Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File:                     ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier:          Pa/tUWqrkwGCRdshmtvIYQdKzNPmUlt4PV1QrCJl+Cc=
Subject key identifier:   68:06:C1:3D:EA:FF:93:CF:CE:91:43:EE:92:67:9B:37:13:9F:99:52
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer:       /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial:       0199FA6A752703B90DECE158FBD169C746E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number:          04F9
Signing time:             Sun 19 Oct 2025 03:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:44 +0000
Files and hashes:         1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: Fo7dumOfqU3mGibeqhmvpPoxEPBTORqjNdJf4C72Jik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:75:27:03:b9:0d:ec:e1:58:fb:d1:69:c7:46:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
        Validity
            Not Before: Oct 19 03:01:44 2025 GMT
            Not After : Oct 20 03:01:44 2025 GMT
        Subject: CN=6806c13deaff93cfce9143ee92679b37139f9952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:7c:a9:35:9e:59:05:81:2e:95:cf:9d:9e:
                    36:7c:3c:75:01:b5:bc:2b:2e:19:71:40:67:be:9e:
                    b7:63:a7:98:25:a2:f1:76:bb:e6:36:b5:08:0d:63:
                    99:5a:a6:b3:4e:4e:9b:6e:dc:55:5b:53:a4:f7:4d:
                    5f:89:4a:27:c4:ec:da:ef:a2:7a:16:bb:80:9f:6c:
                    da:b2:5c:15:82:1a:e1:a7:63:61:74:82:60:72:1b:
                    cc:66:e4:a8:a6:f9:bb:0f:f9:19:d0:62:50:01:6b:
                    97:2a:83:26:e9:59:b9:ae:2d:f5:2e:19:6b:19:3a:
                    b6:37:d1:9a:ee:b7:34:dd:e7:f0:6b:b8:8e:88:0f:
                    cc:b2:a5:f4:38:03:6a:55:f1:37:8d:a7:c0:d2:e7:
                    dc:0a:27:3a:e2:27:d7:a3:84:ca:73:85:b6:e4:c2:
                    e9:dc:b9:a7:11:00:ab:5c:5c:84:14:90:fa:6c:74:
                    de:74:48:b6:36:ef:96:25:f7:d8:8f:2a:4e:96:0f:
                    3d:af:c7:e5:e5:d6:bc:21:c7:d0:f9:c7:23:c5:30:
                    7b:ad:58:37:07:7c:a2:15:10:1f:45:e1:5e:0a:97:
                    c1:7f:28:98:a1:c0:c7:9f:e4:58:6a:1a:f4:f2:c0:
                    94:89:82:e2:13:0b:b4:3b:9d:d8:47:86:bf:f5:ad:
                    d9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:06:C1:3D:EA:FF:93:CF:CE:91:43:EE:92:67:9B:37:13:9F:99:52
            X509v3 Authority Key Identifier:
                keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ab:02:35:92:5a:92:6e:ab:92:25:45:4b:cf:d9:53:fb:d4:
         1c:57:df:2e:ce:bb:72:1d:d7:c2:8b:69:e3:db:9e:97:7a:98:
         ca:f1:f9:b7:c7:bd:1d:d5:25:e2:d2:f7:d4:8b:66:a2:1e:21:
         8a:2f:33:2d:ed:fc:3d:12:56:e0:4c:f9:95:9d:c4:87:b4:21:
         21:96:18:a3:ca:35:22:82:73:24:32:89:3a:24:6c:63:b9:ed:
         99:03:74:98:97:ad:e9:85:27:7a:c8:35:a2:53:66:0b:56:9d:
         24:6c:1e:f5:87:11:3b:39:48:16:eb:ee:64:53:53:39:be:16:
         c4:a2:61:81:a6:83:4f:05:5e:e2:cd:6c:a4:7c:fd:e9:e2:1a:
         27:92:88:f1:7b:2a:10:4d:bc:44:9f:6a:85:89:7f:19:16:d6:
         00:43:89:48:9c:2c:d0:3e:1b:ea:4e:70:3c:56:51:7f:fa:9b:
         ad:6c:3b:fa:cb:82:50:9a:b2:73:9a:13:54:5f:ce:2c:51:bc:
         c5:fa:5f:85:b6:a6:6f:4a:86:fb:bd:90:0f:92:04:77:43:37:
         78:55:73:d0:bc:ec:3f:cf:ce:0a:c7:22:e3:85:e3:42:3d:b7:
         c8:5f:e1:ae:31:e3:de:00:e1:2b:84:ee:0e:ba:f7:b9:4b:4d:
         ad:fa:83:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:05 2025 by rpki-client