Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          sGNuBeWxdNqIBflxdp35BMcTkNjcTNhq3qwO3dpTVrw=
Subject key identifier:   D1:06:B6:96:53:7F:6F:05:6C:EA:DE:DA:BE:FE:6D:B6:1C:95:76:16
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       019A15A9EE404A9FE68E3022F043535A96D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          16F0
Signing time:             Fri 24 Oct 2025 10:00:49 +0000
Manifest this update:     Fri 24 Oct 2025 10:00:49 +0000
Manifest next update:     Sat 25 Oct 2025 10:00:49 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: F9cypIy2SW6x2zFqq2cTmvsTy8SYcF6uqM0mPP0d7i8=)
                          2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:15:a9:ee:40:4a:9f:e6:8e:30:22:f0:43:53:5a:96:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Oct 24 10:00:49 2025 GMT
            Not After : Oct 25 10:00:49 2025 GMT
        Subject: CN=d106b696537f6f056ceadedabefe6db61c957616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:2b:72:f8:61:68:0a:73:b5:c3:ff:ae:9a:
                    b7:80:c1:68:27:1c:7d:f9:4f:03:fd:82:1d:db:19:
                    32:75:ec:96:fc:cf:d6:02:07:0e:8a:20:ae:9d:3f:
                    b6:69:f8:1c:d7:56:fb:f2:f3:64:ae:3f:af:91:0e:
                    ab:af:3a:87:5f:4e:3e:e4:8f:82:fd:48:e2:57:37:
                    b9:05:5c:68:a1:7a:3f:f5:99:af:4f:0e:90:d1:2b:
                    0c:ee:99:ce:a8:b8:7a:6e:83:3e:69:67:25:95:5f:
                    be:3f:c6:3d:29:14:6f:17:ef:34:36:d4:29:d5:f3:
                    9e:3d:38:48:19:42:2d:b1:5c:c2:e3:93:78:a8:eb:
                    dd:88:98:36:c5:43:87:ba:46:af:45:a3:fe:33:f8:
                    20:f6:da:df:53:b6:21:e5:a9:3a:36:5e:60:7d:17:
                    11:8a:20:ad:77:e8:a6:2a:54:35:99:de:03:5d:d8:
                    43:4e:10:be:cb:c1:7b:ec:4a:2c:95:77:21:7b:c4:
                    cf:44:5e:84:83:15:a7:f0:fb:87:1b:f7:bb:1c:85:
                    46:cd:1f:55:92:01:e7:3f:08:4d:17:ef:db:96:f2:
                    18:a5:10:f1:1b:62:1d:63:cd:9c:5d:bf:ab:45:a8:
                    ee:78:58:60:02:91:56:3f:58:65:f1:e3:71:e5:49:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:06:B6:96:53:7F:6F:05:6C:EA:DE:DA:BE:FE:6D:B6:1C:95:76:16
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f8:27:c1:fa:b0:8c:ca:d2:af:ea:61:8d:ea:f7:b2:92:98:
         63:e4:7c:83:c1:67:cd:c2:4b:7a:5b:9d:07:b0:60:cc:77:fc:
         1e:63:0f:47:e8:17:f3:2b:4c:4a:5c:56:9e:65:52:a9:1c:52:
         34:6f:fd:c7:a1:dc:2e:39:60:74:3d:57:cb:56:7f:68:71:8e:
         12:81:41:e7:49:f6:ab:d0:90:fb:52:71:c9:d4:c5:c4:f5:d3:
         aa:00:6b:4d:12:95:d7:55:fd:7f:3b:2c:2c:9b:32:94:06:db:
         a6:4d:ff:d9:dc:8c:2f:05:2b:5e:93:04:9b:a3:a3:22:3f:10:
         4b:a9:7b:30:4e:eb:c7:13:4b:96:a6:b0:ed:b6:c9:f1:0e:c0:
         20:41:b9:1c:d1:c7:62:2a:33:8a:5a:53:b6:30:d3:02:ef:51:
         f1:1b:06:0d:8d:43:5a:07:17:43:b3:c4:3d:f9:07:a7:90:11:
         20:c9:2b:7f:b1:96:33:ab:74:3b:e2:aa:72:91:2c:35:f6:56:
         f0:cc:53:f9:ce:3a:e8:1e:29:60:10:e3:74:23:40:3e:0d:1b:
         ee:72:dc:fc:e1:06:66:9d:63:b9:c9:21:7a:ee:17:1b:c2:fa:
         bb:14:0d:4b:2c:26:d4:63:91:b5:16:4f:18:2b:67:17:32:68:
         d6:11:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 17:17:09 2025 by rpki-client