Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          L2TsUkis+reKBdu1pg7QlPdRPBGJ9/iGAARyNAKLQVQ=
Subject key identifier:   B6:30:8C:61:A3:33:15:79:15:8D:F4:8A:84:CF:A5:91:50:7B:3A:54
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019A563FB605D25BAAEFA9E7FCAF0B685334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          175A
Signing time:             Wed 05 Nov 2025 23:00:06 +0000
Manifest this update:     Wed 05 Nov 2025 23:00:06 +0000
Manifest next update:     Thu 06 Nov 2025 23:00:06 +0000
Files and hashes:         1: 0gM9nO8aCfkT81wAB6FtCesEwDg.roa (hash: Lfwi2k/qzNFayxWwQOnJuaS4g7hdO3qEEZMxYRqe+is=)
                          2: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: SRlab44qmRsmrHmxqkDdmMrX8lYm8fbiyTyxiCnR488=)
                          4: ETcH2IvsrV9frQQAiGHCydePvXc.roa (hash: vnxbYaqSpCvvPsvgeAGAJuaPg4alEmcLbxdQJvK4GFI=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          7: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          8: WWtCrJTOa2fdz1x4NrejDaidA4c.roa (hash: bNRJCU/5ggmed8Sa2EXYIbSVMg5Nfmrhzw8GYsZOcgY=)
                          9: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          10: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          11: f7e24_kc_woNPGchU49zRaiPPtg.roa (hash: rsVGF94CsaYZyejnnB2G7Jx9MOV3cb8+8hyyFUvoFDk=)
                          12: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          13: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          14: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          15: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          16: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          17: w3JXIRcbr6KwnMwme1orx9slU8I.roa (hash: VFCCyy87daugzyIA/V3roqMFDyUsgWDtMgKdLSeZBKc=)
                          18: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:3f:b6:05:d2:5b:aa:ef:a9:e7:fc:af:0b:68:53:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Nov  5 23:00:06 2025 GMT
            Not After : Nov  6 23:00:06 2025 GMT
        Subject: CN=b6308c61a3331579158df48a84cfa591507b3a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:55:51:c3:95:99:78:0b:51:92:ab:bd:95:03:
                    3e:9e:a4:bc:8b:85:c9:f7:51:5f:98:93:70:c2:7f:
                    e1:81:e2:2f:ad:e4:aa:30:53:12:83:7b:5e:47:b5:
                    90:f5:b2:81:b3:e4:ae:c0:8f:d7:9f:33:6f:ab:14:
                    9c:08:76:9f:8b:9f:a3:fa:2f:d2:d3:93:78:bb:bd:
                    9d:e6:9e:e1:5e:9b:28:c3:9b:0f:f2:7b:8d:d7:c8:
                    71:fd:73:96:52:47:80:d5:c0:ac:9e:3c:78:19:c3:
                    2b:0b:5e:99:da:43:ec:0f:42:3b:a1:ba:13:b8:f1:
                    c7:04:f9:c3:c0:dc:29:65:f3:91:e7:51:10:c2:3d:
                    f0:78:1f:6a:29:70:15:b0:23:37:df:13:6e:2b:86:
                    50:fe:82:b4:99:f0:cc:3c:03:8a:f9:d5:de:e8:74:
                    34:ee:6c:96:07:73:3e:36:a4:ec:54:1d:c0:35:57:
                    78:bc:1b:6b:b7:71:cc:15:d6:33:4c:07:6b:37:a5:
                    14:3c:62:44:c8:94:14:00:a4:93:66:fd:ae:b1:9a:
                    59:bc:62:2f:db:66:85:68:ff:c9:3e:b6:e7:43:dd:
                    ca:a3:2d:13:ea:89:28:1b:12:a9:1b:9c:64:44:af:
                    df:ff:c4:11:fe:96:84:be:1d:88:0f:78:92:91:24:
                    db:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:30:8C:61:A3:33:15:79:15:8D:F4:8A:84:CF:A5:91:50:7B:3A:54
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b0:58:e7:35:63:bc:77:bf:94:ae:b3:b4:12:30:3d:56:ad:
         c8:dc:62:3d:50:f5:cd:62:76:b2:28:38:01:bb:dd:b6:22:76:
         4c:64:f9:dd:01:ca:8e:2a:58:de:25:14:68:de:4d:d6:56:ce:
         3a:9d:ce:9d:93:57:98:ff:2c:41:07:28:1a:a9:81:83:ab:c4:
         f5:7f:99:c6:8a:05:cc:ca:11:c8:53:9c:e8:a9:2d:e1:7e:a3:
         a2:45:83:73:14:23:c4:cd:21:26:b7:9a:39:28:1c:6b:50:7e:
         5c:3f:30:04:1a:3a:94:21:f9:26:76:d8:c4:94:93:80:dd:02:
         21:1e:7d:59:1b:3f:10:81:f7:97:10:ed:da:57:49:5d:ce:58:
         95:07:44:6e:a3:8d:79:59:1c:3b:11:47:6b:96:ef:5a:32:10:
         61:a7:4c:53:f9:44:a7:bf:1d:d8:5f:1c:c9:3a:25:de:11:37:
         5d:7f:c1:f9:ce:39:f0:e7:75:9c:aa:8d:5d:24:03:29:a7:63:
         51:f4:59:c2:92:4e:87:ed:5e:d9:e5:25:65:6d:89:5d:ad:0f:
         40:93:b2:1c:22:18:e7:01:5e:09:8e:23:45:3e:3d:b3:24:59:
         9c:25:db:85:4e:60:89:41:e9:66:d9:96:2e:9b:bb:42:87:00:
         5d:0a:c8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:32:43 2025 by rpki-client