Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
File:                     eNDmeWDvds5jPJ_md02H22m4m3U.mft (raw, json)
Hash identifier:          85J1kgjDaeRqWhyilygclk6P2QOzXuW4r2bUF8MRlf8=
Subject key identifier:   F3:33:39:14:85:1D:93:83:66:EB:C2:27:AE:A0:BC:6D:BB:0C:F0:2A
Authority key identifier: 78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75
Certificate issuer:       /CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
Certificate serial:       0199FC8F7CFFB8F1D27C9DD8307FA089016F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 13:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:26 +0000
Files and hashes:         1: eNDmeWDvds5jPJ_md02H22m4m3U.crl (hash: hHylh0tqUun7OrXuKgyABYH61u1z52yzqgRjL2SZt9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:7c:ff:b8:f1:d2:7c:9d:d8:30:7f:a0:89:01:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d0e67960ef76ce633c9fe6774d87db69b89b75
        Validity
            Not Before: Oct 19 13:01:26 2025 GMT
            Not After : Oct 20 13:01:26 2025 GMT
        Subject: CN=f3333914851d938366ebc227aea0bc6dbb0cf02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9d:89:9a:fe:8f:a8:26:77:7f:83:4c:49:4e:
                    55:cb:a2:14:7a:8c:40:44:b2:0b:4e:7a:f9:8f:14:
                    a0:ed:81:c2:76:4b:62:bc:2a:d3:76:a4:50:84:01:
                    21:e5:4d:07:7e:2d:9f:78:fb:24:99:78:60:59:3a:
                    59:b1:4d:8b:1b:2c:6f:61:fe:ea:fe:4d:af:af:c2:
                    33:20:7d:2e:07:3e:c0:bf:0b:06:c8:d0:37:c4:9b:
                    c2:ff:08:c4:57:fb:c1:d7:47:ba:4a:60:a3:1b:b5:
                    91:75:89:a3:2f:48:0c:bb:73:d0:0b:24:37:13:6a:
                    80:7b:da:0e:9c:50:04:b4:8c:33:03:6e:fc:64:59:
                    15:24:0b:c8:0a:0c:23:49:51:6b:c9:83:9f:cf:f6:
                    1c:38:63:9e:4b:d5:6d:43:88:70:27:13:a6:42:27:
                    34:6b:18:71:70:ee:72:15:a1:99:d6:45:3f:50:3f:
                    27:00:99:2b:95:cf:71:79:54:ab:04:dc:94:2c:c2:
                    9f:0a:c4:34:df:5e:4c:4a:31:96:85:98:43:52:aa:
                    56:a8:61:9f:1f:b5:2f:9e:bb:d2:90:79:89:72:ff:
                    03:54:4e:e3:5f:cc:9d:cb:83:70:32:35:f5:0e:29:
                    40:6b:3f:ba:34:28:0b:a4:13:bb:d0:12:d9:59:63:
                    37:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:33:39:14:85:1D:93:83:66:EB:C2:27:AE:A0:BC:6D:BB:0C:F0:2A
            X509v3 Authority Key Identifier:
                keyid:78:D0:E6:79:60:EF:76:CE:63:3C:9F:E6:77:4D:87:DB:69:B8:9B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNDmeWDvds5jPJ_md02H22m4m3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/eb62f7-8bec-4fc9-94cb-9e169d5e0a58/1/eNDmeWDvds5jPJ_md02H22m4m3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:15:78:23:8c:d5:a5:59:78:e2:f9:43:ef:8f:85:0e:ec:13:
         94:e4:a2:2f:da:0e:92:5e:84:a7:f9:a1:76:3d:71:1e:00:da:
         a8:46:6e:a6:8b:b1:2f:8c:81:8e:8a:3b:01:4d:6a:27:74:eb:
         8b:9f:10:12:8e:26:64:aa:23:76:14:ad:3c:16:a7:18:c6:69:
         37:03:40:16:aa:55:36:6a:8a:78:aa:93:c0:55:61:5b:33:17:
         b3:c9:aa:bd:41:e8:78:70:e8:53:0d:b7:76:ed:d8:9f:40:a6:
         25:1d:9e:2d:6c:47:09:89:b3:d4:01:c6:fc:94:17:4f:22:3f:
         6a:85:b6:8a:d3:58:64:90:54:c6:20:ec:57:e4:5e:5d:85:d5:
         41:4a:3c:90:9c:db:9b:97:00:ee:dd:eb:14:05:cb:ae:87:08:
         53:5f:da:0e:0c:53:ec:3a:8a:8f:b8:41:35:1b:18:c3:79:69:
         c8:61:88:91:25:b4:89:33:21:9f:16:94:4e:81:24:77:d9:98:
         25:66:71:e2:93:bb:e4:11:12:a7:f5:6a:30:bc:78:eb:3b:b3:
         d6:c2:51:44:4c:a9:02:da:f7:a6:c9:02:1c:02:84:49:b7:d8:
         82:07:ff:b3:c9:4c:a6:11:b0:fb:69:5e:7d:0d:77:be:17:05:
         de:81:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:28 2025 by rpki-client