Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
File:                     eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json)
Hash identifier:          dtisCz+EPdm4OBoFUNkmu7nDSF250qFHx3+OFqPlEuM=
Subject key identifier:   6F:E5:68:A9:A5:FC:E3:1F:45:39:DA:71:E4:24:A1:F4:45:CE:62:CC
Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2
Certificate issuer:       /CN=7a8192e9f740e8d238059e28a0a037083081b7d2
Certificate serial:       019A71808E73255112B9AB3D219F12C93BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
Manifest number:          171F
Signing time:             Tue 11 Nov 2025 06:00:41 +0000
Manifest this update:     Tue 11 Nov 2025 06:00:41 +0000
Manifest next update:     Wed 12 Nov 2025 06:00:41 +0000
Files and hashes:         1: bpnZBaQMqQCP4_HM_J4jb2lHwKU.roa (hash: 3xaBBKosMJSpzXSuRQMz4T/JTkCvN7b+xo0iaMV0UsA=)
                          2: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: K50JB6kKzz0Sj1xLp/AA91YKtEFf5cqXJ1llMu7PvFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:80:8e:73:25:51:12:b9:ab:3d:21:9f:12:c9:3b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2
        Validity
            Not Before: Nov 11 06:00:41 2025 GMT
            Not After : Nov 12 06:00:41 2025 GMT
        Subject: CN=6fe568a9a5fce31f4539da71e424a1f445ce62cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:53:49:4a:2c:81:1c:ad:b9:f5:67:64:7c:
                    82:8c:d2:97:ca:c9:a6:8a:30:aa:01:61:ae:5f:11:
                    13:e1:85:78:79:cb:30:4a:9f:d3:66:b5:01:2d:65:
                    70:1e:0a:1e:d2:3e:a3:42:41:c7:52:de:3d:44:70:
                    c6:d8:fa:e1:86:82:71:7b:5d:63:15:5a:cd:d3:7d:
                    c7:dc:d7:ec:74:59:ff:64:41:f1:b5:6d:c4:ed:eb:
                    92:90:2b:f9:72:72:2a:ff:db:95:73:ce:61:ab:5c:
                    5c:ea:6f:11:c7:65:67:75:f5:ca:de:42:d5:82:8d:
                    59:22:f8:69:48:14:d3:89:e6:9d:7c:6b:7a:c6:2e:
                    00:74:17:8f:29:2e:f5:38:3d:09:9f:3a:26:02:bc:
                    54:46:8c:ee:01:f0:8e:93:53:04:ce:03:f5:6f:eb:
                    1d:ef:e7:f0:f8:61:d4:81:3e:a6:ce:b5:1e:f8:03:
                    b1:39:90:ed:21:39:f3:69:71:7b:5a:67:0b:78:3a:
                    83:e8:b2:ff:96:bf:26:7e:5c:d8:3d:54:10:59:93:
                    0d:ff:52:82:88:2d:d0:bd:b3:f6:b2:c7:20:7d:a6:
                    2f:1a:9d:50:5b:e1:6b:b8:a7:0c:47:98:14:f1:d6:
                    15:f8:a5:19:43:3d:50:56:f1:f6:50:6c:c3:44:68:
                    5c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E5:68:A9:A5:FC:E3:1F:45:39:DA:71:E4:24:A1:F4:45:CE:62:CC
            X509v3 Authority Key Identifier:
                keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1a:98:4b:fa:f1:f4:5d:b8:65:52:0c:95:1b:f6:a8:a7:12:
         cd:68:7c:ba:02:3a:dd:af:ae:48:d7:8a:34:3d:a3:bc:e2:2a:
         8f:fe:73:21:47:35:c5:e9:e6:68:05:3e:ab:95:f5:73:44:b5:
         09:0a:b3:a6:eb:18:b9:f7:eb:9d:31:24:8b:35:f8:9f:be:1a:
         5d:83:3d:e2:60:79:1e:b2:b2:89:9b:ef:08:56:cf:e0:cc:66:
         b3:f3:25:1e:23:71:c9:8d:e2:2c:67:c3:42:a9:f6:21:9f:fa:
         da:66:ae:53:af:3c:0d:81:89:21:83:80:0f:a3:18:5b:c5:b8:
         a8:b5:0b:98:3f:09:ed:8f:64:81:91:2e:bd:26:a7:9f:fa:2a:
         bf:1c:21:b8:53:f6:81:b1:15:10:8d:d5:25:4e:30:9f:fa:da:
         04:54:db:17:43:00:f6:1c:24:59:b4:b1:c4:5c:0f:32:74:12:
         5f:a1:16:ad:94:cc:08:04:3c:04:25:7f:54:60:ad:11:58:95:
         7f:e1:f2:64:02:77:58:13:46:85:13:cd:fb:c9:1b:f9:e1:a8:
         d9:0d:72:27:a4:9f:3c:0a:19:f2:55:49:bb:68:7d:0c:5b:38:
         ee:4e:ad:67:0e:63:96:36:1d:5b:db:2b:11:a1:b4:9b:a1:14:
         ab:dc:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client