Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier:          2lZuAVv+dVSfeacDYM4sWikTGy34XorAFS1gj7/04YI=
Subject key identifier:   E9:04:CF:C5:6D:C0:40:EB:A2:31:BA:EE:33:28:0E:92:19:CA:16:C3
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer:       /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial:       0198D51611DC547E4E105EBEBD4D5191AE22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 04:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:50 +0000
Files and hashes:         1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: z1vX3zV6VtYVphlkRA2ne7L/nc948hFQh4wzSzTxpuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:11:dc:54:7e:4e:10:5e:be:bd:4d:51:91:ae:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Validity
            Not Before: Aug 23 04:00:50 2025 GMT
            Not After : Aug 24 04:00:50 2025 GMT
        Subject: CN=e904cfc56dc040eba231baee33280e9219ca16c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:82:73:8c:19:91:89:ff:b5:44:1d:83:db:
                    c4:05:74:ab:fe:0f:a9:ec:68:df:6c:78:f0:73:db:
                    21:a3:aa:06:32:47:fa:b5:42:79:47:73:ef:b0:48:
                    19:30:c0:b4:78:bf:36:56:7d:91:32:28:e2:79:cc:
                    8b:21:2f:8e:09:80:b3:72:f1:d7:35:cb:55:e3:f5:
                    44:93:ba:64:83:f3:d2:ac:a5:97:33:4e:59:bc:22:
                    f4:35:c8:4c:05:d3:31:63:e5:8a:e8:c3:c4:34:fd:
                    3c:51:29:c4:70:63:5e:99:bc:4b:e0:cf:e2:6f:05:
                    93:c0:3d:ca:a8:60:5b:0b:44:a0:46:04:00:4f:1a:
                    9e:60:56:f2:7b:06:78:71:9e:ab:8c:3d:43:31:73:
                    ed:fc:df:9d:68:f0:56:d4:19:a5:25:4a:b2:1e:3d:
                    a6:08:6f:b1:f9:51:fa:71:0a:3b:21:b8:b6:a6:b9:
                    40:19:fd:41:0c:4c:4a:cc:30:3d:60:08:18:ff:15:
                    ea:40:85:48:9b:c6:69:0b:49:53:99:dc:6c:9a:80:
                    bd:78:db:3f:f7:c4:9e:e3:e8:9a:7f:0e:91:59:6c:
                    56:84:de:90:d9:3d:e9:00:d0:2e:09:6c:42:d2:ef:
                    d3:3b:5a:75:9c:17:33:c6:c8:02:fa:94:fd:82:c0:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:04:CF:C5:6D:C0:40:EB:A2:31:BA:EE:33:28:0E:92:19:CA:16:C3
            X509v3 Authority Key Identifier:
                keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:34:d4:93:b9:74:f6:bf:47:80:60:30:7f:b7:9d:cb:85:fc:
         92:9b:6e:36:01:3d:39:db:17:b0:e5:0b:fa:02:54:c9:f2:ed:
         3c:62:db:18:85:37:71:85:25:dc:0c:93:2d:8b:84:f5:0f:32:
         79:e2:84:7a:f5:e2:93:04:1a:e1:25:d6:72:c4:27:a7:3b:25:
         d0:5e:e8:68:55:5f:d1:70:6a:df:25:5c:f1:19:ac:a4:cc:c1:
         f2:a5:35:9f:50:92:f5:9f:14:37:31:98:12:96:5c:10:4e:5c:
         23:8e:a2:b4:50:cb:cd:59:74:c6:a5:ae:04:82:e5:75:fa:1f:
         77:8d:a8:1a:01:13:f0:4c:51:11:0f:d4:6d:82:61:93:8a:f5:
         e0:24:d2:68:3a:5d:6b:54:42:5b:72:14:8b:41:a4:f6:30:22:
         c9:1e:89:36:f8:63:c3:5b:18:bf:a0:1f:5c:9e:d3:2b:4c:f8:
         24:bc:bc:bc:a5:7b:3b:78:59:37:a3:9e:11:44:81:09:63:d0:
         9e:3a:2c:d6:9c:b4:e3:83:f7:bf:81:2a:ae:8b:ee:88:d9:08:
         8e:3b:b0:6b:98:80:66:43:20:a7:63:af:ec:43:d8:b2:65:2f:
         26:8b:30:69:18:6e:7f:82:dc:4e:77:c8:86:21:69:c8:ad:e9:
         ca:51:50:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:52 2025 by rpki-client