:3A:C8:41:F8:5B:C6:0E:E3:15:68:7B:9A:93:1C:58:7C:56:31
            X509v3 Authority Key Identifier:
                keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:f9:96:ad:70:20:7d:4a:d3:95:bf:f6:3e:c9:5d:3b:40:
         a9:0f:a6:2e:78:70:78:8d:f0:01:33:2e:39:aa:fd:3c:19:52:
         74:4d:2d:70:df:77:a1:36:eb:46:f9:a0:33:ea:1d:da:6f:0a:
         83:c1:11:7a:4a:b5:45:15:a1:65:68:8b:8a:b8:80:6a:49:d9:
         1a:14:a7:ae:7e:ad:78:33:43:17:2f:c8:00:21:57:8c:e7:c1:
         45:41:c6:b6:47:2c:a8:78:ae:f8:39:26:a7:61:db:de:08:d5:
         8c:1e:13:d1:f8:3f:13:cc:ec:34:d0:7e:b9:2b:1f:9b:73:e9:
         fb:93:a0:56:16:6a:6a:dd:ac:eb:d4:3e:2c:c5:37:ad:97:d4:
         64:3f:60:28:ba:85:cf:c6:9c:20:7b:a9:0a:9c:f6:d2:a0:18:
         46:19:6e:19:f5:d4:70:73:a1:28:a1:eb:cd:d5:03:63:36:8e:
         67:62:e3:8f:75:9c:f0:3e:40:83:8f:e0:c3:e1:45:95:97:bd:
         6e:f2:ea:d4:36:da:9f:99:5a:9e:6c:99:7f:bb:a9:08:4a:b6:
         c5:92:47:31:64:22:ed:a4:13:3e:57:88:4d:be:49:d6:f3:ba:
         83:38:72:7f:e3:15:b0:f0:e6:6f:ba:0a:dc:d7:b6:ab:36:94:
         ce:cc:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:43 2025 by rpki-client