Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          uBc/Le7Txc0NqL2mkhXeRikG6JnmO7/qdlNg83L8HeE=
Subject key identifier:   AE:07:8C:E3:DC:B0:77:C7:A5:87:FA:FE:89:6F:85:62:8A:A3:44:37
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019A19BDB6C37C4995065E8258509471D9A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          16F5
Signing time:             Sat 25 Oct 2025 05:00:54 +0000
Manifest this update:     Sat 25 Oct 2025 05:00:54 +0000
Manifest next update:     Sun 26 Oct 2025 05:00:54 +0000
Files and hashes:         1: 2W0mVYMtUj2Armlmk_FP_3q5ESY.roa (hash: w5Ej5+Qvny/iMXD/R+qRLBIbP+3L75HhJ+B0EUJmp8o=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: bAqTL0buDk+okS3/BqoFKCfiYFZVW9SaTtZ+b/txDeo=)
                          3: Lh4ykTJQfzCAQTP8wtaXdQr_9Fk.roa (hash: QG3UN2HjFfGKFrQvhtxeeeXreoHXBK1yS6QHGjO5Etg=)
                          4: VbGX6V55_AUgh-706a5pCl3f9Kg.roa (hash: IviXGlaLtNBbBi+wGZOwysY/nW7XfiJY8zoOrjfnvG8=)
                          5: efQyVpTfdzTLxoeY6EZRaCPb9ME.roa (hash: osXy82VNbyBuJJhgosvmVAstSYEdkdV+Zv1r3Rp3SjY=)
                          6: vPKCfihyP4aceHhSVf5O5t7dhks.roa (hash: BSL3nS6RO+KWTxuVXzJtjXxdHmqwKWboA1DQ+yINRvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:bd:b6:c3:7c:49:95:06:5e:82:58:50:94:71:d9:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Oct 25 05:00:54 2025 GMT
            Not After : Oct 26 05:00:54 2025 GMT
        Subject: CN=ae078ce3dcb077c7a587fafe896f85628aa34437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6d:1a:df:53:87:12:13:d8:33:64:7a:a5:82:
                    95:17:ac:b2:6f:61:a8:00:36:d4:49:ae:43:ee:93:
                    62:e6:40:4b:ce:ac:a1:64:87:80:3f:a8:ac:b3:9b:
                    2d:61:4f:9c:f4:3d:16:18:55:97:15:00:5c:e7:95:
                    88:2f:73:f4:e0:25:d7:a4:77:46:e4:d7:d0:93:d8:
                    c3:7c:b0:6d:a7:68:01:81:ef:cc:d2:7c:20:24:b1:
                    01:81:86:c4:18:c6:9c:42:a3:f2:cf:7c:db:e0:9a:
                    7a:07:6d:2c:59:04:ca:1c:ef:d6:a0:60:fc:a2:f1:
                    f7:aa:01:0b:3e:c3:42:dc:de:6e:df:b1:55:84:e3:
                    b3:44:f2:d1:ee:75:9a:d2:8e:81:c8:17:e7:a3:05:
                    c3:e5:12:54:30:a2:7b:87:f7:ee:73:06:28:e7:51:
                    6e:dc:e4:33:cf:9b:c1:00:4e:ef:b5:70:09:12:72:
                    fb:de:ae:7c:58:ad:14:c4:d3:15:de:52:32:cb:59:
                    64:ed:39:63:2b:f4:75:9a:a9:1e:42:71:75:b0:4a:
                    ab:85:33:85:2e:4b:9f:69:b9:c9:1b:ef:c8:41:98:
                    25:77:71:69:ec:a0:8d:67:6d:ee:37:55:54:31:c0:
                    96:b6:c3:a9:2b:69:a5:6e:6c:54:65:df:fe:80:82:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:07:8C:E3:DC:B0:77:C7:A5:87:FA:FE:89:6F:85:62:8A:A3:44:37
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:4d:f7:1b:5c:41:0a:a2:53:ef:bf:aa:50:5e:2f:4a:38:
         24:85:b0:58:d8:d6:29:e4:25:6e:ba:30:7d:96:b4:a8:40:e3:
         2c:3b:5b:8f:c9:38:1e:5f:c2:ce:9f:1a:c9:96:d9:79:ff:82:
         5f:b7:50:c7:34:89:94:6a:b3:33:c0:81:9e:eb:40:fa:0a:19:
         1e:47:e9:0d:59:fa:f8:5c:13:69:29:94:5f:55:04:3c:5c:d7:
         4a:87:a1:7c:b7:7c:30:1f:74:d7:71:7e:a7:54:ed:e0:30:4d:
         77:77:05:20:85:14:9f:96:e3:5e:1f:4b:04:d3:f5:bb:b6:67:
         31:89:6e:cd:8c:58:69:03:2e:d2:88:48:98:b9:6e:62:b0:e0:
         26:90:af:09:f4:37:fe:2a:ba:aa:a4:80:5e:6d:e0:dd:c8:d8:
         79:6a:24:8d:1f:cf:0c:1f:17:55:c4:c4:b3:6d:56:3a:03:35:
         b7:f1:fa:4d:bc:c9:c2:f9:db:d2:d2:12:fc:3c:67:01:7d:62:
         60:9a:5a:b8:ae:bf:8e:bc:99:34:f6:2f:97:45:5d:90:18:7f:
         c2:4e:af:b7:8c:b4:0a:cd:06:50:6f:5c:03:58:54:99:a8:fd:
         dd:17:69:9d:31:ef:ea:7d:0b:0d:11:ff:c3:a6:b6:de:ac:a9:
         15:2c:9e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 08:10:14 2025 by rpki-client