Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
File:                     eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft (raw, json)
Hash identifier:          802SAbtgBnOhvYalX7figIYKzP6wUJx1Gw1m98zpuWM=
Subject key identifier:   34:92:85:DF:5B:04:DC:CA:C0:1C:91:82:C5:32:AE:5F:7D:AE:9C:DB
Authority key identifier: 78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5
Certificate issuer:       /CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
Certificate serial:       0199FC58715EBCA2AAF8C8DDFD65DAD2076B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
Manifest number:          16DD
Signing time:             Sun 19 Oct 2025 12:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:18 +0000
Files and hashes:         1: eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl (hash: 2En+WGKDnT1Ehws+2M98Q7pjP8o4VEtP+T8i5PVfnLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:71:5e:bc:a2:aa:f8:c8:dd:fd:65:da:d2:07:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78b0de4b52c31722e62b9396d87a1ea8d51a08e5
        Validity
            Not Before: Oct 19 12:01:18 2025 GMT
            Not After : Oct 20 12:01:18 2025 GMT
        Subject: CN=349285df5b04dccac01c9182c532ae5f7dae9cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:45:b8:84:73:fd:dd:2f:f1:38:71:20:97:
                    bd:53:46:2b:05:7d:84:85:bd:63:8e:d5:e4:85:ee:
                    c5:6d:be:f6:06:d3:26:6f:6f:e1:6b:2d:d8:ad:18:
                    8a:b6:a3:80:d9:84:de:68:98:6d:14:13:ba:7f:1b:
                    b5:f1:24:9e:60:d8:45:59:77:29:14:5e:12:3d:dc:
                    97:e5:1c:8a:26:3d:d6:ab:aa:94:f2:51:65:65:7d:
                    90:6a:e3:f6:32:84:9c:cd:f6:35:3f:b9:bf:51:cf:
                    2e:e1:18:7c:f2:cf:db:08:46:55:08:26:5d:aa:35:
                    32:fb:09:61:d9:36:19:a6:6e:6a:22:15:ed:97:62:
                    40:ad:89:79:8f:83:8a:77:29:cc:5e:0f:cf:df:80:
                    f5:2f:9b:88:a3:06:e1:50:22:00:b5:14:56:fb:9a:
                    4e:be:53:99:07:29:c5:42:d3:b4:82:21:12:ce:c9:
                    f8:ce:46:ab:55:a5:3d:3f:7e:60:7d:bc:1c:b9:2b:
                    fa:4e:a0:c2:dd:fe:86:28:af:de:a9:72:c2:64:fb:
                    d0:1c:70:b0:70:83:b1:fb:f5:a9:eb:35:da:c0:be:
                    c4:d9:1e:1e:c5:a9:91:52:ce:c9:60:8e:77:67:4e:
                    8e:54:97:5c:ee:e0:89:db:e7:4f:79:95:80:65:d0:
                    ef:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:92:85:DF:5B:04:DC:CA:C0:1C:91:82:C5:32:AE:5F:7D:AE:9C:DB
            X509v3 Authority Key Identifier:
                keyid:78:B0:DE:4B:52:C3:17:22:E6:2B:93:96:D8:7A:1E:A8:D5:1A:08:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eLDeS1LDFyLmK5OW2HoeqNUaCOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b59d7b-51b6-4164-89ba-47480fed09b0/1/eLDeS1LDFyLmK5OW2HoeqNUaCOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:d3:a8:a0:10:b0:3f:4c:fa:45:0f:31:0a:d4:f1:e1:f3:
         f2:f7:3f:85:bf:a5:be:06:ff:48:b8:0b:ab:5c:7a:39:89:82:
         c0:8d:c5:e7:6a:8c:26:70:31:d9:0f:6a:3e:2f:91:ea:d8:2b:
         01:a1:22:dc:5a:f0:a2:55:23:05:c8:5d:53:b6:b6:08:22:3c:
         aa:70:47:73:3f:a8:ec:0e:3f:f9:e0:9d:3c:1e:23:d8:2c:8f:
         61:20:1c:34:bc:5c:8f:25:bc:e7:d5:e3:61:87:dd:a4:dd:cb:
         c3:ee:e1:fd:66:79:5a:bc:d2:13:f4:c0:9c:5d:7b:7d:47:98:
         0c:ac:cb:e4:f7:9e:2f:16:6d:23:e7:d4:e2:1a:bf:e5:04:5d:
         cb:8a:28:79:3a:69:8d:af:20:d4:42:52:13:4c:7c:d9:db:6a:
         52:e3:23:71:b0:06:c6:de:30:4c:d8:fa:b5:7a:de:aa:b5:b3:
         a8:ea:9f:07:df:a0:58:11:33:ed:bb:a0:1f:92:00:3c:00:4e:
         1b:ea:f5:c6:6b:ca:60:83:a3:55:e7:ad:9e:b9:87:e4:cc:f0:
         a6:9e:d4:e0:54:fd:31:74:04:21:c7:6f:ce:2d:28:ff:d3:a2:
         f0:fc:03:4d:60:2e:9d:14:19:76:91:c2:db:c3:d1:0e:91:50:
         7d:73:04:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:45 2025 by rpki-client