Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          FgKGmKPHnf1zl4rI5Z5PFcoA5+kw8Wn2CiO8m5BMEnY=
Subject key identifier:   81:01:29:EE:6D:DD:90:41:F1:7D:3B:E7:BB:AA:24:FF:1C:54:34:E5
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019A2585979B929F9A937A85E1409E5FDB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0648
Signing time:             Mon 27 Oct 2025 11:55:03 +0000
Manifest this update:     Mon 27 Oct 2025 11:55:03 +0000
Manifest next update:     Tue 28 Oct 2025 11:55:03 +0000
Files and hashes:         1: 2EE5sI-lHxPW-m95GPnlbkqBGKw.roa (hash: rZX0WbnFMbiHv4Iw7Uo3xd9gD2qfAlVmi5TezkAjKms=)
                          2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: kH0KuyKqD0VB9ISC+Fd/ldkHP2i12xHQBFHGtWPMMlk=)
                          3: GLpitTLoKfeAEOHv7sg-N2mDyyM.roa (hash: DLCIbqmbMU+kzJKE291B9CWch8SKbQOfjzg4SB+dJMs=)
                          4: JksIp8plt8XHk157IJ1eE1-tvto.roa (hash: wgY/0YYKwrZFlsYl68IwR2OteHvDDcA3JQTOM7ecfhk=)
                          5: UohPfLpYQFWq1aE3FZr-DrIx55E.roa (hash: KnJXUEOwlaB/y/AXpGglu/TyZvgBRRpzdQU4qGeto24=)
                          6: wGte5Are8NpBD8KTHQ531vUjpFs.roa (hash: G9rpZQy7UTdVZ8RG/8ciW3S8lvdFNXdVuqbWWEiXC7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 11:55:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:85:97:9b:92:9f:9a:93:7a:85:e1:40:9e:5f:db:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Oct 27 11:55:03 2025 GMT
            Not After : Oct 28 11:55:03 2025 GMT
        Subject: CN=810129ee6ddd9041f17d3be7bbaa24ff1c5434e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:44:1a:1f:7e:4d:ad:ea:35:70:70:b9:46:e4:
                    db:ac:7d:cc:b2:cf:ef:80:f0:e9:c0:a2:1f:7e:30:
                    6e:27:90:72:0d:42:e2:80:77:45:24:93:5d:49:89:
                    ef:b6:0c:9a:0e:a9:0b:56:8d:70:7b:af:40:88:06:
                    fa:15:82:8c:0a:0c:fa:07:77:2f:86:b0:93:ce:75:
                    99:e0:ef:96:5c:1a:fe:74:fa:da:f7:87:37:60:5f:
                    d5:f6:e9:c3:c1:d1:02:cb:ce:3e:cd:01:0a:be:ec:
                    7e:64:90:0a:85:4b:bf:b4:5a:ab:cd:02:0c:09:23:
                    fe:8d:b0:64:31:04:76:67:97:c3:50:fb:cf:df:3e:
                    86:ab:c4:e0:b2:65:e2:7b:a0:c9:17:6f:91:09:9b:
                    25:58:14:67:c7:0e:b6:a6:de:0e:15:b6:8e:8f:bf:
                    92:00:53:e7:cb:d0:42:a5:d8:92:89:7a:46:2d:d4:
                    d3:cb:8d:9e:2c:d9:2b:08:6c:9f:6a:98:00:11:c7:
                    34:5e:29:0a:0e:ed:1e:ba:44:c0:e8:22:d3:d8:57:
                    21:7e:b8:f9:ec:76:ae:c5:29:70:e9:3b:06:48:e3:
                    d8:f1:38:dd:a9:75:fb:b7:9e:e9:fd:19:fe:3f:87:
                    42:7c:58:c0:bb:39:42:e3:b0:30:b4:69:3b:b3:34:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:01:29:EE:6D:DD:90:41:F1:7D:3B:E7:BB:AA:24:FF:1C:54:34:E5
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2e:a7:8b:30:4b:55:66:1e:ef:e7:d2:22:7f:94:2d:27:c5:
         99:a2:25:a3:34:d1:0d:78:12:a5:18:48:8d:13:f7:cc:59:8f:
         f3:4e:7a:05:14:b1:db:8b:e9:9b:d6:08:f6:19:4d:e3:da:fc:
         86:81:04:51:cb:3a:55:85:16:c4:16:10:cd:cf:8c:d6:80:82:
         52:f5:5e:71:b4:ac:bd:44:58:3c:84:56:d0:d1:82:43:79:9e:
         ef:f7:ba:4a:01:68:7f:2e:90:3b:22:24:6d:ff:00:32:75:d6:
         4b:76:65:a4:96:f6:49:8c:4a:b6:58:20:84:5a:65:e5:23:77:
         dd:48:85:61:b4:83:52:59:ee:ea:be:b1:ed:ac:69:14:1d:d9:
         e3:b6:5f:c4:cf:41:3a:d3:c6:f5:39:64:d9:00:91:b7:48:cb:
         ed:a9:28:00:6b:ad:b9:99:1b:5d:76:49:29:18:5b:7c:3b:e8:
         a4:83:54:53:3e:95:cd:93:d2:dc:46:b4:42:d6:8b:d9:54:96:
         9d:cf:4f:33:75:21:3d:12:c3:ed:0d:0d:15:f7:78:b8:a8:1e:
         0b:94:de:2e:b9:91:e9:05:85:29:38:a2:9b:2c:1d:ba:90:27:
         c8:30:24:d1:5a:29:2e:6d:75:3c:88:9a:35:bd:99:fa:c9:36:
         d6:2a:96:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolhZebkp+ak3qF4UCeX9sOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4
NDlkMTcwHhcNMjUxMDI3MTE1NTAzWhcNMjUxMDI4MTE1NTAzWjAzMTEwLwYDVQQD
Eyg4MTAxMjllZTZkZGQ5MDQxZjE3ZDNiZTdiYmFhMjRmZjFjNTQzNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EQaH35Nreo1cHC5RuTbrH3Mss/v
gPDpwKIffjBuJ5ByDULigHdFJJNdSYnvtgyaDqkLVo1we69AiAb6FYKMCgz6B3cv
hrCTznWZ4O+WXBr+dPra94c3YF/V9unDwdECy84+zQEKvux+ZJAKhUu/tFqrzQIM
CSP+jbBkMQR2Z5fDUPvP3z6Gq8TgsmXie6DJF2+RCZslWBRnxw62pt4OFbaOj7+S
AFPny9BCpdiSiXpGLdTTy42eLNkrCGyfapgAEcc0XikKDu0eukTA6CLT2Fchfrj5
7HauxSlw6TsGSOPY8TjdqXX7t57p/Rn+P4dCfFjAuzlC47AwtGk7szSWDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEBKe5t3ZBB8X0757uqJP8cVDTlMB8GA1UdIwQY
MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt
OWRkOTk3ZWVmNGVmLzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm
LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUi6nizBL
VWYe7+fSIn+ULSfFmaIlozTRDXgSpRhIjRP3zFmP8056BRSx24vpm9YI9hlN49r8
hoEEUcs6VYUWxBYQzc+M1oCCUvVecbSsvURYPIRW0NGCQ3me7/e6SgFofy6QOyIk
bf8AMnXWS3ZlpJb2SYxKtlgghFpl5SN33UiFYbSDUlnu6r6x7axpFB3Z47ZfxM9B
OtPG9Tlk2QCRt0jL7akoAGutuZkbXXZJKRhbfDvopINUUz6VzZPS3Ea0QtaL2VSW
nc9PM3UhPRLD7Q0NFfd4uKgeC5TeLrmR6QWFKTiimywdupAnyDAk0VopLm11PIia
Nb2Z+sk21iqWVA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 18:13:52 2025 by rpki-client