Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
File:                     eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json)
Hash identifier:          KIZJkROD7uz25PnxooRJCru/Do+rkuEUXxQwxI1gGew=
Subject key identifier:   1A:72:70:D9:81:DF:8B:BD:37:99:A6:C9:38:8A:3A:92:57:CA:87:20
Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F
Certificate issuer:       /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
Certificate serial:       019A02FEB6B1E3012B82BA5366365EFCE441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
Manifest number:          0E73
Signing time:             Mon 20 Oct 2025 19:00:38 +0000
Manifest this update:     Mon 20 Oct 2025 19:00:38 +0000
Manifest next update:     Tue 21 Oct 2025 19:00:38 +0000
Files and hashes:         1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: X18cPBOhnibXjIBuLOgLRMRQiCOS6msDOGqc14j401Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:fe:b6:b1:e3:01:2b:82:ba:53:66:36:5e:fc:e4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f
        Validity
            Not Before: Oct 20 19:00:38 2025 GMT
            Not After : Oct 21 19:00:38 2025 GMT
        Subject: CN=1a7270d981df8bbd3799a6c9388a3a9257ca8720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:a8:32:0a:25:65:0c:65:57:2c:ca:09:6e:
                    7a:c6:7a:0d:5d:b3:ea:1a:9e:77:b1:a5:67:f0:bd:
                    df:e5:3c:89:9a:31:39:1a:6b:22:17:75:70:18:17:
                    84:c7:05:04:c1:a3:8b:97:fd:6b:f7:ac:e1:0f:ae:
                    62:77:db:93:66:02:fa:9d:30:42:6e:e3:b7:8f:54:
                    1f:f3:cc:88:45:53:e1:c7:fd:ac:4e:60:58:05:46:
                    b4:60:34:cb:37:a8:db:3a:50:54:d1:55:37:be:cd:
                    b4:25:5c:b3:88:30:4a:60:61:64:35:b7:49:c1:d1:
                    af:a1:f5:cd:6c:f6:7c:d5:9d:55:66:7c:b1:0e:49:
                    7e:c5:b1:b1:dc:c2:35:5f:cf:7a:09:a2:df:aa:4b:
                    61:a7:0d:3d:58:94:06:58:e3:f3:20:2c:82:a5:ca:
                    ab:b5:b2:5d:87:e8:00:44:29:91:b5:00:e1:ad:a8:
                    89:91:f8:72:64:35:6a:95:3d:19:60:ed:77:55:46:
                    aa:fe:f9:b4:3b:0a:d6:90:0f:9e:c5:3f:0d:52:30:
                    5c:68:aa:df:5a:d8:1c:ac:3e:b8:3b:90:77:e9:73:
                    38:45:2c:ca:b4:6e:a1:30:95:15:28:b4:a4:b8:eb:
                    72:19:84:3a:06:58:88:13:7c:ee:15:7b:23:68:a4:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:70:D9:81:DF:8B:BD:37:99:A6:C9:38:8A:3A:92:57:CA:87:20
            X509v3 Authority Key Identifier:
                keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:df:f8:00:5a:e9:a2:50:44:8a:64:88:d9:9e:cb:b7:f0:0f:
         20:06:21:79:03:9b:b0:4f:be:94:c9:b9:0a:b1:89:ad:43:b4:
         34:6f:53:f5:99:f7:c5:4a:8f:22:23:07:d9:90:c8:4a:86:e8:
         19:f8:59:1c:df:85:fa:3d:d3:55:0c:f6:ca:0b:c2:da:69:74:
         b3:d2:ba:06:cd:1d:8a:4e:62:dc:88:70:6d:3e:f6:87:d1:ff:
         f5:e2:72:76:f8:b5:c0:b8:86:f1:09:98:a2:d8:57:a8:89:a5:
         1f:d5:b8:e9:3d:ef:4c:ef:62:8e:ef:a2:76:4e:50:1b:6d:d4:
         45:ff:a5:39:b3:52:46:56:cb:6b:20:36:76:84:97:87:93:4a:
         db:d2:80:09:0f:90:bb:2a:66:fd:2b:42:46:b4:d7:3c:9d:6b:
         09:65:a6:60:43:69:27:ce:d0:de:9e:8a:5c:22:0f:63:7f:06:
         6f:0a:79:e1:20:30:88:a4:61:a3:34:cc:ef:7c:f0:f8:ee:0f:
         c2:e1:6b:c7:a9:e2:1a:dd:5d:a5:a2:a7:4b:ec:0f:1e:83:e9:
         bf:77:22:a8:6f:48:ee:5e:a4:0a:0a:9e:f9:57:aa:70:a7:5c:
         ad:0e:32:9e:ec:fb:88:dd:a3:f5:eb:57:5f:63:28:ea:88:6b:
         ca:16:b4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:34:14 2025 by rpki-client