Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
File:                     EHMSpQFqPNzAt-Ydx59V09Xss34.mft (raw, json)
Hash identifier:          /mgLOFZX4XwkENw6hHPK3PC0Q3PsSNm9anXeFnjT+Pk=
Subject key identifier:   33:08:F7:08:1E:1C:C9:59:A3:E3:ED:CA:62:40:53:9C:79:F5:C5:7F
Authority key identifier: 10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E
Certificate issuer:       /CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
Certificate serial:       019A0B5C81DA3C8F30D37D1B98229FCA2FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
Manifest number:          13F3
Signing time:             Wed 22 Oct 2025 10:00:03 +0000
Manifest this update:     Wed 22 Oct 2025 10:00:03 +0000
Manifest next update:     Thu 23 Oct 2025 10:00:03 +0000
Files and hashes:         1: 1-mZSuN8jPSBbxpJ0doddwA6wFPs.roa (hash: Sk05O6P4hwRcAJcaUWnZwocsNzWFPwC5OreYAuAopME=)
                          2: EHMSpQFqPNzAt-Ydx59V09Xss34.crl (hash: S+fKVffXKA1kvgHj84nJjptpOBaYfGnyrxTv5sdT0VM=)
                          3: OSWE1sIIbzFSVSZXWSe38hTA_Qg.roa (hash: wDvkUp5iZcHAQjx5TJixiXfTzob9BfdiEP7CxXAI0TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0b:5c:81:da:3c:8f:30:d3:7d:1b:98:22:9f:ca:2f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107312a5016a3cdcc0b7e61dc79f55d3d5ecb37e
        Validity
            Not Before: Oct 22 10:00:03 2025 GMT
            Not After : Oct 23 10:00:03 2025 GMT
        Subject: CN=3308f7081e1cc959a3e3edca6240539c79f5c57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:14:74:a1:b3:95:4f:30:18:9f:b3:f5:c8:
                    c5:0c:b0:c6:09:7a:a5:33:88:af:54:37:95:2d:f0:
                    22:ca:87:30:36:09:eb:a4:3a:ee:44:96:2d:6c:13:
                    75:e0:b6:84:ac:eb:70:d4:e0:e5:26:86:80:aa:b3:
                    73:47:81:62:28:5b:8c:36:83:eb:9e:3c:c2:2a:ee:
                    c5:7e:5a:17:db:41:c7:33:08:2f:62:b5:9c:1e:43:
                    a3:15:1d:72:8b:94:c5:fb:bf:aa:34:d2:06:4f:cd:
                    e9:69:01:57:df:8a:dd:94:28:df:87:5b:d1:a5:e8:
                    f6:3a:f0:ff:e0:0a:c7:16:d0:b3:38:c1:7c:49:7d:
                    81:da:2e:fc:7c:32:9d:09:f5:90:4e:1c:74:df:43:
                    1a:62:fb:13:3c:d2:3a:cd:e6:34:4f:a1:95:5f:77:
                    e2:e0:4e:56:dc:f5:a6:bc:64:ea:9f:ea:e6:b7:83:
                    d6:21:f5:a3:5d:24:e2:02:10:9f:65:97:a1:00:a0:
                    52:1e:79:fe:ee:5d:14:de:2a:30:17:c9:fd:95:8c:
                    83:ee:e9:cf:88:d4:f8:3a:ea:e7:b0:1e:e5:bd:e4:
                    7e:36:58:1f:99:fa:1a:e9:3f:d4:65:c3:c8:8a:6c:
                    40:74:f6:6e:4d:5a:5c:00:54:ba:52:cb:99:51:27:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:08:F7:08:1E:1C:C9:59:A3:E3:ED:CA:62:40:53:9C:79:F5:C5:7F
            X509v3 Authority Key Identifier:
                keyid:10:73:12:A5:01:6A:3C:DC:C0:B7:E6:1D:C7:9F:55:D3:D5:EC:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHMSpQFqPNzAt-Ydx59V09Xss34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/99f5c3-6b75-48bc-a8aa-3fdba9769302/1/EHMSpQFqPNzAt-Ydx59V09Xss34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:8e:80:2c:19:45:5c:b2:ff:43:e0:ca:45:be:56:2c:4c:34:
         05:e8:1b:2d:71:a5:c6:aa:9f:31:93:c1:4f:bd:8c:d9:ab:cd:
         58:69:61:d6:7d:e9:cb:44:69:9c:11:f8:57:89:ca:82:50:72:
         0b:a2:32:31:b1:a2:f7:1d:79:d7:fe:2a:33:24:fe:37:f1:83:
         94:43:23:93:6e:7e:cb:da:0c:7d:ba:04:7c:fb:6e:29:1a:c2:
         79:93:63:15:26:81:c7:22:ea:be:b2:5a:a7:a0:76:93:f5:00:
         b6:a6:04:22:62:56:c3:d1:77:0a:2c:ce:45:9d:8b:f7:6a:45:
         cf:f6:00:31:55:1a:70:57:da:4e:7f:bd:73:ad:89:ce:fa:72:
         b9:06:4a:23:a8:d3:e0:0c:c8:d3:26:10:9d:4b:0d:fe:1b:1f:
         71:a3:86:9f:3b:b9:66:f4:b4:3e:52:22:0e:4b:ad:92:73:34:
         62:0a:c4:ee:cf:de:73:c8:32:08:fa:5b:90:34:a6:74:c8:ef:
         17:e2:f3:b0:1f:07:b8:71:a3:23:c1:5a:50:02:5f:49:2a:fc:
         96:c5:7a:b3:ed:1f:fc:5a:0b:f7:e6:91:cb:8d:c3:aa:92:11:
         23:d2:70:b1:86:e6:a7:bc:91:92:3d:71:dd:15:11:35:0c:b5:
         f1:32:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:35:23 2025 by rpki-client