Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          GorunIgYpxL2fV7m3B5DPzTyGJTqu5MPLCGGo2gdYEU=
Subject key identifier:   97:5D:30:41:5C:EE:5B:31:28:C6:CB:0A:EC:0F:3B:F1:A5:E6:12:D0
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       0198D6605968495EA35A883E49FB3DCE923B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0E61
Signing time:             Sat 23 Aug 2025 10:01:35 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:35 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:35 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: ov5I2P6YbPndNdhcbpdOcgIyYemZgJAX1Xf3g2aZnW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:59:68:49:5e:a3:5a:88:3e:49:fb:3d:ce:92:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Aug 23 10:01:35 2025 GMT
            Not After : Aug 24 10:01:35 2025 GMT
        Subject: CN=975d30415cee5b3128c6cb0aec0f3bf1a5e612d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:61:80:0b:3b:7f:ce:d4:a1:75:be:45:d3:3b:
                    5a:10:4a:15:b4:f8:13:28:b1:b2:0a:21:89:76:ff:
                    0b:fc:7a:5f:d7:38:4d:90:51:e9:0b:58:c5:ca:20:
                    a7:5c:c8:34:8b:46:81:dd:ef:85:32:50:d1:3e:f2:
                    fc:3c:90:a9:f5:28:c9:fe:7d:f0:db:d1:08:31:c2:
                    a4:fa:37:91:62:2e:fe:c2:26:ba:ad:50:eb:1b:d1:
                    17:ad:ac:e4:75:42:3e:29:81:92:b1:af:65:15:a0:
                    2a:86:29:a1:8f:b7:38:62:cc:97:b0:8a:f8:d6:b8:
                    63:66:d1:b2:8a:b6:aa:a4:7e:ed:b7:04:da:ea:6d:
                    82:ce:ac:e7:45:da:08:9d:01:dd:3e:b7:e4:a3:d3:
                    c3:60:49:09:33:40:1a:f7:62:72:3a:00:31:e3:f9:
                    59:ca:5f:aa:8a:6d:03:77:3e:f6:40:9c:89:d8:19:
                    0f:f7:32:80:fc:a0:45:2f:ab:72:14:88:e3:b9:47:
                    5e:c0:e0:0e:45:52:67:29:81:ef:3c:a5:36:67:71:
                    38:dd:6d:04:75:c0:06:d5:45:a5:90:c7:49:6d:99:
                    49:e6:5d:38:fe:0c:9c:6f:02:8a:51:81:28:d7:04:
                    9d:e7:5b:e3:ca:e0:57:a7:56:b8:d2:c3:2a:3c:bc:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:30:41:5C:EE:5B:31:28:C6:CB:0A:EC:0F:3B:F1:A5:E6:12:D0
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a3:31:cc:48:01:35:c6:5e:15:d4:01:4f:af:96:2a:66:da:
         fe:e8:01:dd:77:02:0a:26:f3:2c:be:f2:25:98:fd:51:a7:c7:
         4a:af:77:4c:ae:ca:ef:a5:0d:0f:35:04:56:ba:37:88:78:9e:
         8c:a9:6d:47:dc:3a:94:2d:8a:9c:36:70:a9:4f:4f:34:48:b4:
         9a:75:97:85:2f:b7:db:8d:77:4f:78:45:ad:f3:c9:a4:e4:19:
         f2:9b:b5:32:06:bb:c6:58:f6:d5:5d:71:d1:81:ce:2e:65:a7:
         4d:c3:fc:7d:83:88:25:48:4d:9c:d7:8b:b5:82:a2:d0:12:68:
         22:f7:51:65:22:70:ff:08:bf:4c:75:4f:a9:55:df:66:68:e6:
         14:d0:5d:b5:86:52:aa:fa:5b:db:12:62:6f:f8:f4:3f:70:26:
         27:c0:82:b7:4a:3b:a7:e6:91:8f:87:d1:82:b1:91:cb:40:51:
         69:25:5e:70:50:86:a2:05:ab:4f:cf:25:4c:4e:53:3f:7f:35:
         6f:bf:7b:c2:73:91:c0:5a:0e:85:25:22:31:7f:2a:a9:c9:e8:
         96:0e:0c:7e:6e:de:bb:b7:31:c6:0c:e8:0f:2d:e9:5c:de:1d:
         d8:e6:db:04:28:d0:39:6e:b1:dc:04:95:41:be:cb:62:41:7b:
         8c:2e:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:54 2025 by rpki-client