Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File:                     EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier:          Fy8lB4sA2I5N90v+7JMabwOq+WqP6fh4QKT/D0hitjI=
Subject key identifier:   78:CC:AD:8E:97:C8:28:22:C1:8C:32:18:BC:7D:51:60:C1:64:29:6A
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer:       /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial:       0199FC8F5BA36D47B36244D3D5BAE29353C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number:          1450
Signing time:             Sun 19 Oct 2025 13:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:17 +0000
Files and hashes:         1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: LFakKA6IZyLSYTP2JwRngiUE6csMQtXJRhjgBG11gSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:5b:a3:6d:47:b3:62:44:d3:d5:ba:e2:93:53:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
        Validity
            Not Before: Oct 19 13:01:17 2025 GMT
            Not After : Oct 20 13:01:17 2025 GMT
        Subject: CN=78ccad8e97c82822c18c3218bc7d5160c164296a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f7:d1:18:b7:a6:bd:7a:66:b3:65:43:60:c5:
                    53:bc:c8:a1:c2:17:d4:ab:e8:aa:08:21:f3:d8:cd:
                    96:e7:08:11:80:a9:65:cc:af:4e:5f:9f:96:68:08:
                    56:cb:32:ed:26:47:2b:1b:12:12:79:b8:f7:00:72:
                    e7:f6:5f:bd:45:4e:79:9b:3e:52:26:77:1f:6e:bc:
                    a0:89:ce:f4:1b:42:0e:d1:ea:05:d9:04:a1:af:92:
                    41:f0:98:86:15:a0:b2:5d:56:08:10:c7:2d:fa:4f:
                    de:ba:1b:ac:57:df:3d:dd:4c:77:1f:ef:82:45:de:
                    1d:a7:5f:c3:3a:36:39:10:be:55:bf:9a:98:10:b7:
                    93:48:3f:68:ac:a9:c6:d8:86:47:fd:25:31:db:a0:
                    10:33:8a:a5:57:5b:95:0c:b2:bf:ff:2d:c1:45:3a:
                    b5:56:67:47:81:30:f0:63:d9:9d:9a:50:0b:4c:2b:
                    5b:e2:58:53:1a:53:12:2c:3f:8b:37:42:6a:0e:8f:
                    4b:83:4a:60:ca:b2:b9:8d:4b:99:e6:7d:ae:9a:ca:
                    19:96:bd:16:d2:66:d6:45:b1:8e:c4:0b:ce:44:68:
                    45:cc:25:a6:3e:dd:60:ca:41:2e:63:f0:e3:ac:25:
                    59:30:71:17:51:01:c0:1f:eb:d9:0b:44:31:31:a9:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CC:AD:8E:97:C8:28:22:C1:8C:32:18:BC:7D:51:60:C1:64:29:6A
            X509v3 Authority Key Identifier:
                keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:c6:a3:9a:8d:b4:95:3f:49:59:a4:37:c2:3e:88:84:7e:
         5b:ed:9a:d9:74:db:77:09:9b:6f:61:23:05:0c:7e:e8:c4:25:
         ad:58:ac:8c:2f:73:c6:2e:26:c0:72:cb:ba:7c:c3:63:d7:58:
         5d:0c:11:f1:f4:b4:e1:2b:21:61:60:a5:32:9a:47:ca:10:d4:
         9d:c1:91:b9:bf:f6:a1:cc:0c:82:5b:f1:71:74:68:92:31:8a:
         41:9a:7e:94:9f:73:ff:07:df:af:52:a3:9d:ec:cf:82:64:8b:
         d8:c3:2b:27:2a:a4:80:a8:68:0d:54:4e:e9:bc:80:71:0c:33:
         eb:e3:46:32:dd:6d:b5:bf:52:27:e2:6c:6e:60:f8:3d:3e:60:
         0d:a0:de:7f:69:10:68:0f:33:24:c0:57:95:00:b8:c6:7c:25:
         0d:32:f5:82:5b:56:9e:a9:44:8f:5d:50:b5:a5:f3:84:7d:93:
         b9:26:7c:cb:9f:c8:23:a3:f6:c9:17:3d:6c:7e:a4:05:ae:6d:
         8d:ec:4d:0c:7a:e3:b5:1d:6f:5f:54:30:75:0e:f4:f4:13:be:
         6a:be:d9:7d:43:b9:35:b2:98:04:91:e8:57:58:98:cb:59:75:
         9f:bc:b2:f2:5a:19:60:74:bc:59:e4:40:02:c9:f2:09:8d:a0:
         ad:a6:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:28 2025 by rpki-client