Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          0tNMfZIBgklmR/rVcWxxrJu5q+kMjmHf/fwWygn9CX8=
Subject key identifier:   89:A2:D5:54:81:93:9B:95:08:33:C2:14:71:5A:8B:5E:84:50:0B:92
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       019A729379C40712519785D7093F531E13DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          0E7F
Signing time:             Tue 11 Nov 2025 11:00:58 +0000
Manifest this update:     Tue 11 Nov 2025 11:00:58 +0000
Manifest next update:     Wed 12 Nov 2025 11:00:58 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: /BDk2WmSL5+omocotbTBjulPkJzmEGTnnZiTxyerFmQ=)
                          2: 6VURpuoGIEu-l_P4ZeBewDi5ITQ.roa (hash: 4B+IYvzd1z7mLmwV7sB69BtJr1xQnLEcg/11m55OmVA=)
                          3: SGD9M6mEugHCxM7uV2PsXdJ2hNI.roa (hash: LARKN5V/8dBxyk/X3NXKXQZvWRUhVkqxaNvzjumJGHs=)
                          4: sLZpvIMTgksZrvqormgvgok8KhA.roa (hash: F40TwnOKkG5HzR84w5cvXcd+kglYl0t+PxN2IvdlZDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:93:79:c4:07:12:51:97:85:d7:09:3f:53:1e:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Nov 11 11:00:58 2025 GMT
            Not After : Nov 12 11:00:58 2025 GMT
        Subject: CN=89a2d55481939b950833c214715a8b5e84500b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:05:69:68:bc:7a:f1:b3:42:2c:bb:a4:75:97:
                    e4:37:87:8c:64:6c:61:38:a8:9a:89:44:cd:e6:8c:
                    e8:66:1b:a6:22:7d:3b:d3:2d:91:f5:b6:56:a7:26:
                    69:d7:ae:8c:f9:c5:ae:1d:17:71:3f:04:86:1e:63:
                    82:1d:11:39:7e:e2:45:67:60:f7:29:cc:08:99:a3:
                    b1:90:40:67:d3:26:84:56:37:42:ce:14:11:02:d7:
                    fa:08:51:08:ad:9d:2d:44:33:2e:19:68:cc:22:3f:
                    9a:db:26:13:a8:87:60:af:7f:b9:1c:76:ae:68:2d:
                    75:e4:1f:52:59:11:21:fc:8f:4e:5f:f1:a3:d1:59:
                    71:35:d0:1e:54:5e:57:0e:cc:72:87:8f:78:4f:31:
                    6b:50:46:07:10:ba:c3:30:72:6e:47:1f:41:54:c9:
                    10:ff:dc:fc:9b:37:60:ad:a9:26:c0:34:4d:49:4a:
                    43:7d:8c:a9:b5:cf:c2:26:c6:d3:56:90:0e:3e:78:
                    56:fe:b5:f0:23:5a:da:cb:67:3b:1e:20:68:7d:2d:
                    41:82:f3:fc:d0:7b:a7:98:b7:37:ea:54:ed:1a:a3:
                    fe:67:6d:93:9a:04:e4:aa:39:3e:ef:e0:c8:b8:7c:
                    ca:64:b4:dc:72:2b:d3:d5:86:20:1d:64:24:b7:13:
                    cc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A2:D5:54:81:93:9B:95:08:33:C2:14:71:5A:8B:5E:84:50:0B:92
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:49:87:e0:36:88:46:36:1d:54:fe:66:ad:ac:bc:97:6f:22:
         0d:e4:72:58:83:0e:ba:a4:50:8b:eb:75:27:3a:80:16:a0:6e:
         85:af:aa:b8:21:4f:b5:bf:7d:53:7d:54:aa:84:99:18:af:bc:
         9b:9c:96:c6:79:ec:70:63:10:a7:df:0b:76:6e:07:de:4a:22:
         22:f9:78:6d:2c:f5:ba:09:0e:e3:9e:1a:87:8d:4f:39:ff:51:
         11:87:17:5a:ee:39:c6:f7:01:40:c6:8e:cc:48:d1:57:69:28:
         48:50:2c:a3:34:dd:6e:80:c3:02:59:4e:eb:40:e9:cb:01:51:
         80:9f:48:ed:25:a2:4d:7e:bc:e2:bf:94:ea:8d:a4:0a:9d:39:
         4d:42:6d:d2:ba:77:18:d7:7c:93:56:dc:9f:01:7d:2e:99:8b:
         56:32:2d:b3:eb:39:9c:b4:bb:e7:b8:ea:e6:db:aa:95:5f:bb:
         26:ce:a9:73:e3:e3:fd:b0:da:88:08:9e:11:86:01:1a:62:26:
         51:40:87:ce:71:3d:12:31:44:6e:5b:cf:9f:f5:40:e8:6a:af:
         02:85:22:b0:82:65:6a:d6:0f:c8:60:10:cc:3a:8a:20:cf:e3:
         9a:5d:0e:51:72:16:d5:00:dc:e3:70:bd:dc:5c:f7:f9:c1:74:
         7b:10:a0:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk3nEBxJRl4XXCT9THhPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1
M2VlMmIwHhcNMjUxMTExMTEwMDU4WhcNMjUxMTEyMTEwMDU4WjAzMTEwLwYDVQQD
Eyg4OWEyZDU1NDgxOTM5Yjk1MDgzM2MyMTQ3MTVhOGI1ZTg0NTAwYjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQVpaLx68bNCLLukdZfkN4eMZGxh
OKiaiUTN5ozoZhumIn070y2R9bZWpyZp166M+cWuHRdxPwSGHmOCHRE5fuJFZ2D3
KcwImaOxkEBn0yaEVjdCzhQRAtf6CFEIrZ0tRDMuGWjMIj+a2yYTqIdgr3+5HHau
aC115B9SWREh/I9OX/Gj0VlxNdAeVF5XDsxyh494TzFrUEYHELrDMHJuRx9BVMkQ
/9z8mzdgrakmwDRNSUpDfYyptc/CJsbTVpAOPnhW/rXwI1ray2c7HiBofS1BgvP8
0HunmLc36lTtGqP+Z22TmgTkqjk+7+DIuHzKZLTccivT1YYgHWQktxPMQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImi1VSBk5uVCDPCFHFai16EUAuSMB8GA1UdIwQY
MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt
ZGM3ZTEyNmNhMjM0LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0
LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEmH4DaI
RjYdVP5mray8l28iDeRyWIMOuqRQi+t1JzqAFqBuha+quCFPtb99U31UqoSZGK+8
m5yWxnnscGMQp98Ldm4H3koiIvl4bSz1ugkO454ah41POf9REYcXWu45xvcBQMaO
zEjRV2koSFAsozTdboDDAllO60DpywFRgJ9I7SWiTX684r+U6o2kCp05TUJt0rp3
GNd8k1bcnwF9LpmLVjIts+s5nLS757jq5tuqlV+7Js6pc+Pj/bDaiAieEYYBGmIm
UUCHznE9EjFEblvPn/VA6GqvAoUisIJlatYPyGAQzDqKIM/jml0OUXIW1QDc43C9
3Fz3+cF0exCgmw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:26 2025 by rpki-client