Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
File:                     eL0cbGiKF1q8jVmPvNEH_KUlS94.mft (raw, json)
Hash identifier:          G1bWERXQ6Rz4NSJJOiiRJpD1m3wr08G2Vv3lE0RxFF4=
Subject key identifier:   7A:78:CE:03:1B:C4:5D:FB:E7:24:04:B7:6F:A6:4B:CE:F3:45:15:35
Authority key identifier: 78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE
Certificate issuer:       /CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
Certificate serial:       0199FC58A0755B9E4DEF990DA9374B203E8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 12:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:30 +0000
Files and hashes:         1: eL0cbGiKF1q8jVmPvNEH_KUlS94.crl (hash: zg6S7Geui5mU5NSHhvcfMElQuntMl44prDjgmEOfIJs=)
                          2: nCGmubCJiSGpdDfmtDjyCBhbirE.roa (hash: DBvXchMzo0c+o7gBr3asd/okXNFiJinaSi6NEP9igBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:a0:75:5b:9e:4d:ef:99:0d:a9:37:4b:20:3e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78bd1c6c688a175abc8d598fbcd107fca5254bde
        Validity
            Not Before: Oct 19 12:01:30 2025 GMT
            Not After : Oct 20 12:01:30 2025 GMT
        Subject: CN=7a78ce031bc45dfbe72404b76fa64bcef3451535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:49:a6:ed:45:47:14:6d:ab:21:c4:a4:59:
                    58:11:da:5f:6a:d0:54:a9:2e:9c:14:23:b3:02:87:
                    73:2e:de:94:43:ce:34:48:58:c9:eb:2a:99:ac:d9:
                    06:49:d3:0f:c2:48:9b:d3:fd:d4:80:41:a2:2e:50:
                    06:1c:fb:43:66:e9:34:98:7d:6a:10:b9:9c:cf:82:
                    af:7c:af:30:7a:16:a6:32:c3:43:39:ee:38:b9:d5:
                    dd:23:d7:d9:1c:f8:02:70:bd:a0:35:68:82:85:fc:
                    3c:db:69:fa:fc:dc:81:3f:94:73:91:b6:b1:d2:f6:
                    d7:b8:b5:ff:40:77:67:9d:92:e7:d5:66:2b:d4:1c:
                    09:f9:f5:e7:63:09:14:84:ea:e5:13:67:8a:b8:5d:
                    ad:c0:d7:ec:05:56:dd:b3:3e:b6:96:fc:9e:0a:54:
                    76:94:19:e4:b4:3a:e9:ee:ac:8f:52:33:ad:b3:b7:
                    9e:f7:2f:69:c9:3d:bd:3d:43:83:36:0a:47:5d:f5:
                    9a:06:af:ed:29:02:95:68:93:3c:3a:34:d8:15:35:
                    f8:52:8c:a6:b0:4e:6b:dc:2f:01:67:de:60:55:b4:
                    8c:a2:3c:36:32:1a:b8:a7:0f:e8:a0:0c:29:7b:77:
                    88:03:4b:c1:a4:62:75:3e:e7:ad:f1:9e:f1:b9:03:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:CE:03:1B:C4:5D:FB:E7:24:04:B7:6F:A6:4B:CE:F3:45:15:35
            X509v3 Authority Key Identifier:
                keyid:78:BD:1C:6C:68:8A:17:5A:BC:8D:59:8F:BC:D1:07:FC:A5:25:4B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eL0cbGiKF1q8jVmPvNEH_KUlS94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/32b4a2-2b2f-4f6a-9b48-c1f3b9ede4db/1/eL0cbGiKF1q8jVmPvNEH_KUlS94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:af:50:fe:6e:52:a9:e3:53:1d:3f:f4:30:28:68:48:55:c9:
         f8:6b:54:a0:7e:d8:bc:17:7a:45:b1:01:1e:99:2e:9f:67:77:
         8b:9a:a6:cf:ac:1d:b3:c7:be:2c:4b:ed:02:c3:57:2a:8a:2d:
         d1:f1:25:07:7d:60:c2:79:a4:c7:a1:1a:d7:23:7f:63:28:07:
         f3:ed:df:6f:ac:7d:47:7e:7a:60:50:c0:8b:11:e9:b2:24:63:
         86:ad:61:73:49:94:f9:f0:d3:9c:de:4c:3f:65:9a:23:05:21:
         8c:e3:6f:0b:4c:53:dd:68:c9:2a:d1:31:47:85:57:bd:9d:c2:
         5c:d9:1e:5b:d8:a9:08:38:82:2f:fe:20:8b:1f:f7:62:da:5e:
         36:2d:b9:93:d2:b4:17:3c:44:ba:3a:ce:a6:48:72:77:b8:63:
         63:ad:46:19:17:0d:da:ef:ca:30:d8:ff:17:18:7c:b0:05:00:
         8d:b7:e3:45:f6:89:dc:48:b2:73:22:91:74:e7:f4:05:06:6a:
         e2:e9:f7:08:fa:4b:91:bc:ed:1a:77:ff:79:b0:39:53:e6:f5:
         f8:8c:fd:45:19:01:3f:29:51:73:47:be:3a:7c:42:dd:37:f4:
         a5:a6:b0:d5:3b:47:07:4a:f0:24:ca:9d:a2:97:7f:a3:58:2c:
         e7:d1:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:59 2025 by rpki-client