Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File:                     eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier:          qJALV0v19oQqnV8L35W5YQf3MGH81ySofSXdHNApnP0=
Subject key identifier:   7D:0E:F5:3A:96:A0:99:55:E1:07:0A:31:73:93:DE:CA:7D:9A:4B:5D
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer:       /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial:       0198D583942868C92A77AE7A24A3B15F861A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number:          0233
Signing time:             Sat 23 Aug 2025 06:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:26 +0000
Files and hashes:         1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: alkbsBfwGBRaIygywFHUmycgDDGDa02xgW+H01lhNCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:94:28:68:c9:2a:77:ae:7a:24:a3:b1:5f:86:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
        Validity
            Not Before: Aug 23 06:00:26 2025 GMT
            Not After : Aug 24 06:00:26 2025 GMT
        Subject: CN=7d0ef53a96a09955e1070a317393deca7d9a4b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:80:b0:6f:4b:f4:6f:3a:b2:65:d1:21:25:
                    69:e3:4c:02:72:c2:6b:53:8e:ad:72:7f:4e:53:e5:
                    8e:f5:a5:f2:4b:05:69:ba:e1:b1:f6:00:69:b4:80:
                    d9:f4:82:8b:9a:5e:4b:60:6e:cc:d7:db:b4:4e:b0:
                    50:eb:42:82:ab:80:d7:a1:8a:a6:2e:21:92:bf:c8:
                    0c:08:47:7a:d3:a9:01:01:28:fc:8f:4a:18:6c:b1:
                    be:cb:82:11:88:9a:2c:63:ce:2d:8f:12:d4:f0:23:
                    72:49:e0:21:31:c7:d4:ec:01:05:94:46:de:af:11:
                    03:f7:0b:2a:39:2d:b1:52:97:6c:53:dc:2b:af:ac:
                    8f:85:69:dd:65:42:a9:17:28:e6:19:5d:4e:da:9c:
                    42:d2:41:fd:97:f3:b4:9b:9f:0c:eb:2f:46:aa:8f:
                    4f:fb:a0:f7:d7:0e:d6:aa:6a:31:dd:91:39:f1:41:
                    4f:e7:76:77:7d:63:10:f6:cf:ac:0d:b0:0d:f0:e8:
                    a5:5b:63:80:6a:74:51:18:eb:71:55:a2:a7:14:39:
                    d2:49:0a:4b:f6:80:2f:21:f2:20:3e:81:8d:8d:b9:
                    5c:b9:a9:b9:26:a6:11:05:db:98:d2:ed:44:23:a0:
                    51:59:d7:30:1c:e2:18:a3:c1:7a:54:bb:8c:09:5d:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0E:F5:3A:96:A0:99:55:E1:07:0A:31:73:93:DE:CA:7D:9A:4B:5D
            X509v3 Authority Key Identifier:
                keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:93:40:16:5c:b5:99:b3:4c:df:89:16:35:5b:9e:d2:bc:4d:
         d4:a4:71:00:2d:38:33:ff:cf:6d:dd:9b:89:ac:d7:50:47:83:
         34:4c:31:27:6a:be:79:1b:83:8e:ff:93:9c:f5:ef:a7:7e:5a:
         29:bb:74:2d:1c:61:1e:5a:fa:54:4b:c8:95:79:75:3a:40:70:
         b2:5b:8a:ef:80:37:34:92:24:d3:1d:bc:9c:bf:13:c3:cc:2b:
         42:ee:d2:f6:00:ce:f2:a0:61:9d:ca:3c:00:a9:7d:8c:4d:6e:
         04:3c:df:c1:e1:87:89:83:ea:c3:3e:21:70:52:68:42:40:95:
         fd:de:c8:68:0a:72:6a:88:94:44:f2:9b:aa:6b:e8:a8:0f:ba:
         81:1e:45:22:2f:23:a2:7c:0e:43:78:8b:a2:3e:d5:3c:2c:ef:
         7d:3f:fa:62:21:a2:91:38:50:27:7c:3a:61:d1:bb:f1:46:a5:
         46:41:60:35:ad:bf:88:bd:e5:e5:d9:2c:30:50:ee:99:93:13:
         68:7e:8d:56:f3:af:8b:9f:87:6a:9d:a7:e6:fc:eb:60:b1:ca:
         ac:f9:87:38:3b:85:27:23:60:a6:7f:a9:80:5b:ed:6e:3b:cd:
         64:85:01:42:8c:ba:90:d5:7d:1b:e3:76:c2:09:aa:17:f9:87:
         07:ef:72:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:36 2025 by rpki-client