Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
File:                     eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft (raw, json)
Hash identifier:          rd8QjNkG9S+axFbxjbVvMx33PeOPIGXUTY2E9YD0eCY=
Subject key identifier:   7C:4B:7D:F2:3F:0C:A2:24:1A:64:E8:11:97:BA:67:07:BA:35:A7:AF
Authority key identifier: 78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E
Certificate issuer:       /CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
Certificate serial:       019A70A4C9A4357CBD58E10D9EDBA5603D0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
Manifest number:          0BC3
Signing time:             Tue 11 Nov 2025 02:00:39 +0000
Manifest this update:     Tue 11 Nov 2025 02:00:39 +0000
Manifest next update:     Wed 12 Nov 2025 02:00:39 +0000
Files and hashes:         1: SeZ4MHkWijanJyiqLEKOSjkards.roa (hash: 0MJVFVX2eka97RjF2zWc+vftmisrddmh+e7zXYl/UsE=)
                          2: eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl (hash: /oLZFl0JliKmZCV3RkFTAfNfg3kcAPedmFcF6FOk43Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:a4:c9:a4:35:7c:bd:58:e1:0d:9e:db:a5:60:3d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788b7e4c045cdae78b5bf43f2c53f1a94d9e159e
        Validity
            Not Before: Nov 11 02:00:39 2025 GMT
            Not After : Nov 12 02:00:39 2025 GMT
        Subject: CN=7c4b7df23f0ca2241a64e81197ba6707ba35a7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:8b:41:66:4b:4c:26:0e:15:82:55:d5:5c:
                    57:75:31:8c:da:00:5f:6b:95:97:24:64:93:0e:2f:
                    a8:ca:5a:4d:49:b2:3d:47:61:f6:29:59:dd:ae:87:
                    1a:7c:4d:6e:ab:6a:69:f9:d0:a5:de:68:9d:94:0d:
                    f8:15:6e:bb:ac:fb:f2:39:40:cf:97:22:d5:10:55:
                    0c:f6:a6:29:35:4a:38:c1:f3:b4:34:02:56:fd:db:
                    3f:22:69:b0:a2:f6:82:ec:57:01:49:57:f8:c4:b9:
                    fb:13:f0:8a:fe:0b:40:7c:fb:74:82:e7:ae:dd:f4:
                    f1:1d:bf:d2:ad:36:13:05:44:8e:12:4d:52:18:41:
                    b7:1a:73:37:a8:c7:8d:9e:dd:c0:5c:05:3e:b7:c1:
                    31:e1:b5:12:f8:34:09:39:7d:07:5a:ff:80:92:97:
                    f6:f6:c1:be:fa:4c:b8:e0:43:61:eb:cf:f5:c6:19:
                    2d:c9:a1:44:43:05:48:ec:bc:df:a2:b3:77:38:81:
                    42:89:0f:bb:77:4d:63:90:99:24:f5:43:81:d0:e2:
                    dd:a2:64:82:99:05:43:6e:63:6d:5f:49:e1:88:57:
                    70:de:17:20:3f:c6:28:40:4c:cc:b6:a7:6a:aa:3a:
                    f4:6d:42:b3:b3:04:02:31:25:04:12:9b:13:c7:cd:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4B:7D:F2:3F:0C:A2:24:1A:64:E8:11:97:BA:67:07:BA:35:A7:AF
            X509v3 Authority Key Identifier:
                keyid:78:8B:7E:4C:04:5C:DA:E7:8B:5B:F4:3F:2C:53:F1:A9:4D:9E:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7613bd-0349-420d-8808-0a26e6e57f20/1/eIt-TARc2ueLW_Q_LFPxqU2eFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:44:8b:65:a5:b3:7e:79:e0:d3:38:5c:00:38:4b:49:45:76:
         d2:07:57:1f:9a:c2:8e:b1:da:21:a5:3e:67:85:48:2c:c9:89:
         ab:02:f4:5e:ce:e1:87:ac:ff:be:49:d0:4d:76:66:ae:73:13:
         6d:55:e2:2d:fe:96:d3:5d:44:be:76:5b:9f:17:ff:21:ba:69:
         7a:30:c6:81:19:4f:24:1a:27:c3:e9:54:1f:e6:c3:07:70:63:
         eb:9e:09:40:ec:d1:cf:6c:b4:c3:53:e6:cd:9f:98:f3:0e:a7:
         81:88:b5:19:1c:41:c7:a9:08:ca:df:39:d7:9e:eb:65:d8:b5:
         e1:4c:c0:72:b9:35:18:9b:80:dd:83:4d:a6:05:7c:df:19:23:
         e4:8d:91:1a:03:87:41:9c:31:3c:7b:46:4b:2a:70:2a:cc:ae:
         ef:cc:7f:81:ea:33:78:ff:a4:f3:a6:80:5b:42:6d:5e:23:f8:
         cd:23:b4:6a:b4:61:ce:12:0a:96:84:85:bc:b8:a2:4c:3e:bd:
         36:54:46:d4:38:6b:40:48:f3:df:0b:bd:3d:ab:ed:e5:d3:fa:
         9d:36:90:01:fc:ba:05:89:a7:29:b1:d0:f3:95:02:b9:49:d0:
         8a:34:22:e9:e7:3b:35:ba:15:b1:73:f5:c7:30:11:b4:c6:1c:
         a9:e2:ff:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:38 2025 by rpki-client