Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          O0EKcmO4oJ6TlQQKE6a56tIvcRcKXd6G5xUMytXVY9c=
Subject key identifier:   55:84:20:98:34:DB:F0:4A:13:40:93:9B:76:E2:BE:1A:F3:C3:B0:39
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01995E6A1010C2D3C35786DDC023DE096D09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          16D4
Signing time:             Thu 18 Sep 2025 20:00:33 +0000
Manifest this update:     Thu 18 Sep 2025 20:00:33 +0000
Manifest next update:     Fri 19 Sep 2025 20:00:33 +0000
Files and hashes:         1: 2HcLLIfy1JMDCVGEVTptM8elLd4.roa (hash: LoXji0ZJfkE3eJjr+G7N7ZYdU5+oCyWMzqs03IJOVrg=)
                          2: 4h8DSu4LCqLu5y5DGLyVNLDaW_8.roa (hash: 5dgH0nSjVBTs16em525/U4kAjurzhSSV9U/WWc+xCEs=)
                          3: AsrOt557l1h00n6pkVtft6a66aI.roa (hash: P8uIuV8VH7SkMIwGpury+3xmBvggRtyitJUCcK4sKeY=)
                          4: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: HxtM2M/ivYA0/Fa7RzY6NZSOFsykVEiq77YdTI7yUz0=)
                          5: G1PI32vXIbkXgcKhQ0SHmsA-Lnw.roa (hash: 7Y963vtn61281jo1Uj8ZuCZ+/NEGmwjvGvcRTIydNM4=)
                          6: LwR5e-3XdDXFjm5eJuuKPbFg1wM.roa (hash: 4JsswUG9Ou5/9jUtsWyiDQhEMAGV7MLxdDyUU0ZVg4A=)
                          7: O-s7sLwyvER4n7KZ25-xO-rbC6M.roa (hash: S3u//Ykp1StY/C11qR48/ymNimiE+nEYX14hg2A2Bbw=)
                          8: QhSInFK1aIon1BhkEHNijO-f4ik.roa (hash: awcccSlGjZ1xO51njQcexLk1s7JWly1aPOUdo8QDEfg=)
                          9: TJXWLM_f1SLJ9QLRgKk5eWFWRWg.roa (hash: U09rnHXYuOIiTSo58nsYq7oF2UX+cCeIr2J6otu7qE0=)
                          10: X0X7YHZdxd-Fm-vSH2gkoaNKSEE.roa (hash: 0wypLX2pYlj/wkC9RZ/dWCbs3OnpHFJIgo8rTP3dhfk=)
                          11: XyJzr7K8kDR7Crh0eGA64cNXh5o.roa (hash: O/tUpYLyJqFNhTOL8oVDzZYICuybOlG7LlJD8DubnZc=)
                          12: Z_JTTR_RtMnZmrz0g3I9FM7FzwM.roa (hash: 4Ba7poo6V+UgmXHewWiewkdScmWDep4KBpX3aJD/l2M=)
                          13: _hMBChRNkf58hpBhY7tv3hze2PY.roa (hash: yasJknKp5lFegxLDOt4vURuuinaYS7fHqYEy4jDR1Qk=)
                          14: hdB-JXdXye4ZBva1IafIEMe8-fA.roa (hash: NcBvrxIc56CrHKnTnl6Gzon98z/sEiBJxakbHIp45Y8=)
                          15: iDLarbunVi4QHQ-mD5gPnXZLLrg.roa (hash: 0KfJ1SYAPy0ibP4+GzP2AbbTBvoTg6YZ3wuLem0KL9c=)
                          16: ms8CGFdvCmpl6u_shB2ITMZflkk.roa (hash: XKgbOtBoDSU8HddYbwjY08NVy8DQA+018YQ8iR/G36o=)
                          17: oQmDS9OyWmw4qbX_RxUyk824228.roa (hash: joHFOvFR7JuSQIoicIyGEGjOCGSkIauTU5jH7oWWLJA=)
                          18: uPfCG3rKdmw_ESsxus2J0PQvAYY.roa (hash: Y6IHm1JnqtpPIYHUAQK6pMCeN6ioWtARVl2avIWApWo=)
                          19: zwifaiebir_mFla_bV8p6ToycZs.roa (hash: zS1PueeTX8MO1e9jnmRW3mU76xzsId0nLWB1WA/rYBQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5e:6a:10:10:c2:d3:c3:57:86:dd:c0:23:de:09:6d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Sep 18 20:00:33 2025 GMT
            Not After : Sep 19 20:00:33 2025 GMT
        Subject: CN=5584209834dbf04a1340939b76e2be1af3c3b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:14:4c:8a:a9:12:64:b5:26:3b:6b:23:59:
                    78:44:84:a6:a7:17:8e:ee:78:3f:72:2d:72:df:11:
                    cf:85:88:51:0a:46:9d:04:82:43:2f:25:46:88:a4:
                    47:b4:c2:1f:6e:ac:8f:df:4b:72:c2:82:01:b5:62:
                    f2:12:f1:db:81:30:d1:e0:09:31:e0:94:63:63:65:
                    03:7f:25:9a:02:45:6b:b5:bf:dc:7e:7f:43:ef:90:
                    fc:d3:c1:a8:28:e1:11:a8:90:81:f0:d1:1a:48:66:
                    3c:ba:f9:c3:7a:fc:c9:ef:41:25:42:5e:6a:f0:80:
                    3f:eb:3e:cd:13:60:8c:3f:65:cb:7f:ba:88:d8:ec:
                    aa:d2:96:ea:66:6b:a4:d6:f3:dd:4c:11:0e:c9:8f:
                    28:d1:61:fa:97:46:f9:fc:92:fc:68:30:74:08:e9:
                    f1:2d:31:4b:0c:ee:69:21:90:b0:c7:1d:35:5d:b0:
                    85:f3:26:aa:7f:ef:c0:0c:4e:23:4d:29:b4:be:fd:
                    73:8c:0e:5a:39:e4:11:4f:3b:3b:c2:b2:88:d3:1c:
                    3a:fa:82:b0:98:f2:79:35:e8:7c:c3:b6:12:13:4e:
                    0e:bc:4c:bd:9f:a4:27:cf:e6:a3:3a:62:7d:fe:fb:
                    f4:4f:7c:5d:2e:d7:c4:d5:f9:a5:c8:e1:13:92:61:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:84:20:98:34:DB:F0:4A:13:40:93:9B:76:E2:BE:1A:F3:C3:B0:39
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:90:82:05:eb:98:41:f9:4f:b0:94:9b:05:3c:9e:ac:9f:ca:
         56:82:38:3e:79:e3:d1:26:3d:6a:70:01:02:9e:6c:22:22:03:
         82:58:e3:89:18:7c:fe:e7:95:d6:30:29:05:fb:3e:49:55:7e:
         30:6e:c2:5d:41:02:79:75:51:19:16:f4:12:d5:9e:ce:7b:fc:
         e9:bd:b6:3e:7b:1e:0f:77:8e:54:94:62:9c:73:99:a7:86:16:
         00:fb:af:27:8c:db:67:88:69:4d:42:44:8a:c0:62:c5:84:f1:
         87:a2:7c:ee:8b:da:95:f5:ee:53:ba:ce:5e:66:a6:1a:1a:bc:
         b3:9a:96:52:67:19:81:54:10:be:62:b1:52:13:f4:b6:4a:ed:
         a0:33:f0:d7:b3:c2:70:6f:1c:44:9d:85:5f:91:c0:07:40:ee:
         02:76:c2:f9:32:92:97:6e:6f:54:f4:20:1b:4c:ec:76:f0:09:
         b5:85:7a:2c:23:c8:4c:f8:29:90:86:7a:ca:b7:28:5b:5e:68:
         9b:2b:f8:ad:4c:9e:0b:89:4d:34:bc:9d:75:e3:c0:5c:5e:6b:
         5c:d4:4f:be:2b:98:06:95:b7:18:1a:9b:df:b1:db:9d:98:9b:
         ab:2f:82:f0:37:cf:5e:11:a5:6d:07:fa:6c:c8:88:97:a2:74:
         e2:de:db:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 21:16:20 2025 by rpki-client