Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
File:                     ee-AdXX1WsX-nfSkqExMh2CPAoU.mft (raw, json)
Hash identifier:          R8+bFgKyoY24TTUASIHj0IAHFYdFAjafvwQmQJhNQg0=
Subject key identifier:   F0:44:81:22:2A:F8:1F:F1:68:CA:A3:BF:67:1F:E1:71:B1:E0:68:0B
Authority key identifier: 79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85
Certificate issuer:       /CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
Certificate serial:       0199FE0FE3FE71ED4B065D91D02A8FDB615C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
Manifest number:          05F4
Signing time:             Sun 19 Oct 2025 20:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:18 +0000
Files and hashes:         1: ee-AdXX1WsX-nfSkqExMh2CPAoU.crl (hash: DIvxEG5i3uISKrYsOR6dD19Pi3yqFKHQbHJcLboOCfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:e3:fe:71:ed:4b:06:5d:91:d0:2a:8f:db:61:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79ef807575f55ac5fe9df4a4a84c4c87608f0285
        Validity
            Not Before: Oct 19 20:01:18 2025 GMT
            Not After : Oct 20 20:01:18 2025 GMT
        Subject: CN=f04481222af81ff168caa3bf671fe171b1e0680b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a5:38:36:0d:98:be:3e:e4:2e:ab:b8:46:20:
                    21:15:b0:6e:e6:f3:28:0e:fd:c2:39:cf:03:42:5b:
                    9f:df:bd:36:f2:bd:64:00:78:69:91:7d:d8:e5:a3:
                    13:f7:4b:9f:f1:5a:24:ac:7d:36:b3:8a:f3:54:43:
                    2c:c8:54:49:87:f9:4c:aa:1e:57:b8:2a:4c:38:14:
                    62:45:d5:5e:cd:c5:7e:dc:98:a5:9e:e3:7e:b7:f5:
                    bf:2c:1a:c9:38:a9:89:80:f0:03:03:c1:f4:34:51:
                    e1:0c:f2:76:70:3a:c7:9d:73:8b:07:26:8d:96:a0:
                    14:ec:83:0c:13:48:0a:04:9b:d9:06:45:03:47:77:
                    92:ac:75:be:ea:cd:5e:c4:9a:a9:a3:b6:9e:b0:30:
                    ae:2e:d7:63:4a:da:37:aa:fd:95:a9:dd:83:26:7f:
                    57:6f:22:4f:d5:2f:8f:ee:9e:cd:86:a2:64:52:f6:
                    fa:db:fc:a3:d4:f2:19:f6:89:26:59:b3:be:da:45:
                    8d:26:f0:d4:90:18:21:03:77:6e:f6:c2:40:52:13:
                    4b:4e:6c:bd:cc:96:2b:5f:fb:c0:25:3a:37:41:81:
                    b9:74:3c:64:69:c0:c5:10:e7:3a:e4:37:5d:c8:42:
                    90:ba:0b:ee:fa:33:27:12:61:3e:da:4c:ba:0f:65:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:44:81:22:2A:F8:1F:F1:68:CA:A3:BF:67:1F:E1:71:B1:E0:68:0B
            X509v3 Authority Key Identifier:
                keyid:79:EF:80:75:75:F5:5A:C5:FE:9D:F4:A4:A8:4C:4C:87:60:8F:02:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee-AdXX1WsX-nfSkqExMh2CPAoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9fb843-5cbc-4bfd-b419-9a4a8b933bdd/1/ee-AdXX1WsX-nfSkqExMh2CPAoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:9e:4e:03:de:4e:01:55:83:f6:11:ea:43:d5:fa:bd:e7:
         d8:e5:51:bc:4b:73:d5:cf:77:3b:a1:65:54:9d:d0:70:4b:bf:
         61:aa:53:29:ee:ac:e5:c7:0c:64:db:c1:93:93:2e:96:45:ec:
         26:c2:78:59:9b:1a:79:b7:47:19:f5:4e:a8:03:ef:a8:f0:c1:
         b2:19:74:dd:03:78:06:11:86:14:7a:b8:a4:75:bf:f0:a5:5e:
         00:fa:9f:f6:19:07:8f:56:12:d9:35:1c:43:e0:0b:4b:ba:df:
         24:69:e8:0d:44:c4:dc:5a:c4:8d:9b:b6:06:c1:66:33:ac:4f:
         68:df:f3:15:7c:95:a4:4b:e7:1b:57:e1:9a:2e:65:a9:59:b6:
         5b:fb:d1:67:6c:a6:3d:b0:e5:ac:b6:b2:b3:a4:33:57:8a:9d:
         b5:01:25:0f:b3:72:ac:a0:2c:53:8b:15:58:db:19:68:b1:87:
         89:3e:f2:8a:f7:85:b0:69:2f:8b:1c:51:64:6c:cb:f4:94:8a:
         93:6b:39:c7:de:98:3d:49:71:9c:5b:09:53:18:d5:83:c1:cd:
         7f:2b:c4:c4:68:fe:ad:f5:71:71:01:04:48:53:a1:c5:79:da:
         04:25:4c:db:36:a7:87:13:5a:04:6a:aa:c1:57:50:4c:c6:ed:
         10:85:a6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:16 2025 by rpki-client