Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
File:                     EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json)
Hash identifier:          yF9598DNuqrLJxHSiF0cBshO22Hu/6GfZ6rQNw1rgAc=
Subject key identifier:   79:5D:2A:D1:8F:19:84:39:D7:7F:5C:B1:AF:9D:67:C3:99:59:5D:C8
Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4
Certificate issuer:       /CN=12e64042b6e7288a485db270c551329b802fd8c4
Certificate serial:       019A71B7A261EBEFFCA3F20D20DA5A83F66B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
Manifest number:          13DB
Signing time:             Tue 11 Nov 2025 07:00:51 +0000
Manifest this update:     Tue 11 Nov 2025 07:00:51 +0000
Manifest next update:     Wed 12 Nov 2025 07:00:51 +0000
Files and hashes:         1: BXtbJRTGPhW1VlCQ66qjiZWhbAM.roa (hash: 9OVGLVBb4qleVwsOx0lriWprWo/Ar1aDDscASTXyLXo=)
                          2: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: W7Xo3tL8Ox4BUGQVhKatOIS+Ybrck2nm0TPZTyY9kG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:a2:61:eb:ef:fc:a3:f2:0d:20:da:5a:83:f6:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4
        Validity
            Not Before: Nov 11 07:00:51 2025 GMT
            Not After : Nov 12 07:00:51 2025 GMT
        Subject: CN=795d2ad18f198439d77f5cb1af9d67c399595dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:a7:e3:8a:3a:ca:04:81:b4:a6:5a:a4:dc:
                    2e:5d:5e:36:b8:6b:c4:14:0d:e7:79:f9:f9:cd:f5:
                    39:81:6f:fd:93:f7:67:5d:90:6a:fa:e4:55:fe:57:
                    50:f1:35:bd:65:aa:ce:42:e4:2d:3f:8e:e0:fc:c0:
                    13:07:78:b0:f2:de:97:23:76:0d:2e:b3:57:d1:80:
                    a3:78:23:4b:b7:10:d7:6a:90:fd:6a:70:d0:ce:ac:
                    5d:02:5e:3a:23:99:4a:c6:87:2c:d3:d2:6b:37:1c:
                    a2:1e:4b:ec:5a:b7:25:ba:a5:c0:3c:54:46:e6:ee:
                    a6:bb:02:03:84:2b:f9:ea:94:ba:ca:9e:4f:1a:51:
                    0c:79:46:7a:be:a0:6d:d7:44:25:05:13:5b:59:fc:
                    50:60:4a:7f:79:c2:fd:1c:32:b8:7c:01:8e:e4:df:
                    57:6a:77:9a:0d:ce:65:40:5e:a2:31:52:f0:5a:89:
                    65:92:21:ef:71:56:af:ad:f5:72:3d:ff:46:63:9e:
                    98:1e:79:b8:8f:fd:e0:ac:3b:ba:c3:a1:12:96:f5:
                    c0:b0:c1:c6:47:75:c9:6d:4e:07:5e:bb:25:bc:b5:
                    ef:e7:27:a2:47:8e:e9:cb:cc:1c:d0:e6:af:e0:37:
                    37:5c:e1:ea:21:69:b6:0f:6e:96:be:81:0b:0b:58:
                    a2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5D:2A:D1:8F:19:84:39:D7:7F:5C:B1:AF:9D:67:C3:99:59:5D:C8
            X509v3 Authority Key Identifier:
                keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3e:41:f2:29:37:50:8c:b8:a1:cf:18:dc:f3:22:32:9e:d6:
         b7:b4:2b:64:c5:5d:94:22:2e:a1:0a:1d:47:2b:3a:31:c1:d9:
         99:27:60:9f:5d:f4:de:5f:52:c5:3d:c5:ee:fd:f0:c2:19:47:
         84:89:87:95:be:72:c1:e0:91:5c:9e:a9:dc:86:4c:bc:96:59:
         67:69:67:85:ef:6c:21:a7:66:f8:01:42:b9:3a:ed:1b:2d:90:
         3c:8f:ef:f9:ee:97:60:33:ae:56:38:f5:7a:ac:cb:f4:99:22:
         47:54:b8:1f:7b:51:0d:ef:08:6e:10:1c:4f:e4:0e:c7:3e:a3:
         d2:e4:b8:5b:9e:dc:cb:10:53:7b:e4:38:3d:12:e2:d4:c8:30:
         4b:db:11:64:d4:88:61:c9:ba:40:20:37:da:58:96:56:f6:63:
         f3:a6:0a:ce:79:b0:63:d9:72:6f:2f:ee:10:ce:8c:de:99:1e:
         64:18:7a:60:4e:f3:b0:59:ca:9e:96:e2:27:3e:10:ec:e0:7f:
         14:62:79:74:43:96:7c:84:6d:3b:59:e3:4c:86:7e:36:31:69:
         83:b1:41:ce:65:85:c2:ca:29:ab:28:e1:99:62:3e:32:fc:63:
         02:b3:9c:18:40:7a:7d:82:10:2a:37:03:0c:c8:f4:8b:17:2f:
         a9:3d:92:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt6Jh6+/8o/ININpag/ZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZTY0MDQyYjZlNzI4OGE0ODVkYjI3MGM1NTEzMjliODAy
ZmQ4YzQwHhcNMjUxMTExMDcwMDUxWhcNMjUxMTEyMDcwMDUxWjAzMTEwLwYDVQQD
Eyg3OTVkMmFkMThmMTk4NDM5ZDc3ZjVjYjFhZjlkNjdjMzk5NTk1ZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zyn44o6ygSBtKZapNwuXV42uGvE
FA3nefn5zfU5gW/9k/dnXZBq+uRV/ldQ8TW9ZarOQuQtP47g/MATB3iw8t6XI3YN
LrNX0YCjeCNLtxDXapD9anDQzqxdAl46I5lKxocs09JrNxyiHkvsWrcluqXAPFRG
5u6muwIDhCv56pS6yp5PGlEMeUZ6vqBt10QlBRNbWfxQYEp/ecL9HDK4fAGO5N9X
aneaDc5lQF6iMVLwWollkiHvcVavrfVyPf9GY56YHnm4j/3grDu6w6ESlvXAsMHG
R3XJbU4HXrslvLXv5yeiR47py8wc0Oav4Dc3XOHqIWm2D26WvoELC1ii5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHldKtGPGYQ5139csa+dZ8OZWV3IMB8GA1UdIwQY
MBaAFBLmQEK25yiKSF2ycMVRMpuAL9jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZTM1ZjUtOTdkMy00MzUxLTliYjAt
ZmNiMzZkODEyNTRhLzEvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZTM1ZjUtOTdkMy00MzUxLTliYjAtZmNiMzZkODEyNTRh
LzEvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkz5B8ik3
UIy4oc8Y3PMiMp7Wt7QrZMVdlCIuoQodRys6McHZmSdgn1303l9SxT3F7v3wwhlH
hImHlb5yweCRXJ6p3IZMvJZZZ2lnhe9sIadm+AFCuTrtGy2QPI/v+e6XYDOuVjj1
eqzL9JkiR1S4H3tRDe8IbhAcT+QOxz6j0uS4W57cyxBTe+Q4PRLi1MgwS9sRZNSI
Ycm6QCA32liWVvZj86YKznmwY9lyby/uEM6M3pkeZBh6YE7zsFnKnpbiJz4Q7OB/
FGJ5dEOWfIRtO1njTIZ+NjFpg7FBzmWFwsopqyjhmWI+MvxjArOcGEB6fYIQKjcD
DMj0ixcvqT2Sew==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:35 2025 by rpki-client