Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File:                     egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier:          krq7gWZF2Qqktq8unAKUnBQ5j1n1P7P0j6vI28MB708=
Subject key identifier:   62:EA:5E:29:C2:CA:DD:68:99:50:32:A8:F6:28:F9:87:FF:33:89:E9
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer:       /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial:       019A4D06175469476C02FBE580508AC84078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number:          1224
Signing time:             Tue 04 Nov 2025 04:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 04:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 04:00:36 +0000
Files and hashes:         1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: voyo6bD92I3UAqUCnSvcYYO7teSzeJhrX5MkfL6O9Wk=)
                          2: h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa (hash: SWkmFiL0pM+fIwknjB1oWTVUsg4SQOvXw9O+NxZEonA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:06:17:54:69:47:6c:02:fb:e5:80:50:8a:c8:40:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
        Validity
            Not Before: Nov  4 04:00:36 2025 GMT
            Not After : Nov  5 04:00:36 2025 GMT
        Subject: CN=62ea5e29c2cadd68995032a8f628f987ff3389e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:24:56:d7:e9:d1:4f:46:36:83:74:36:ff:
                    e9:e5:84:76:35:27:bd:ab:bb:36:ed:82:39:7f:05:
                    99:6c:66:85:f3:35:a5:0f:72:df:68:16:15:9b:e7:
                    4d:d4:ef:6a:28:95:4d:17:c8:08:29:53:c7:50:36:
                    41:e1:2c:9e:8e:ad:8d:2c:51:7e:3e:ae:5e:32:63:
                    f2:6f:7a:b2:08:d7:a2:1b:00:ec:28:2a:12:af:c1:
                    39:0c:aa:86:7e:15:54:f6:5a:1f:ea:60:2e:45:45:
                    c4:6e:be:f6:89:a7:7a:9f:e3:6e:cc:ff:0b:a0:ea:
                    fc:63:a7:c2:96:98:f5:fb:66:76:24:84:71:21:b5:
                    97:8c:87:61:52:83:3d:7e:33:89:e7:d8:f4:7f:3a:
                    3f:af:2b:e8:ac:32:48:0b:3a:a0:cf:27:08:a9:41:
                    01:bd:a0:56:07:4c:01:82:fd:9b:67:60:9e:f9:4e:
                    20:48:ac:59:53:17:23:13:96:01:c6:3d:7f:05:89:
                    86:8e:d5:3d:2d:c0:f7:20:d5:e4:42:a5:92:99:14:
                    33:6e:d8:38:9e:70:84:5f:eb:15:a0:5d:70:bb:78:
                    06:77:13:3b:01:89:ff:be:54:fc:95:af:36:23:42:
                    b7:80:bb:9c:9d:f8:c7:4b:2e:95:5b:29:68:84:5e:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EA:5E:29:C2:CA:DD:68:99:50:32:A8:F6:28:F9:87:FF:33:89:E9
            X509v3 Authority Key Identifier:
                keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:73:7c:ee:e5:d8:e7:c8:24:c8:f2:32:24:26:55:1b:f7:f1:
         e7:c1:5f:bc:37:c9:cb:be:61:37:77:bb:d6:da:8e:bc:ef:bb:
         40:63:7c:47:ff:c6:12:11:5a:60:f0:fa:63:0f:9f:f1:06:38:
         a5:85:ff:1c:ae:35:5e:13:2d:08:f8:91:a9:88:6f:02:06:d6:
         ff:71:50:49:b0:39:0a:5b:48:0e:c8:f6:fd:d3:59:e4:eb:6f:
         11:ad:4d:27:5c:88:52:c8:a9:b3:a3:ce:9b:3d:39:cb:d0:89:
         a2:ea:45:67:bb:4c:9c:8a:ba:83:2a:af:9b:60:d1:79:c6:95:
         3d:1f:49:b5:cd:6a:c8:73:9d:54:d0:01:64:23:51:41:e2:4f:
         b2:0c:27:94:14:2b:6e:77:a0:ea:7c:1e:5c:12:ef:1d:47:1c:
         1d:d5:a3:82:ef:a6:f1:81:34:7c:55:87:24:89:b6:83:84:31:
         42:6e:9d:45:b0:23:60:c4:f1:05:ba:c6:fd:65:ff:5b:aa:f6:
         9a:98:b5:5b:dc:e8:db:f8:c0:77:56:61:a3:40:ed:a7:b1:d1:
         11:99:18:4d:4e:ac:a2:35:18:38:e4:30:2b:df:04:66:20:ab:
         b5:e1:64:67:84:77:6b:4e:e0:e5:47:3e:a2:5e:a0:dc:a3:cf:
         fd:cd:b9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:35:57 2025 by rpki-client