Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
File:                     eBC14tQZE_koo06ZYbf8iWSFAEY.mft (raw, json)
Hash identifier:          9kHqvCx2mOqWz/hIzz28/QWkdns6vLU/INxUrbMjGdY=
Subject key identifier:   E0:09:52:1F:16:EE:D5:4B:9F:DF:E6:B3:8C:C0:D3:09:C9:0D:57:32
Authority key identifier: 78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46
Certificate issuer:       /CN=7810b5e2d41913f928a34e9961b7fc8964850046
Certificate serial:       019A71EEC7A833883C79F1AD63D75975BE28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
Manifest number:          6F
Signing time:             Tue 11 Nov 2025 08:01:05 +0000
Manifest this update:     Tue 11 Nov 2025 08:01:05 +0000
Manifest next update:     Wed 12 Nov 2025 08:01:05 +0000
Files and hashes:         1: cE7D59zxehJZdZNEvYWQXDVNz7A.roa (hash: p6fUjsKyUdQv5Z7o25/yMrHwWCat6eLyUeS3asqc+Yo=)
                          2: eBC14tQZE_koo06ZYbf8iWSFAEY.crl (hash: arhKDNC4zLdDk0TXvLeVOpWZxSS+OPdt9I9ygiMk6mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:c7:a8:33:88:3c:79:f1:ad:63:d7:59:75:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7810b5e2d41913f928a34e9961b7fc8964850046
        Validity
            Not Before: Nov 11 08:01:05 2025 GMT
            Not After : Nov 12 08:01:05 2025 GMT
        Subject: CN=e009521f16eed54b9fdfe6b38cc0d309c90d5732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:90:6c:20:04:51:00:72:2a:83:9e:01:f6:
                    0c:c4:fc:d8:91:c6:90:79:4a:1c:f4:26:68:0a:58:
                    37:0c:c3:42:cc:86:8a:c7:4f:89:c8:ec:52:4c:ff:
                    cb:58:e1:14:d2:35:bf:b7:a5:8d:73:29:e1:7e:bb:
                    f8:dd:d3:9e:5e:24:a1:da:2f:26:6f:35:e7:45:72:
                    f4:a1:59:56:59:3b:d2:55:9c:a0:ea:48:14:8e:04:
                    96:ec:32:c3:13:c9:70:87:0a:f8:04:cf:fe:2a:e9:
                    cb:bc:f9:25:fc:e4:7d:f9:22:fe:fe:90:c3:30:cb:
                    b6:cf:31:53:ff:b4:b8:3b:1c:a9:c7:ec:17:af:24:
                    7f:b0:79:2e:c8:2e:70:a7:8e:b9:c6:8d:a3:90:f2:
                    bd:ee:be:98:c0:27:99:4c:69:a6:d7:cf:94:89:ee:
                    71:c4:39:6c:b4:20:14:7d:68:ea:8f:6e:51:ee:15:
                    20:47:e2:c5:29:fd:92:7e:a4:ee:39:a0:ba:b0:29:
                    64:69:6b:f2:1c:5d:b7:99:16:41:65:1c:e9:d7:16:
                    32:70:d4:5d:86:eb:9d:f5:5b:48:bc:45:45:47:ff:
                    45:b1:2e:83:b1:c8:fb:04:d8:f6:e6:ee:32:59:c3:
                    a8:87:aa:e9:13:d7:86:cf:c0:3b:2d:e9:fa:7d:8a:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:09:52:1F:16:EE:D5:4B:9F:DF:E6:B3:8C:C0:D3:09:C9:0D:57:32
            X509v3 Authority Key Identifier:
                keyid:78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:13:2c:94:41:b4:de:9a:d9:83:ad:56:a8:e3:82:6c:2d:36:
         34:28:1a:21:8e:45:79:10:6f:80:a7:58:a7:43:d6:81:a6:5a:
         26:0d:e5:2d:41:8a:62:7c:cd:5f:e0:1a:a0:ba:41:24:26:8d:
         26:bc:3a:71:7a:38:8f:72:d9:5c:68:14:13:15:a4:8f:39:b9:
         c8:d5:1f:2b:88:09:81:a4:9d:42:13:5f:37:e5:19:b3:df:6f:
         5c:23:d0:0d:44:b6:64:4b:46:ff:7d:f4:ac:bc:ef:f5:78:f9:
         dd:6e:91:20:8d:eb:7c:90:24:4f:7e:62:31:5d:ac:7e:c5:df:
         a1:54:bb:c7:aa:76:68:94:67:a7:21:5f:63:cf:db:6d:bc:ad:
         9a:f5:49:91:b5:3a:13:96:44:ee:64:9b:0d:4d:78:7b:bf:44:
         d2:35:ab:ff:eb:76:16:89:09:e0:b8:27:92:3a:42:8a:17:fe:
         5b:60:de:12:fe:d1:6e:88:f8:af:15:12:f2:d6:cf:02:04:5a:
         d4:12:17:a4:28:54:80:d5:dd:b4:ca:0c:a5:04:54:83:8d:11:
         7a:d9:94:ab:d0:8b:85:1e:53:eb:dc:9c:4f:c2:59:a5:79:43:
         5b:97:29:1a:50:18:56:42:30:d5:de:e9:99:38:0d:36:88:05:
         bf:05:0a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:50 2025 by rpki-client