Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
File:                     EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft (raw, json)
Hash identifier:          wy9gySWzOz952neGcqZSV/e0bPE9JtsEFp17h4cKS0Q=
Subject key identifier:   D6:A5:E3:FA:6E:23:69:B2:F0:65:DF:04:58:14:34:74:44:B6:E6:C8
Authority key identifier: 12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18
Certificate issuer:       /CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
Certificate serial:       019A296771EDAA22FC3938097D9A25253F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
Manifest number:          1306
Signing time:             Tue 28 Oct 2025 06:00:36 +0000
Manifest this update:     Tue 28 Oct 2025 06:00:36 +0000
Manifest next update:     Wed 29 Oct 2025 06:00:36 +0000
Files and hashes:         1: EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl (hash: xcDBe/WD1Z/rlSC2AHK9fSGWNde4vJ/oCv438V1eXbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:67:71:ed:aa:22:fc:39:38:09:7d:9a:25:25:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18
        Validity
            Not Before: Oct 28 06:00:36 2025 GMT
            Not After : Oct 29 06:00:36 2025 GMT
        Subject: CN=d6a5e3fa6e2369b2f065df045814347444b6e6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:54:ee:7e:90:ff:8a:0a:40:69:54:35:8e:
                    19:cf:e2:59:03:79:b7:3f:af:02:62:d0:4a:e5:fa:
                    f9:da:0b:7a:66:06:bf:de:19:0d:5d:a2:f1:40:44:
                    fe:fa:35:ae:98:b4:13:30:ad:ff:df:b8:cf:d3:5c:
                    10:cd:38:a5:f8:d4:6d:1a:d3:f5:c6:e9:d1:df:4c:
                    8c:bd:91:2b:37:89:6e:e4:cb:99:19:0d:e1:75:65:
                    73:9a:54:26:94:82:49:20:ec:50:bc:07:8c:7b:ce:
                    ea:83:ad:27:f3:a9:40:a8:cc:5f:65:ce:69:86:ee:
                    ce:d7:75:4d:85:58:d4:c9:78:69:52:f6:2e:5a:2a:
                    0d:d1:51:94:5f:4a:3c:e4:f8:45:02:9e:c6:01:2b:
                    36:72:30:d4:52:69:98:36:1e:cf:32:18:36:86:b9:
                    7c:17:f0:4b:32:a6:53:38:53:08:3c:1c:08:2f:cc:
                    6e:39:50:78:69:ec:82:c6:af:5e:ea:71:4e:4d:aa:
                    6c:6f:e7:e0:e5:33:a5:ba:f7:3f:ea:10:c4:cf:22:
                    de:1b:28:85:c5:a4:5f:b8:a6:f8:5b:c4:80:24:fa:
                    0f:a2:29:9b:23:19:d6:b6:c0:5a:13:38:75:3b:da:
                    02:8b:0d:f0:b3:6c:c6:89:b7:e5:7a:4a:b5:72:52:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:E3:FA:6E:23:69:B2:F0:65:DF:04:58:14:34:74:44:B6:E6:C8
            X509v3 Authority Key Identifier:
                keyid:12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:17:43:47:d6:10:26:ed:e8:5a:f2:33:df:72:43:ba:21:56:
         3a:6d:24:d8:59:5c:57:91:13:74:60:24:48:42:e4:03:79:da:
         d5:b4:8f:9c:94:a7:0c:13:84:9c:c7:47:c3:28:90:97:c9:8d:
         4a:41:14:82:ef:1c:c2:51:d6:15:45:4c:ee:0e:b3:76:d2:f6:
         73:20:b3:41:19:84:f1:6f:86:93:9d:39:66:83:d7:13:00:55:
         b7:47:5d:ae:81:2c:2b:a0:95:3a:81:99:de:35:d0:1f:2f:86:
         7d:8d:e7:e9:a4:e8:31:6a:d6:18:6f:4b:b0:34:e9:28:12:e6:
         44:35:4d:29:07:6c:4c:88:19:41:d8:01:cb:15:1b:a9:05:8f:
         66:b2:a0:5c:7c:85:d1:89:2b:c8:cf:06:9f:39:09:a2:df:9a:
         e9:5b:13:2a:55:ac:44:da:fd:01:10:8a:9c:68:37:d0:9f:c7:
         3c:1e:44:57:69:26:3c:ed:90:ee:10:5b:b4:a4:7c:bc:21:8c:
         2e:e5:82:22:47:66:fa:06:b5:70:ba:ff:64:00:f2:75:78:2a:
         39:85:b1:71:56:08:6c:7a:7b:0f:ea:4e:9d:ee:a6:27:ae:60:
         d4:83:be:81:db:96:30:fb:50:56:1d:cc:61:f1:2b:ba:cb:0a:
         e0:c9:22:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopZ3HtqiL8OTgJfZolJT+AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTEwOGI0NmMyNWQ5MzJiNjUwNmMzZWYwYTg3ZThiODIx
MmVhMTgwHhcNMjUxMDI4MDYwMDM2WhcNMjUxMDI5MDYwMDM2WjAzMTEwLwYDVQQD
EyhkNmE1ZTNmYTZlMjM2OWIyZjA2NWRmMDQ1ODE0MzQ3NDQ0YjZlNmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48tU7n6Q/4oKQGlUNY4Zz+JZA3m3
P68CYtBK5fr52gt6Zga/3hkNXaLxQET++jWumLQTMK3/37jP01wQzTil+NRtGtP1
xunR30yMvZErN4lu5MuZGQ3hdWVzmlQmlIJJIOxQvAeMe87qg60n86lAqMxfZc5p
hu7O13VNhVjUyXhpUvYuWioN0VGUX0o85PhFAp7GASs2cjDUUmmYNh7PMhg2hrl8
F/BLMqZTOFMIPBwIL8xuOVB4aeyCxq9e6nFOTapsb+fg5TOluvc/6hDEzyLeGyiF
xaRfuKb4W8SAJPoPoimbIxnWtsBaEzh1O9oCiw3ws2zGibflekq1clIwJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNal4/puI2my8GXfBFgUNHREtubIMB8GA1UdIwQY
MBaAFBLhCLRsJdkytlBsPvCofouCEuoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjkt
ZWE0YTZkYzE2M2M5LzEvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjktZWE0YTZkYzE2M2M5
LzEvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEhdDR9YQ
Ju3oWvIz33JDuiFWOm0k2FlcV5ETdGAkSELkA3na1bSPnJSnDBOEnMdHwyiQl8mN
SkEUgu8cwlHWFUVM7g6zdtL2cyCzQRmE8W+Gk505ZoPXEwBVt0ddroEsK6CVOoGZ
3jXQHy+GfY3n6aToMWrWGG9LsDTpKBLmRDVNKQdsTIgZQdgByxUbqQWPZrKgXHyF
0YkryM8GnzkJot+a6VsTKlWsRNr9ARCKnGg30J/HPB5EV2kmPO2Q7hBbtKR8vCGM
LuWCIkdm+ga1cLr/ZADydXgqOYWxcVYIbHp7D+pOne6mJ65g1IO+gduWMPtQVh3M
YfErussK4Mkiaw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 11:26:45 2025 by rpki-client