Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
File:                     e9kR8fTQvD7mLvgzIwehNUVitSU.mft (raw, json)
Hash identifier:          bj+jI7cB63PQ9CdgygbecPIfvdvK379aCX8Ik5rC1Hk=
Subject key identifier:   7B:39:82:2A:67:80:01:6C:BF:9D:D0:55:72:47:05:6A:1B:EA:93:38
Authority key identifier: 7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25
Certificate issuer:       /CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
Certificate serial:       0199FBEB5B7BB18233D8E63295456F1B8E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
Manifest number:          0AE4
Signing time:             Sun 19 Oct 2025 10:02:09 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:09 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:09 +0000
Files and hashes:         1: e9kR8fTQvD7mLvgzIwehNUVitSU.crl (hash: aXQPIFEy2vJFIwRRUjs3EKsun3OTUuTqBiZCytMhLMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:5b:7b:b1:82:33:d8:e6:32:95:45:6f:1b:8e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd911f1f4d0bc3ee62ef8332307a1354562b525
        Validity
            Not Before: Oct 19 10:02:09 2025 GMT
            Not After : Oct 20 10:02:09 2025 GMT
        Subject: CN=7b39822a6780016cbf9dd0557247056a1bea9338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:81:6f:42:64:42:1a:c4:7e:b6:eb:0b:e6:75:
                    eb:3a:3c:f8:a3:d9:3b:0e:70:9c:fc:a4:28:64:f7:
                    06:4e:39:f1:e4:9c:e1:de:6d:5e:93:46:3b:98:ad:
                    b0:55:49:cc:ed:c1:47:9a:60:45:a1:b3:37:df:fe:
                    ea:6b:22:6b:54:8c:f1:d9:a5:19:3c:a2:d6:42:74:
                    33:e5:fa:92:46:bc:12:96:70:2f:bb:8f:47:bd:a5:
                    a8:dd:78:0b:63:ad:87:8e:2d:dc:62:83:c4:57:84:
                    df:11:31:5e:37:9f:ba:66:94:47:c1:29:a8:7b:74:
                    20:7b:c0:ab:4c:dc:7e:56:39:a0:f7:9d:a7:ab:fb:
                    e9:9e:fe:42:98:10:91:91:5c:41:a9:06:9d:38:80:
                    8d:f0:0e:29:1f:54:14:41:ab:42:e1:9c:f2:db:a8:
                    49:c6:ae:cb:0d:0a:41:0d:69:ce:47:d7:96:3a:d3:
                    60:e5:97:21:5a:16:98:19:77:da:1b:4d:1a:99:d4:
                    8e:63:04:0b:93:ce:aa:c8:24:6b:fc:f9:d2:28:e3:
                    3a:12:b6:03:06:f3:1f:4f:c3:d9:d6:38:b9:aa:31:
                    4a:b3:cd:4f:60:46:35:e2:87:45:87:e7:8d:a7:67:
                    1d:18:b0:a4:e7:ba:e4:d7:e8:1e:7e:ec:58:cb:2a:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:39:82:2A:67:80:01:6C:BF:9D:D0:55:72:47:05:6A:1B:EA:93:38
            X509v3 Authority Key Identifier:
                keyid:7B:D9:11:F1:F4:D0:BC:3E:E6:2E:F8:33:23:07:A1:35:45:62:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9kR8fTQvD7mLvgzIwehNUVitSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/51f25f-6353-4b8c-93cc-da255064d3dc/1/e9kR8fTQvD7mLvgzIwehNUVitSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:17:d7:0e:63:7c:86:cb:07:54:e9:ac:26:1c:61:54:8f:b6:
         e4:38:4e:00:8c:20:f6:98:39:7a:de:94:cf:6e:da:3a:e1:08:
         a6:ce:02:c9:c3:b1:93:2f:bf:86:96:6f:66:b1:a2:87:ab:79:
         f1:0e:45:4f:16:48:13:b4:9e:81:91:ac:98:f2:e2:ee:75:00:
         fc:3e:19:71:ea:ff:96:4d:6e:a6:d5:02:dc:d1:67:eb:68:0a:
         21:31:28:8a:b5:19:9c:90:ad:9a:05:b9:cd:fb:69:1b:c1:c8:
         1f:9f:12:f6:15:e8:b8:8c:ec:27:ba:42:9a:47:50:d8:83:9a:
         25:45:aa:ff:24:c5:34:53:d0:68:f3:2f:09:ca:f8:12:65:80:
         42:65:8d:60:e2:a9:94:2f:00:6e:90:ad:4f:88:61:74:86:1e:
         52:aa:40:24:df:d3:01:b7:fe:0a:4f:8a:b7:a5:9b:59:3e:2f:
         3e:7e:ef:70:7b:bf:af:ad:98:57:78:09:11:64:dc:29:52:31:
         0a:85:fe:14:7a:ed:57:bb:7d:aa:76:fb:d8:88:95:be:17:01:
         a9:a8:49:ea:c7:97:c2:a6:02:c9:d1:33:3e:18:09:50:2e:ac:
         fd:18:0f:ce:10:bb:c6:d8:d8:b3:46:b3:f7:e9:01:a0:e2:77:
         68:6a:3c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:21 2025 by rpki-client