Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          R5kYry/fHOMGgARFusYy+EzurxmElQhKgL633M9laBE=
Subject key identifier:   EC:CB:33:03:3D:97:B2:4A:9B:31:10:8C:0D:82:F5:15:31:0D:65:FA
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       0199FBEAA3AC93C1E1B999F481A55B41B2C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0EF9
Signing time:             Sun 19 Oct 2025 10:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:22 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: 5eHbIOGQzcgTQIl32bBTzvQIF4d/zGnivi0BkobLz80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:a3:ac:93:c1:e1:b9:99:f4:81:a5:5b:41:b2:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Oct 19 10:01:22 2025 GMT
            Not After : Oct 20 10:01:22 2025 GMT
        Subject: CN=eccb33033d97b24a9b31108c0d82f515310d65fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ad:30:c3:dd:52:17:1b:88:0f:a7:7d:f8:dc:
                    d3:90:3c:21:47:9b:f8:a1:e0:97:24:7c:2d:02:3b:
                    6d:7b:1d:ad:43:85:43:d1:74:d5:99:b4:b4:f8:8d:
                    c4:28:f2:ee:f4:c8:fd:15:e5:30:9d:d5:4e:c8:f7:
                    15:fc:1b:38:35:48:a5:bd:a3:86:9e:06:56:88:64:
                    56:db:8b:5e:f0:eb:60:5d:55:6b:dd:ab:b3:65:b5:
                    ab:15:a6:37:30:b3:aa:d6:29:76:3a:d0:b0:49:a7:
                    57:df:a3:8e:ea:5b:64:ab:eb:60:f2:b7:e9:83:7b:
                    6a:82:62:e0:a6:eb:c5:c1:79:b3:a9:36:de:2e:fe:
                    70:79:6c:23:61:26:46:e1:55:f8:15:b9:ba:b5:bd:
                    04:80:70:40:b9:d1:ef:c5:9f:44:10:ee:fc:ba:33:
                    67:81:e8:46:0f:0b:12:02:bd:97:14:47:2c:be:80:
                    3c:ad:1c:5b:14:d0:fc:6f:87:79:99:f1:ab:3a:52:
                    f4:da:cb:7e:98:d9:41:5a:c2:a2:fe:33:a0:45:fe:
                    c1:c3:8a:78:a3:11:42:2c:0b:6c:25:f0:0c:58:af:
                    fd:60:53:32:e8:de:fb:20:35:62:11:78:d4:57:c5:
                    1b:07:29:eb:71:35:a6:f4:db:db:d9:72:14:8c:2e:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:33:03:3D:97:B2:4A:9B:31:10:8C:0D:82:F5:15:31:0D:65:FA
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e2:a0:ec:2d:4d:d3:0c:78:24:a9:21:17:9b:bd:15:a4:c6:
         72:59:f1:c6:89:58:25:00:81:83:15:8e:26:a8:50:88:c0:f8:
         23:fe:46:16:c0:87:20:4f:89:29:84:5d:8c:b6:b3:1c:f6:40:
         59:21:02:bc:59:91:2c:62:4e:5b:46:3a:03:99:45:5e:ec:6f:
         17:fc:bc:77:a8:56:10:7b:8a:d0:8a:73:b3:49:c7:d5:97:56:
         53:ab:67:18:a9:d1:fc:a3:36:6d:d1:1b:bd:a7:51:5b:ec:3e:
         7a:b5:01:e3:c9:27:07:64:3a:0c:3d:75:6c:18:5a:c1:58:79:
         13:f0:cf:14:f7:7b:c1:48:95:28:cd:99:2c:b6:f0:ba:b7:cf:
         49:62:d4:7a:9f:ed:78:94:1a:a7:27:1c:cf:ea:1a:f7:f3:6e:
         01:ae:ae:f5:f6:09:43:a9:1b:c6:04:a8:36:d1:e1:8d:9e:54:
         1b:6d:e4:b7:e5:89:50:63:95:47:b4:78:59:27:35:60:99:d8:
         61:b6:ec:d5:f2:ee:4e:1d:79:c2:f1:09:94:ca:89:11:5b:98:
         8e:ce:c7:e5:6f:8a:35:b1:aa:db:8a:17:2e:56:be:1a:fd:00:
         76:00:cc:4f:af:d4:33:2c:21:bb:90:71:b6:7a:b5:90:e0:f2:
         e9:6a:24:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:57 2025 by rpki-client