Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
File:                     EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json)
Hash identifier:          Xt56flYtY7GTs59ELmeWZn7DrL2D5oNW1+FpWtbszvw=
Subject key identifier:   51:B0:70:79:76:25:A0:17:5D:3B:05:D1:1E:B5:F6:E6:13:DE:CB:6C
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Certificate issuer:       /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial:       019A30B2D38B4B2685BB0EEAAEA245801FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
Manifest number:          16FD
Signing time:             Wed 29 Oct 2025 16:00:16 +0000
Manifest this update:     Wed 29 Oct 2025 16:00:16 +0000
Manifest next update:     Thu 30 Oct 2025 16:00:16 +0000
Files and hashes:         1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: U6kcOKFFOX/krchrDDoOfNvIruAv2cfkzIRZEJFvU48=)
                          2: WzbX2TdxGbXI_9q_gLWgwyGlxMk.roa (hash: 5pY3qGQoynaLtjRYUu9PW5osvIxNFNqy+79Pc3CkOzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:30:b2:d3:8b:4b:26:85:bb:0e:ea:ae:a2:45:80:1f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
        Validity
            Not Before: Oct 29 16:00:16 2025 GMT
            Not After : Oct 30 16:00:16 2025 GMT
        Subject: CN=51b070797625a0175d3b05d11eb5f6e613decb6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:d6:77:39:37:27:e0:b3:e9:ef:31:e9:09:
                    2d:69:52:4c:85:33:43:bc:4e:57:97:71:38:8b:9a:
                    57:d8:35:4f:20:06:ca:1e:d9:1f:0f:be:a3:95:aa:
                    6a:fc:81:b5:54:79:ce:5b:d0:26:74:8b:b8:47:30:
                    83:5f:3c:e3:b4:7d:99:7c:9a:ac:db:28:b2:4e:9b:
                    7c:e3:20:0e:e2:a3:24:90:70:d2:1c:05:ac:f8:74:
                    2b:b1:b0:af:5b:93:2a:05:a8:ee:3c:76:69:fa:40:
                    7c:fd:a6:97:db:20:2d:b8:3e:3e:5a:c1:38:91:00:
                    c9:0d:48:dd:58:b4:f0:c8:28:d5:dc:ab:84:29:02:
                    ec:12:a2:2f:a9:a3:8f:d0:f1:d9:16:32:29:37:8c:
                    63:25:e9:7e:cf:bc:9d:db:76:38:36:73:e0:0f:c5:
                    81:fb:45:3d:98:8a:4c:03:53:ea:68:98:be:02:f9:
                    1e:ad:df:d1:91:3d:96:c4:63:b3:ec:52:b4:e8:e8:
                    b6:4f:f8:ec:46:ae:b8:82:7d:e7:8f:51:77:fd:73:
                    6d:6f:be:3d:40:86:6b:5f:5e:f4:86:88:2c:71:af:
                    d6:cd:c2:53:f1:56:0e:45:9c:f1:8f:0b:0b:8e:84:
                    74:e9:8f:cc:4d:06:43:d8:08:e1:c2:e9:34:c2:05:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B0:70:79:76:25:A0:17:5D:3B:05:D1:1E:B5:F6:E6:13:DE:CB:6C
            X509v3 Authority Key Identifier:
                keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:0b:a4:c4:ea:81:b6:13:b6:3f:f0:7d:90:2e:a5:a4:0c:
         0e:e4:d2:7c:be:b6:13:13:38:84:ab:1b:2b:5f:86:64:14:b6:
         3c:b5:60:6b:1f:b9:af:2c:56:fc:f3:4c:2e:c7:45:b4:92:c6:
         5f:f4:b5:ce:17:8c:8b:5b:ea:5b:2a:0d:05:34:8b:d6:5d:a4:
         e7:2a:83:c4:1c:23:5f:58:e6:4f:dd:6a:22:f4:59:31:55:50:
         35:b1:59:a2:78:70:09:d4:bd:44:64:1c:78:0b:a1:00:5e:65:
         2d:d9:72:11:69:31:55:e9:a7:5e:4f:32:03:0a:9e:dc:2d:00:
         23:30:f4:82:32:ae:7a:9e:eb:d9:bb:11:61:12:67:0e:32:39:
         ed:be:af:7c:4c:98:bc:c0:2a:f0:46:4c:3c:ae:f0:7a:56:9c:
         f9:2a:08:af:7f:82:9b:2c:ca:ae:eb:1c:fe:8d:f0:c9:ac:83:
         15:4f:36:59:08:af:9a:f4:2e:07:fb:d7:55:68:89:84:48:2c:
         90:ca:fb:a4:e1:62:0b:77:71:c8:bb:06:c8:34:f9:be:3c:65:
         51:bc:29:1b:65:16:5b:d2:3f:2a:5a:2e:f1:59:39:39:f1:8c:
         6b:21:e6:a3:fa:86:25:46:b4:9c:ea:71:69:e9:1d:48:7c:b7:
         5c:08:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:15:23 2025 by rpki-client