Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
File:                     EEwNyHsCIy5J3FTU_79Ele4DNlU.mft (raw, json)
Hash identifier:          Vgtga9rqgftVrkyHW7QCT+ixSSXbRXzgOR0wGbNR+RM=
Subject key identifier:   3C:C6:B2:DE:95:2B:63:C1:66:7D:2F:BC:B5:8E:3E:C3:A5:2F:36:40
Authority key identifier: 10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55
Certificate issuer:       /CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
Certificate serial:       019A4DE18FC9A38DCE0EC282D6065D8BEB00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
Manifest number:          0C01
Signing time:             Tue 04 Nov 2025 08:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:19 +0000
Files and hashes:         1: EEwNyHsCIy5J3FTU_79Ele4DNlU.crl (hash: 3C9cg3va8kT3TUj6clWTxHKDyRsfFMfTXAxZe2uIqdY=)
                          2: gFd5tgCJMeij35zzi5bD-2NK_Kg.roa (hash: Z6aGas3PZ0QdIX51TPr1IW3EEbWOk5nQI3+RmZvvBLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:8f:c9:a3:8d:ce:0e:c2:82:d6:06:5d:8b:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104c0dc87b02232e49dc54d4ffbf4495ee033655
        Validity
            Not Before: Nov  4 08:00:19 2025 GMT
            Not After : Nov  5 08:00:19 2025 GMT
        Subject: CN=3cc6b2de952b63c1667d2fbcb58e3ec3a52f3640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:21:c9:21:7e:26:c5:85:41:84:be:d1:63:
                    0e:56:89:5f:15:49:79:55:dd:a5:95:0f:c6:20:34:
                    a6:50:35:29:19:3e:6f:e1:33:dc:34:2e:f1:c6:65:
                    be:5e:63:d2:24:21:b2:d0:44:01:95:09:d9:82:e1:
                    6f:99:e5:cb:f3:06:1f:c5:a5:74:72:22:0d:a1:a6:
                    ca:64:6f:3a:c0:97:b4:41:b8:e6:70:d4:e7:19:80:
                    ac:30:29:d4:35:0e:c1:00:3a:e6:ab:58:1d:f5:c7:
                    bb:50:45:e7:2e:f1:82:94:e9:f9:1c:a3:5d:cb:ce:
                    26:7d:a4:2a:ed:9f:18:2c:81:7e:dd:8e:a1:87:49:
                    6d:a8:a9:8f:69:8e:5b:c7:7f:b5:8a:15:2c:47:ca:
                    8e:d8:2d:19:2a:cc:38:e1:e6:89:44:1d:28:06:8c:
                    98:c0:aa:1c:ed:2a:f3:d0:7f:91:c0:f6:c6:72:48:
                    b2:50:6d:47:61:44:f2:3b:3c:cf:31:0a:42:60:f1:
                    a2:ac:b5:37:87:13:41:47:b5:f4:f8:93:e2:49:8a:
                    c6:8e:ec:87:d5:4c:3d:a0:9f:96:d3:ff:18:52:0b:
                    43:7d:3f:1b:db:f1:f0:e4:1a:93:fa:5c:a3:af:67:
                    52:63:04:3d:2f:07:f0:46:8f:82:b1:d3:e2:af:4e:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:B2:DE:95:2B:63:C1:66:7D:2F:BC:B5:8E:3E:C3:A5:2F:36:40
            X509v3 Authority Key Identifier:
                keyid:10:4C:0D:C8:7B:02:23:2E:49:DC:54:D4:FF:BF:44:95:EE:03:36:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEwNyHsCIy5J3FTU_79Ele4DNlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1b332d-4715-475e-989f-6eeaca15b5a1/1/EEwNyHsCIy5J3FTU_79Ele4DNlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:80:91:a4:32:77:b1:f1:45:81:73:b8:f1:04:a2:4a:e6:20:
         0c:aa:5e:6b:1b:8e:5e:34:c7:d2:04:42:0a:d0:55:e8:f3:ed:
         db:57:0d:8a:a1:6c:dc:99:f4:7a:93:80:44:ed:6c:c4:43:36:
         dc:96:73:5d:9c:c2:cb:ec:4b:af:1e:fb:c5:f5:21:28:77:f8:
         3a:e8:95:09:00:4f:11:56:ed:62:66:4c:ae:98:70:8e:99:71:
         eb:ef:78:53:62:16:3d:8f:c0:6f:6a:95:da:32:5e:d4:6a:24:
         5e:90:d0:62:5a:37:a7:ae:d3:9c:f1:3c:9f:e0:ec:16:2d:2f:
         e7:c3:96:8f:a5:45:bd:b0:be:8d:9a:af:52:dd:f5:21:89:d1:
         f3:2f:f6:e2:9d:88:39:30:54:fc:b1:3d:dd:0d:ae:08:9a:9d:
         b0:f2:d9:03:ef:bb:7c:89:9b:c6:ec:f2:91:58:b6:69:42:3d:
         8d:51:4d:b1:e5:4b:0d:9a:04:3f:c5:bf:70:af:3c:6d:b9:b2:
         21:06:a5:11:ba:c9:12:ce:42:79:34:11:36:c8:28:1b:f4:3e:
         68:05:b5:33:1f:ca:7f:d7:69:78:f8:11:02:6e:fa:73:e6:b9:
         b5:92:fe:2e:e8:46:69:2f:c3:62:b7:20:d8:eb:ab:95:3d:a6:
         af:24:f0:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4Y/Jo43ODsKC1gZdi+sAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNGMwZGM4N2IwMjIzMmU0OWRjNTRkNGZmYmY0NDk1ZWUw
MzM2NTUwHhcNMjUxMTA0MDgwMDE5WhcNMjUxMTA1MDgwMDE5WjAzMTEwLwYDVQQD
EygzY2M2YjJkZTk1MmI2M2MxNjY3ZDJmYmNiNThlM2VjM2E1MmYzNjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpEhySF+JsWFQYS+0WMOVolfFUl5
Vd2llQ/GIDSmUDUpGT5v4TPcNC7xxmW+XmPSJCGy0EQBlQnZguFvmeXL8wYfxaV0
ciINoabKZG86wJe0QbjmcNTnGYCsMCnUNQ7BADrmq1gd9ce7UEXnLvGClOn5HKNd
y84mfaQq7Z8YLIF+3Y6hh0ltqKmPaY5bx3+1ihUsR8qO2C0ZKsw44eaJRB0oBoyY
wKoc7Srz0H+RwPbGckiyUG1HYUTyOzzPMQpCYPGirLU3hxNBR7X0+JPiSYrGjuyH
1Uw9oJ+W0/8YUgtDfT8b2/Hw5BqT+lyjr2dSYwQ9LwfwRo+CsdPir05mkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzGst6VK2PBZn0vvLWOPsOlLzZAMB8GA1UdIwQY
MBaAFBBMDch7AiMuSdxU1P+/RJXuAzZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUV3TnlIc0NJeTVKM0ZUVV83OUVsZTRETmxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xYjMzMmQtNDcxNS00NzVlLTk4OWYt
NmVlYWNhMTViNWExLzEvRUV3TnlIc0NJeTVKM0ZUVV83OUVsZTRETmxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xYjMzMmQtNDcxNS00NzVlLTk4OWYtNmVlYWNhMTViNWEx
LzEvRUV3TnlIc0NJeTVKM0ZUVV83OUVsZTRETmxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoCRpDJ3
sfFFgXO48QSiSuYgDKpeaxuOXjTH0gRCCtBV6PPt21cNiqFs3Jn0epOARO1sxEM2
3JZzXZzCy+xLrx77xfUhKHf4OuiVCQBPEVbtYmZMrphwjplx6+94U2IWPY/Ab2qV
2jJe1GokXpDQYlo3p67TnPE8n+DsFi0v58OWj6VFvbC+jZqvUt31IYnR8y/24p2I
OTBU/LE93Q2uCJqdsPLZA++7fImbxuzykVi2aUI9jVFNseVLDZoEP8W/cK88bbmy
IQalEbrJEs5CeTQRNsgoG/Q+aAW1Mx/Kf9dpePgRAm76c+a5tZL+LuhGaS/DYrcg
2OurlT2mryTwAA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:07 2025 by rpki-client