Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
File:                     EynNPuL-EmqCyipYyH7Vg4_ir1c.mft (raw, json)
Hash identifier:          i7YpGsRTYNLfLq1h8NXintK7VcxZ3KCTn+iVjuG6jRs=
Subject key identifier:   19:78:95:CF:FD:AF:30:A2:4D:83:76:D0:41:B5:03:AB:2B:29:33:A8
Authority key identifier: 13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57
Certificate issuer:       /CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
Certificate serial:       019A07121DE14B95E162A6D2EC92E3C87A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
Manifest number:          12CC
Signing time:             Tue 21 Oct 2025 14:00:18 +0000
Manifest this update:     Tue 21 Oct 2025 14:00:18 +0000
Manifest next update:     Wed 22 Oct 2025 14:00:18 +0000
Files and hashes:         1: EynNPuL-EmqCyipYyH7Vg4_ir1c.crl (hash: FgI6Ohl7HuRHqjjjTmWHLGfrJV3IjADwNcaRsdW1yGg=)
                          2: xRuQVNxBS_3Mgbe42rndbMsNass.roa (hash: A1raJrfsn9sVKt/kmB4hYgZNVWgJqoDFFUH8LA8mWcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:07:12:1d:e1:4b:95:e1:62:a6:d2:ec:92:e3:c8:7a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1329cd3ee2fe126a82ca2a58c87ed5838fe2af57
        Validity
            Not Before: Oct 21 14:00:18 2025 GMT
            Not After : Oct 22 14:00:18 2025 GMT
        Subject: CN=197895cffdaf30a24d8376d041b503ab2b2933a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:80:b9:66:d9:14:8d:97:de:e2:ca:4b:d0:
                    be:f1:77:34:c8:33:7a:be:3b:ef:3f:13:69:59:44:
                    7e:60:08:f6:90:d3:fa:1c:7d:e6:d0:4e:13:18:ac:
                    e6:10:9c:76:f1:00:92:c0:2f:61:d0:e9:48:e6:fd:
                    81:c8:f6:d8:9f:bb:33:dc:99:a0:9b:b2:95:e8:2b:
                    0b:14:83:c2:53:65:46:ff:4b:86:9b:98:0a:f5:44:
                    52:d0:78:9f:3d:c6:bd:01:a9:02:b6:dc:c5:bb:d6:
                    c7:1f:dc:24:02:78:9c:7c:8f:de:fe:5a:b0:e2:bd:
                    e3:da:de:70:bd:36:db:ce:db:5c:0f:c8:1f:d1:0f:
                    b7:9d:22:d2:af:6d:b9:68:b7:5d:4e:ef:6d:65:84:
                    31:c4:99:80:7f:e9:e5:7c:42:29:3c:4d:a9:a2:87:
                    53:1a:d1:7c:fb:80:ef:d5:b9:e7:e7:6a:ef:f4:96:
                    3f:28:78:22:5b:f5:4e:b3:1d:04:65:7a:fd:af:01:
                    68:b4:ce:a3:56:85:30:de:98:64:12:25:c7:e4:14:
                    e2:dc:f2:e6:dd:44:0c:aa:01:21:6b:bd:80:5e:55:
                    84:35:7f:10:b4:96:59:2d:79:7e:91:8b:4d:dd:a2:
                    c1:c9:db:91:ea:9f:17:63:2e:ef:c5:a7:ac:6d:a4:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:78:95:CF:FD:AF:30:A2:4D:83:76:D0:41:B5:03:AB:2B:29:33:A8
            X509v3 Authority Key Identifier:
                keyid:13:29:CD:3E:E2:FE:12:6A:82:CA:2A:58:C8:7E:D5:83:8F:E2:AF:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EynNPuL-EmqCyipYyH7Vg4_ir1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/af58b6-9e8f-406e-ac1c-2fc030a60cea/1/EynNPuL-EmqCyipYyH7Vg4_ir1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:17:1b:56:a0:a5:d7:19:eb:f9:22:f8:dc:17:0e:b2:e0:b3:
         3d:82:c1:1f:12:2e:e8:5a:66:e2:99:24:f0:6e:3f:4d:53:84:
         f6:ce:cc:d6:4b:31:9e:06:48:0d:8c:d2:be:35:a8:5b:48:d3:
         75:d8:68:16:f2:0f:89:8e:f0:55:40:5a:9a:09:77:01:59:54:
         05:22:d9:bf:b1:1b:47:18:a2:e3:79:f9:1b:c1:07:50:ce:d2:
         8b:6c:a6:84:45:73:14:e5:aa:f6:5f:a5:03:54:48:5f:39:45:
         3c:51:77:20:6b:c2:54:90:28:3e:d6:8e:bd:e2:49:3d:c7:9c:
         2a:1a:42:c1:70:c8:5c:c1:87:fb:2a:b3:e3:d6:4b:65:78:5d:
         8e:e1:79:49:f8:51:31:7c:9d:4b:a5:58:bf:65:2f:e9:82:d3:
         42:f0:6e:81:0a:7a:55:81:18:9a:71:bf:4c:53:13:fc:a1:1a:
         fb:cf:7b:00:ee:fc:ff:fd:07:32:78:e9:6a:d1:5e:c8:60:a1:
         7d:1e:3b:81:bf:df:03:61:5b:05:bf:75:30:91:70:ff:85:0f:
         c5:0b:32:ca:2c:b2:69:18:9e:f7:43:a0:29:3d:2b:4a:b1:04:
         13:80:81:1d:9f:5d:ac:a9:d5:a8:63:ae:a1:11:f7:77:d9:b9:
         80:52:4f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHEh3hS5XhYqbS7JLjyHowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMjljZDNlZTJmZTEyNmE4MmNhMmE1OGM4N2VkNTgzOGZl
MmFmNTcwHhcNMjUxMDIxMTQwMDE4WhcNMjUxMDIyMTQwMDE4WjAzMTEwLwYDVQQD
EygxOTc4OTVjZmZkYWYzMGEyNGQ4Mzc2ZDA0MWI1MDNhYjJiMjkzM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jiAuWbZFI2X3uLKS9C+8Xc0yDN6
vjvvPxNpWUR+YAj2kNP6HH3m0E4TGKzmEJx28QCSwC9h0OlI5v2ByPbYn7sz3Jmg
m7KV6CsLFIPCU2VG/0uGm5gK9URS0HifPca9AakCttzFu9bHH9wkAnicfI/e/lqw
4r3j2t5wvTbbzttcD8gf0Q+3nSLSr225aLddTu9tZYQxxJmAf+nlfEIpPE2poodT
GtF8+4Dv1bnn52rv9JY/KHgiW/VOsx0EZXr9rwFotM6jVoUw3phkEiXH5BTi3PLm
3UQMqgEha72AXlWENX8QtJZZLXl+kYtN3aLByduR6p8XYy7vxaesbaQyhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBl4lc/9rzCiTYN20EG1A6srKTOoMB8GA1UdIwQY
MBaAFBMpzT7i/hJqgsoqWMh+1YOP4q9XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXluTlB1TC1FbXFDeWlwWXlIN1ZnNF9pcjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9hZjU4YjYtOWU4Zi00MDZlLWFjMWMt
MmZjMDMwYTYwY2VhLzEvRXluTlB1TC1FbXFDeWlwWXlIN1ZnNF9pcjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9hZjU4YjYtOWU4Zi00MDZlLWFjMWMtMmZjMDMwYTYwY2Vh
LzEvRXluTlB1TC1FbXFDeWlwWXlIN1ZnNF9pcjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxcbVqCl
1xnr+SL43BcOsuCzPYLBHxIu6Fpm4pkk8G4/TVOE9s7M1ksxngZIDYzSvjWoW0jT
ddhoFvIPiY7wVUBamgl3AVlUBSLZv7EbRxii43n5G8EHUM7Si2ymhEVzFOWq9l+l
A1RIXzlFPFF3IGvCVJAoPtaOveJJPcecKhpCwXDIXMGH+yqz49ZLZXhdjuF5SfhR
MXydS6VYv2Uv6YLTQvBugQp6VYEYmnG/TFMT/KEa+897AO78//0HMnjpatFeyGCh
fR47gb/fA2FbBb91MJFw/4UPxQsyyiyyaRie90OgKT0rSrEEE4CBHZ9drKnVqGOu
oRH3d9m5gFJPMQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:13:34 2025 by rpki-client