Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
File:                     EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft (raw, json)
Hash identifier:          vHCzMyve71TWWkxHLXhmBYX2o9vrdZTIciNe/skKcug=
Subject key identifier:   27:96:2C:47:6D:F0:31:1A:FD:06:7A:12:B1:D1:0F:D0:C3:F7:87:65
Authority key identifier: 10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90
Certificate issuer:       /CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
Certificate serial:       01995C0DEAE7A53EE2C85A7D4512A55294B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
Manifest number:          0629
Signing time:             Thu 18 Sep 2025 09:00:39 +0000
Manifest this update:     Thu 18 Sep 2025 09:00:39 +0000
Manifest next update:     Fri 19 Sep 2025 09:00:39 +0000
Files and hashes:         1: 9Z7pH5NPnAqikrLECUV4KgNs0A8.roa (hash: MDaAz2g07ukZgilrtHl7Gypl8ywa3pObRf5OUvVo4KA=)
                          2: EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl (hash: 4Wcx5enFM3T09lBpu3VtMycW5CkfixeuCtdPvxDC+Kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 08:32:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5c:0d:ea:e7:a5:3e:e2:c8:5a:7d:45:12:a5:52:94:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1083f3f195974f0e90084e0e327ff5b667e6fd90
        Validity
            Not Before: Sep 18 09:00:39 2025 GMT
            Not After : Sep 19 09:00:39 2025 GMT
        Subject: CN=27962c476df0311afd067a12b1d10fd0c3f78765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:30:25:da:80:9f:42:11:7e:e4:03:c5:3e:5e:
                    f7:17:2e:ca:b5:0d:fe:84:7d:63:27:90:07:b2:64:
                    1e:59:74:b8:b1:9e:cc:9e:70:09:07:e5:94:fb:a6:
                    6e:17:a1:68:9f:6c:7b:d5:ed:85:48:ea:4d:ec:c7:
                    12:bd:30:b2:b0:fa:db:38:d0:75:bc:85:ee:f8:9d:
                    18:22:7b:04:fc:51:2d:83:cd:d6:57:fb:4b:43:04:
                    88:40:02:6f:35:72:9e:3c:5d:fb:3f:f4:1a:27:39:
                    c0:91:38:a2:25:32:54:d1:d8:cd:5f:6a:e4:4d:ae:
                    00:54:2e:a7:9c:63:2e:d8:a3:6c:91:a4:4f:a6:df:
                    98:fb:92:30:cc:62:fb:b7:6a:2e:50:b1:a1:a1:4d:
                    e0:3c:a4:22:1e:2e:87:b9:14:09:6e:86:d5:3b:c9:
                    f6:c2:0c:bb:aa:19:47:41:ab:7d:79:a1:6b:54:1e:
                    a1:93:f8:ad:64:68:f8:9f:3a:27:fe:a7:aa:62:d9:
                    a9:3c:06:2f:bb:35:68:06:6a:9a:f3:0f:97:df:aa:
                    82:5e:0d:a2:04:53:05:22:10:e7:59:7b:dc:fd:5e:
                    1e:da:cc:d7:a3:4e:5f:2c:ac:ba:e3:ff:5c:4c:5a:
                    b3:bf:d3:4b:4e:8e:a5:c5:93:3e:e5:9f:a3:c5:42:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:96:2C:47:6D:F0:31:1A:FD:06:7A:12:B1:D1:0F:D0:C3:F7:87:65
            X509v3 Authority Key Identifier:
                keyid:10:83:F3:F1:95:97:4F:0E:90:08:4E:0E:32:7F:F5:B6:67:E6:FD:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/11dca8-23d4-424a-8965-3b1c55e3de97/1/EIPz8ZWXTw6QCE4OMn_1tmfm_ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:5e:16:7c:89:d3:60:0c:8c:b3:d7:85:32:a7:f5:ad:13:
         1e:b0:67:b7:ed:df:04:86:95:3f:45:9e:c5:bc:fa:6c:b3:b3:
         76:e3:0b:4f:ec:76:84:3e:f6:13:85:84:d2:48:4e:75:c2:f6:
         83:ae:a8:57:b4:b3:eb:70:7e:d6:af:59:bd:dd:49:4a:86:93:
         30:37:67:b1:59:a6:da:67:cf:e4:72:45:2f:3c:d3:91:b9:93:
         22:7f:f7:ef:61:bf:e5:57:bc:6e:ef:25:ae:35:7a:c3:49:8f:
         e1:b0:aa:eb:19:f1:5c:12:fd:86:09:11:69:a5:62:6d:fb:21:
         43:cf:c2:47:85:91:3d:5b:fa:16:5d:4d:b4:0f:83:e8:af:fb:
         10:10:85:53:94:6a:9a:b5:e1:4e:1b:4b:01:59:ed:8b:fe:17:
         ff:ac:13:37:40:7d:58:87:b8:78:fd:ba:38:33:74:77:40:68:
         2e:ce:99:5d:b0:97:aa:58:39:62:69:48:43:af:3a:85:62:57:
         af:55:58:0a:b0:56:2f:a1:a8:6b:8b:50:3c:7e:3f:7e:e7:30:
         f7:d3:2e:de:81:30:b4:26:ba:df:57:55:b1:21:c9:af:41:11:
         9d:e7:22:c0:a8:bb:3d:46:83:78:2f:8e:f9:e0:a4:43:37:e8:
         ef:50:52:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 10:21:11 2025 by rpki-client