Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
File:                     Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft (raw, json)
Hash identifier:          BkK2QM50Num9hNfjFXChBEQdbNBrk8OXHf4SbqAhA18=
Subject key identifier:   56:69:7C:6F:13:5C:52:A6:CE:82:18:F8:9B:B9:BE:F1:EE:4E:32:12
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Certificate issuer:       /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial:       019A0C0176BD04E05062733AA5A119441DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
Manifest number:          0EA6
Signing time:             Wed 22 Oct 2025 13:00:13 +0000
Manifest this update:     Wed 22 Oct 2025 13:00:13 +0000
Manifest next update:     Thu 23 Oct 2025 13:00:13 +0000
Files and hashes:         1: 7rGhXzCfmOAQtFdCFMtNwQZCGzI.roa (hash: +YzcMttJR4cOnsIWs0CBLy1v8W7l7gh7eA5Qk1ZfF+0=)
                          2: E-owwaRkGBOgTW0gbT6t0z8jYpA.roa (hash: MzJgxXYLXxOfkRd2uBOOGYCYN+rSmPW8si+rCfGvcKY=)
                          3: Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl (hash: iu9zlWj1FNTl6xfqKrtVP+yxBWsd+fccQxt/umXIUEI=)
                          4: JMIXuwUBCaOmERtHlzG7ISJ3JvY.roa (hash: Hw2s88epzhilOmADkh2atAnnbAnZEDzpVgH8yNCsz2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:01:76:bd:04:e0:50:62:73:3a:a5:a1:19:44:1d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=121a37282dd992d88658160559e048392798c84b
        Validity
            Not Before: Oct 22 13:00:13 2025 GMT
            Not After : Oct 23 13:00:13 2025 GMT
        Subject: CN=56697c6f135c52a6ce8218f89bb9bef1ee4e3212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:60:4c:40:b6:22:c4:be:4f:01:57:bb:d7:
                    a0:74:8e:67:7b:5d:08:ab:a2:c9:f6:6e:90:2f:32:
                    7d:64:08:77:be:ee:79:b6:37:ed:cc:4d:45:90:84:
                    eb:77:34:e8:f6:39:c0:1a:97:cd:f6:81:81:e1:6d:
                    35:26:a5:65:f4:05:64:f7:a7:71:a1:56:9c:43:96:
                    30:69:c1:0c:9f:fa:9d:e0:bf:13:28:19:97:1f:e8:
                    da:44:b3:54:ed:65:a7:df:9d:90:ff:bc:e6:94:34:
                    ed:b8:94:a8:a7:f3:38:e4:18:4c:4a:d9:29:af:3f:
                    61:69:73:fb:d0:a4:77:2d:6d:c1:35:f1:71:ce:56:
                    50:7d:a7:40:d8:7d:e1:a1:8b:df:5f:4f:b3:06:39:
                    1f:ff:06:d5:44:f7:af:e7:a8:9d:30:cd:a7:77:d3:
                    1f:48:0b:6a:f5:b1:71:74:78:7e:ed:df:b6:6c:9c:
                    98:c3:d3:14:e3:e2:8f:75:59:c9:c5:d4:9e:ee:08:
                    e5:0b:f9:1b:e8:cb:e4:22:e5:bb:b4:79:76:a9:24:
                    db:9d:c9:5c:8f:bc:59:35:18:b2:63:df:3d:40:99:
                    ed:97:eb:28:83:e9:5d:f0:85:9c:2c:1c:d1:ed:80:
                    be:c3:99:fc:f1:57:c8:b7:66:ce:de:b8:af:6f:41:
                    e4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:7C:6F:13:5C:52:A6:CE:82:18:F8:9B:B9:BE:F1:EE:4E:32:12
            X509v3 Authority Key Identifier:
                keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d6:a0:9a:18:f3:cb:bb:05:91:d6:53:b1:46:0e:d9:8a:8a:
         d9:72:00:a6:93:ad:2d:f0:49:0d:f6:92:6a:2d:e7:fe:96:5e:
         19:5d:6d:7d:fb:ef:70:01:d6:e6:e3:1d:22:61:99:a0:c0:b7:
         3a:a5:d0:52:a5:5b:0d:bd:ab:2e:76:18:f4:84:70:9f:04:7d:
         43:7d:2f:d0:84:97:a5:7a:ec:e5:40:36:1f:df:e5:0d:3f:f6:
         da:2e:75:ec:04:ac:d1:c6:6e:0e:57:69:c3:c1:4e:be:19:db:
         e3:29:34:51:b8:d1:41:81:72:e0:05:06:81:55:2d:da:1f:fb:
         46:7d:02:b5:8c:96:ef:01:e8:97:eb:61:9b:db:f7:a8:26:8f:
         d7:b8:a2:48:96:68:a0:27:2c:02:0f:e3:6f:ca:95:da:a6:b7:
         4b:31:fa:b7:4d:47:3b:7e:69:de:5a:40:fa:d6:fc:86:23:91:
         40:84:3f:ea:45:ed:04:80:f1:30:ec:95:bc:5f:e3:00:a1:4e:
         38:88:3f:2c:a1:9d:d5:14:2c:20:18:96:f9:4a:84:18:77:28:
         0d:25:f5:6f:70:dc:45:be:b0:11:e2:a0:f6:08:f0:dd:fe:be:
         5d:64:36:be:20:8f:ab:72:04:7a:6b:c7:35:36:d3:94:0c:15:
         dd:59:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:12:30 2025 by rpki-client