Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
File:                     eJaox-m6CdLx1EhjZwviE_wMohA.mft (raw, json)
Hash identifier:          om0g7kz944V2hclVrWRN433BAoOyH22v+4br8fvauHk=
Subject key identifier:   99:C6:F8:1A:34:89:D0:64:01:D5:F2:B2:1A:33:D2:A9:C9:06:57:8E
Authority key identifier: 78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10
Certificate issuer:       /CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
Certificate serial:       0199FD6B32DC26D564C8F2FA48CCA160250C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
Manifest number:          028B
Signing time:             Sun 19 Oct 2025 17:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:25 +0000
Files and hashes:         1: eJaox-m6CdLx1EhjZwviE_wMohA.crl (hash: 8l04r1U+dOL1HWr0w2TW5vKd9AqKh5Iz0mermYku5gY=)
                          2: wduzAoCV3X_HT3SwkAkhVbUpjvk.roa (hash: xcQexB5syiRJfDRPxaM63gktKvSVatGww4DJIDGRPJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:32:dc:26:d5:64:c8:f2:fa:48:cc:a1:60:25:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210
        Validity
            Not Before: Oct 19 17:01:25 2025 GMT
            Not After : Oct 20 17:01:25 2025 GMT
        Subject: CN=99c6f81a3489d06401d5f2b21a33d2a9c906578e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:b2:c0:c0:4f:e0:54:79:bb:8b:16:38:3f:
                    47:63:b1:b7:9f:8d:93:cf:c9:84:be:56:9f:9a:ef:
                    5f:c9:46:81:bf:29:b6:0e:fb:33:ee:4e:fb:17:c3:
                    ed:64:98:3f:ed:ee:d0:f4:7e:7d:42:f6:09:d8:65:
                    da:a8:5d:1f:37:94:f2:dd:7c:ad:1e:1c:98:4f:22:
                    8b:d1:35:6a:bf:aa:f4:fd:67:6e:f2:9a:ae:03:17:
                    69:b3:32:13:c5:b5:e5:a2:c6:7a:e1:ae:83:82:67:
                    07:a6:87:99:20:cb:6b:1d:0e:4d:03:aa:81:a9:df:
                    3b:66:15:38:89:78:1f:a7:f0:42:ae:29:db:7c:05:
                    77:f6:ea:53:85:72:0c:bf:23:33:3e:84:a7:00:fa:
                    c2:95:7d:75:c0:02:b9:c2:5f:f3:24:26:59:1c:74:
                    44:e8:f5:22:23:00:3e:d7:b2:0c:f9:ff:0e:c4:20:
                    14:f2:0f:1d:fa:89:bd:3a:6a:76:d5:1a:0c:67:04:
                    ad:ad:d5:17:b2:82:9f:e8:24:a8:20:af:70:46:9e:
                    15:b7:9b:1f:98:9f:df:1f:bb:a7:8a:b8:8f:ed:3f:
                    03:c0:0e:33:78:52:2e:90:c1:c3:0f:48:24:0a:e8:
                    35:15:6c:c2:73:98:fb:c3:b6:c2:81:15:d8:a2:46:
                    90:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:F8:1A:34:89:D0:64:01:D5:F2:B2:1A:33:D2:A9:C9:06:57:8E
            X509v3 Authority Key Identifier:
                keyid:78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:b4:87:58:58:3f:06:84:45:c9:77:91:7f:69:0f:e7:f3:2b:
         51:98:31:27:00:18:e1:20:3e:20:54:56:7f:87:d8:58:c8:03:
         59:d2:54:ce:2f:ea:5d:43:5a:42:98:c8:e1:87:96:87:1b:e7:
         6d:08:1b:88:94:97:66:6f:48:1b:7a:2e:d6:dc:ed:5f:d1:67:
         e2:b8:03:e4:a8:48:d4:56:5d:c6:29:85:04:d6:24:fc:f4:c9:
         11:05:af:fd:72:0a:14:05:99:87:e0:1e:d5:86:14:f8:00:83:
         4b:ee:19:9c:0d:f4:95:5e:94:a0:fb:ef:d2:e1:60:22:24:cb:
         84:28:8d:93:b5:a6:f6:fd:88:b5:eb:2d:e1:5d:d4:57:21:f9:
         78:82:dd:4d:c9:7b:76:e1:f7:26:4d:dc:57:3c:31:8e:54:43:
         0b:45:77:93:a2:32:43:eb:08:a1:e9:17:c2:33:0c:ca:ea:94:
         dc:07:ac:47:f7:f9:8c:b1:bd:c2:02:26:bd:d9:aa:4b:c5:a6:
         74:21:e1:87:f1:7f:7c:3f:93:22:2e:a4:08:75:85:9b:9d:e7:
         06:0a:5b:bc:40:26:d8:dc:28:0c:12:8a:79:db:6f:c2:09:7f:
         b9:1d:10:5d:f0:6f:01:2b:cd:1f:67:25:ed:e6:e0:4d:7e:92:
         67:4a:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:10 2025 by rpki-client