Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          BLtOjwDLnEeNqnQqHr9GQVLPiApMNJgdbezyX/qaaSo=
Subject key identifier:   D1:A6:0B:C1:34:05:65:BB:CB:09:D9:51:CE:B8:1A:CC:B0:50:E4:23
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       019A1384974F9BF2ADE25AC16B01BB1DEE24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          16F0
Signing time:             Fri 24 Oct 2025 00:00:47 +0000
Manifest this update:     Fri 24 Oct 2025 00:00:47 +0000
Manifest next update:     Sat 25 Oct 2025 00:00:47 +0000
Files and hashes:         1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: bpqZrbbEWJyPTTKj0eTMatxub2p9TSZB+jJuqHjpAbw=)
                          2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:13:84:97:4f:9b:f2:ad:e2:5a:c1:6b:01:bb:1d:ee:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: Oct 24 00:00:47 2025 GMT
            Not After : Oct 25 00:00:47 2025 GMT
        Subject: CN=d1a60bc1340565bbcb09d951ceb81accb050e423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:66:ee:02:a8:d6:e4:2f:62:00:b9:41:5e:12:
                    2f:ac:55:6b:79:70:b8:e1:26:74:75:a3:f9:6b:20:
                    50:c5:7e:6d:e6:bb:32:78:c6:cb:2d:91:b4:84:31:
                    57:3a:34:99:e5:17:39:62:49:77:ef:36:67:f1:c8:
                    a7:70:62:0a:da:5d:2c:b3:e5:a9:b2:3c:73:95:9e:
                    32:6e:73:70:e6:e5:de:58:f6:36:63:01:98:06:1d:
                    52:b9:7f:c8:df:e4:a0:71:7d:3f:92:9f:e8:ea:d2:
                    43:0e:54:c0:5e:db:90:03:78:87:c7:9d:7b:20:a6:
                    44:3c:5c:42:f8:2e:c2:42:fe:22:ab:9e:0f:b8:66:
                    10:f7:03:98:bc:b2:c0:81:2f:9e:82:66:e3:93:52:
                    11:cc:a9:57:43:43:00:0b:04:f8:6f:2a:43:d6:41:
                    53:f8:e6:b2:14:17:f6:7f:98:02:09:48:84:29:68:
                    56:9a:1b:8e:4d:9e:31:19:3f:df:f4:f5:00:01:4c:
                    08:5b:c3:7a:48:65:5b:0d:ae:4f:38:10:5b:63:75:
                    27:89:d8:12:90:4a:b9:a1:68:94:21:a7:02:d0:2b:
                    91:86:48:1b:1d:74:de:36:a4:66:b4:f5:c6:58:44:
                    bb:d4:47:0a:68:15:b8:ce:d0:89:48:22:81:65:0e:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A6:0B:C1:34:05:65:BB:CB:09:D9:51:CE:B8:1A:CC:B0:50:E4:23
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a4:cc:00:05:23:9e:53:0f:da:4c:23:1d:a0:07:4b:ac:5a:
         67:3d:17:24:3d:60:4b:cc:1b:03:4c:bb:9c:ee:bb:bb:a9:35:
         ae:3d:a3:46:80:d9:ef:b6:19:17:2b:05:48:fc:13:88:5e:72:
         93:12:de:11:64:bc:56:37:a6:a3:b6:16:55:11:6f:49:ef:cc:
         8a:67:79:00:fc:d9:bf:e0:06:71:8a:cf:64:1c:5c:e0:21:ab:
         73:09:4b:fc:47:91:d4:a7:5f:e2:ad:91:10:9d:24:21:c6:05:
         a0:b7:1e:7e:2e:80:8c:a8:aa:d8:d5:7f:07:d4:cc:44:dd:1f:
         5e:f4:ef:03:4d:ee:73:43:27:0f:aa:55:7b:65:82:9b:56:3d:
         4c:b1:1b:e8:db:3a:b1:50:de:36:2f:6d:95:c3:f9:22:94:5b:
         51:c4:7a:8e:f1:6d:8b:5f:46:af:a6:97:b2:27:bb:6b:45:3f:
         8d:b9:aa:b1:9b:c6:11:b5:34:a8:74:3c:5c:87:d4:8b:48:7f:
         56:22:9e:21:c8:ed:70:e8:c1:be:22:c6:f1:c2:08:71:ed:de:
         0a:be:32:82:82:2d:a8:6d:60:90:65:55:9b:17:20:a0:98:08:
         58:97:b0:bf:27:d1:29:b5:65:c5:db:a6:77:bb:70:bc:23:ba:
         71:c9:8c:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoThJdPm/Kt4lrBawG7He4kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0
YjQ5ZjQwHhcNMjUxMDI0MDAwMDQ3WhcNMjUxMDI1MDAwMDQ3WjAzMTEwLwYDVQQD
EyhkMWE2MGJjMTM0MDU2NWJiY2IwOWQ5NTFjZWI4MWFjY2IwNTBlNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGbuAqjW5C9iALlBXhIvrFVreXC4
4SZ0daP5ayBQxX5t5rsyeMbLLZG0hDFXOjSZ5Rc5Ykl37zZn8cincGIK2l0ss+Wp
sjxzlZ4ybnNw5uXeWPY2YwGYBh1SuX/I3+SgcX0/kp/o6tJDDlTAXtuQA3iHx517
IKZEPFxC+C7CQv4iq54PuGYQ9wOYvLLAgS+egmbjk1IRzKlXQ0MACwT4bypD1kFT
+OayFBf2f5gCCUiEKWhWmhuOTZ4xGT/f9PUAAUwIW8N6SGVbDa5POBBbY3UnidgS
kEq5oWiUIacC0CuRhkgbHXTeNqRmtPXGWES71EcKaBW4ztCJSCKBZQ6/hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGmC8E0BWW7ywnZUc64GsywUOQjMB8GA1UdIwQY
MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut
N2MyNGVmMDI1OWRiLzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2UtN2MyNGVmMDI1OWRi
LzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqTMAAUj
nlMP2kwjHaAHS6xaZz0XJD1gS8wbA0y7nO67u6k1rj2jRoDZ77YZFysFSPwTiF5y
kxLeEWS8Vjemo7YWVRFvSe/Mimd5APzZv+AGcYrPZBxc4CGrcwlL/EeR1Kdf4q2R
EJ0kIcYFoLcefi6AjKiq2NV/B9TMRN0fXvTvA03uc0MnD6pVe2WCm1Y9TLEb6Ns6
sVDeNi9tlcP5IpRbUcR6jvFti19Gr6aXsie7a0U/jbmqsZvGEbU0qHQ8XIfUi0h/
ViKeIcjtcOjBviLG8cIIce3eCr4ygoItqG1gkGVVmxcgoJgIWJewvyfRKbVlxdum
d7twvCO6ccmMrQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 01:44:52 2025 by rpki-client