Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
File:                     EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft (raw, json)
Hash identifier:          pS9AVyeNeq7OaqAk6FdnnntBniJHU5K9zwWqFoaWJeE=
Subject key identifier:   0C:80:26:AE:AE:A3:C5:65:C8:92:7C:BF:47:E2:97:27:25:03:AF:B9
Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B
Certificate issuer:       /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
Certificate serial:       019A4B180173E929D9F96B495AAFAA5E9ABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
Manifest number:          1525
Signing time:             Mon 03 Nov 2025 19:00:55 +0000
Manifest this update:     Mon 03 Nov 2025 19:00:55 +0000
Manifest next update:     Tue 04 Nov 2025 19:00:55 +0000
Files and hashes:         1: APdV8HOuK_baV9w8xFhYPy7-2P4.roa (hash: IitULqtIj0Y4YtBexT7yVT81AkWjJbb2T56Qs1uC9QM=)
                          2: EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl (hash: GD34vuSbRqf5gAROZx5qoztxlZmX0R3IVCUkJD5tK14=)
                          3: Fb0skEyX6qOFH4mxiCD0y38K50g.roa (hash: WuLRLLi+4HFH3PUcwNxaQ3ghnNVvZQgN47f0xDAHYEw=)
                          4: fcEGyk-ShkerhmvdFRcRV3UxI0Q.roa (hash: j94ZQOuH+xS4iNOpDw2YYuethGcrhVLCQhL5yC+U8s8=)
                          5: jGYUYth-JS9LpEgUYHaooWrb7Tc.roa (hash: frlNr3HLKX2GRFBcwYSe2xt1qGCkZ5xJR/twdkhb4cE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4b:18:01:73:e9:29:d9:f9:6b:49:5a:af:aa:5e:9a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b
        Validity
            Not Before: Nov  3 19:00:55 2025 GMT
            Not After : Nov  4 19:00:55 2025 GMT
        Subject: CN=0c8026aeaea3c565c8927cbf47e297272503afb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:40:02:a6:00:f1:41:8d:21:29:e8:c8:60:26:
                    f0:a4:c9:c4:ec:f5:95:ed:88:a5:c1:12:55:e4:92:
                    3c:8d:24:19:fa:81:38:7a:66:eb:ca:08:78:20:e5:
                    e4:f8:e0:0e:b1:4e:39:cf:31:c3:2b:f7:2d:a8:a0:
                    1e:6c:54:c9:eb:ac:a0:c7:28:d8:cf:15:29:02:42:
                    2a:f2:5b:f9:c3:2d:c6:23:6c:05:a1:e1:67:ce:78:
                    81:12:c1:9a:8c:b3:b5:56:22:d5:64:89:08:8a:32:
                    ef:aa:35:a5:e4:ce:a2:3f:d8:5c:74:4f:05:7f:96:
                    89:83:4d:fc:fa:63:38:cc:37:a8:5f:05:61:7d:90:
                    88:df:1e:f5:c8:35:bf:42:8c:ef:fb:4c:6c:92:df:
                    f2:13:80:9f:91:16:0d:ed:65:56:ad:6b:73:82:9b:
                    b8:45:50:e4:9f:14:46:ed:b3:09:96:c9:52:b4:bc:
                    2b:5a:e0:f1:04:96:48:13:a9:ab:75:90:d4:15:3f:
                    fd:74:55:2c:66:c0:37:1e:3b:90:c2:49:63:91:2a:
                    c6:2e:6c:11:89:60:ce:ff:5c:51:8f:a8:e1:f0:c8:
                    f6:fa:86:f9:3f:fd:80:ca:3c:8b:e3:cd:a3:f9:62:
                    2f:4c:7f:39:95:56:29:41:11:98:63:54:86:45:a7:
                    47:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:80:26:AE:AE:A3:C5:65:C8:92:7C:BF:47:E2:97:27:25:03:AF:B9
            X509v3 Authority Key Identifier:
                keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:f5:01:5a:fb:ad:ba:83:3a:1a:a0:c1:0c:ff:cd:e8:4f:c4:
         7b:74:ec:fa:b2:3b:f1:61:33:6c:be:4a:5a:32:7e:ad:b2:6f:
         90:bc:aa:ad:12:35:a0:47:23:e5:c1:07:c9:86:da:71:2b:6d:
         3e:f5:08:6d:a7:4d:28:73:4f:67:2d:dc:ae:91:68:3d:c1:da:
         53:db:bd:92:06:63:f7:22:10:69:fe:b4:80:9d:34:0b:ff:06:
         28:b9:5f:61:78:36:20:35:2b:8e:a1:07:64:b4:86:ca:5b:6a:
         3d:9e:42:4c:94:71:7e:00:1c:b6:7a:c9:63:5d:8b:5f:e7:f1:
         b3:5d:9f:69:34:fd:d2:0a:16:85:38:83:d2:b8:68:df:50:7f:
         77:f4:5f:4e:95:22:40:5a:a8:9b:b5:83:48:c9:ce:50:e2:98:
         a5:82:6e:3f:13:97:f6:22:33:51:bc:5d:ff:ba:2f:31:24:5d:
         f0:d0:b4:67:0a:87:8c:33:6c:d1:8c:7a:f4:14:85:d5:3b:51:
         63:b2:e0:c3:f9:41:2a:04:15:05:31:9c:00:6e:d0:40:d3:7a:
         3b:02:87:a4:c7:1a:70:4a:aa:91:03:41:35:49:59:84:c3:7d:
         c7:23:e5:0f:f6:03:48:1f:fe:82:b2:60:fa:89:f5:9b:5d:40:
         42:86:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:04:25 2025 by rpki-client