Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
File:                     eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json)
Hash identifier:          2ojUcSlDW+M0aaCPcqU1CJTQG6tfHdK+JQd0GXuAWUc=
Subject key identifier:   10:BA:53:47:BD:1C:BB:6F:3C:08:79:15:45:F4:E6:B5:D6:95:42:70
Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B
Certificate issuer:       /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
Certificate serial:       0199FCFDACB33440721855A34D8D18735F77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
Manifest number:          02CC
Signing time:             Sun 19 Oct 2025 15:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:47 +0000
Files and hashes:         1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: nPjbcKPiqNDTDkrGdntzx1cf1T1wQXhT/dN/WTFNteE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:ac:b3:34:40:72:18:55:a3:4d:8d:18:73:5f:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b
        Validity
            Not Before: Oct 19 15:01:47 2025 GMT
            Not After : Oct 20 15:01:47 2025 GMT
        Subject: CN=10ba5347bd1cbb6f3c08791545f4e6b5d6954270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:b9:52:ef:1d:59:72:dc:e4:6a:9c:15:35:
                    0e:a3:3b:8e:fa:89:24:74:63:33:db:ea:28:02:bb:
                    aa:57:97:a4:48:6a:2e:9b:38:65:a7:5a:69:70:4f:
                    61:21:dc:cb:f1:25:9e:0b:6d:c4:91:ab:78:ef:c9:
                    26:04:35:3d:57:8d:47:03:8a:52:db:65:ef:af:54:
                    42:e9:d5:d3:8c:ff:3d:6d:43:f2:62:66:8b:17:70:
                    fd:b8:78:0e:f2:72:18:da:00:6d:9f:0e:5d:1f:72:
                    ed:5b:a2:3f:e7:17:98:dc:f8:ab:6e:e1:4e:f1:1b:
                    13:1f:0d:e2:cd:24:51:fb:0d:3d:f4:66:2f:d3:6e:
                    5f:ce:71:5d:9a:cb:38:22:23:91:85:fb:e3:94:bd:
                    90:df:81:64:7d:de:d8:c8:d4:27:b1:cb:d6:52:b1:
                    2f:f9:ac:c2:6f:0c:34:47:0b:2a:e7:a8:c0:49:69:
                    86:3f:51:a8:db:ec:04:1a:53:fc:94:bd:2f:87:dd:
                    e0:b3:7c:be:93:cb:7a:c7:fa:84:9f:56:4a:16:68:
                    01:84:e8:31:8a:ba:2e:77:52:ea:97:c4:78:82:f5:
                    61:b7:d8:90:9e:ba:c3:c9:8f:6b:77:d0:09:67:7d:
                    c2:3e:02:ef:60:4a:b7:5c:72:15:7c:b5:7f:fa:ca:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BA:53:47:BD:1C:BB:6F:3C:08:79:15:45:F4:E6:B5:D6:95:42:70
            X509v3 Authority Key Identifier:
                keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:b5:e6:7a:4c:a0:d4:64:4d:c5:02:31:52:33:5e:11:7e:
         2f:36:6d:26:0a:88:1f:6d:3d:8b:94:a8:2d:f9:ec:ae:3a:fd:
         eb:ff:14:b3:00:c7:73:61:e0:e4:60:c3:30:54:b0:93:1e:b1:
         07:72:d0:35:f6:1c:3e:30:79:ef:c5:6e:44:c4:94:10:42:a5:
         7b:5e:64:d1:57:33:cc:01:c2:c6:c5:e0:d7:14:23:12:25:3b:
         75:bc:b4:2a:74:bf:62:bb:16:ca:8b:ca:0e:f8:2a:49:12:09:
         82:8c:7a:1a:a3:0c:c9:67:85:75:de:cc:c2:a6:fd:d3:1d:8f:
         5d:98:f0:b8:35:dd:dc:b7:db:2b:8a:cf:19:ed:7c:0c:11:bb:
         12:f3:b1:64:03:52:cf:d6:68:73:81:b9:25:ce:f2:d6:0d:26:
         20:5b:4e:b7:19:58:33:b6:42:17:25:3e:3e:48:14:a0:86:ef:
         84:8b:89:4c:e8:8f:fd:5e:f4:96:17:cb:18:9d:fc:06:49:28:
         21:8b:91:ee:e1:a9:2f:68:78:93:7a:71:e9:9a:27:73:eb:74:
         e2:32:12:38:ab:1f:ff:7e:9b:a9:8b:8a:be:d4:b0:04:03:e1:
         a3:67:c8:e8:fb:44:fb:1d:46:1b:18:d9:ab:f9:77:05:ba:74:
         ae:1f:09:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/ayzNEByGFWjTY0Yc193MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZDhhZjc4ZTZmYmFkMmVlN2UyZDBjZWI4NmJhMzhiZmE1
NDhlMWIwHhcNMjUxMDE5MTUwMTQ3WhcNMjUxMDIwMTUwMTQ3WjAzMTEwLwYDVQQD
EygxMGJhNTM0N2JkMWNiYjZmM2MwODc5MTU0NWY0ZTZiNWQ2OTU0MjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLq5Uu8dWXLc5GqcFTUOozuO+okk
dGMz2+ooAruqV5ekSGoumzhlp1ppcE9hIdzL8SWeC23Ekat478kmBDU9V41HA4pS
22Xvr1RC6dXTjP89bUPyYmaLF3D9uHgO8nIY2gBtnw5dH3LtW6I/5xeY3PirbuFO
8RsTHw3izSRR+w099GYv025fznFdmss4IiORhfvjlL2Q34Fkfd7YyNQnscvWUrEv
+azCbww0Rwsq56jASWmGP1Go2+wEGlP8lL0vh93gs3y+k8t6x/qEn1ZKFmgBhOgx
iroud1Lql8R4gvVht9iQnrrDyY9rd9AJZ33CPgLvYEq3XHIVfLV/+spplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBC6U0e9HLtvPAh5FUX05rXWlUJwMB8GA1UdIwQY
MBaAFHjYr3jm+60u5+LQzrhro4v6VI4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDIt
NzM0MTQxZGUzNTc2LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDItNzM0MTQxZGUzNTc2
LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQy15npM
oNRkTcUCMVIzXhF+LzZtJgqIH209i5SoLfnsrjr96/8UswDHc2Hg5GDDMFSwkx6x
B3LQNfYcPjB578VuRMSUEEKle15k0VczzAHCxsXg1xQjEiU7dby0KnS/YrsWyovK
DvgqSRIJgox6GqMMyWeFdd7Mwqb90x2PXZjwuDXd3LfbK4rPGe18DBG7EvOxZANS
z9Zoc4G5Jc7y1g0mIFtOtxlYM7ZCFyU+PkgUoIbvhIuJTOiP/V70lhfLGJ38Bkko
IYuR7uGpL2h4k3px6Zonc+t04jISOKsf/36bqYuKvtSwBAPho2fI6PtE+x1GGxjZ
q/l3Bbp0rh8JPQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:37 2025 by rpki-client