Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
File:                     Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft (raw, json)
Hash identifier:          ecIzmvgMrf1xgKaiwen5Ey1i0ky3qeCyGeXngNzXzNU=
Subject key identifier:   C3:37:09:50:AA:58:E6:53:DA:E1:6B:5A:46:04:44:A5:97:27:6F:4C
Authority key identifier: 12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00
Certificate issuer:       /CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
Certificate serial:       0199FBEBA79E1711CEE5EC2CED66DDFC3568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
Manifest number:          0F4A
Signing time:             Sun 19 Oct 2025 10:02:29 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:29 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:29 +0000
Files and hashes:         1: Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl (hash: fT2CW0YkbtejTmr0MMsH9VyT229IKhm2dHZVaIMsIpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:a7:9e:17:11:ce:e5:ec:2c:ed:66:dd:fc:35:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1229fe677f47df0fd7cc3495f172d93b3cba0e00
        Validity
            Not Before: Oct 19 10:02:29 2025 GMT
            Not After : Oct 20 10:02:29 2025 GMT
        Subject: CN=c3370950aa58e653dae16b5a460444a597276f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:ab:b4:4c:2b:46:f4:42:4d:c8:19:8b:8e:
                    a2:35:8e:6d:dc:f0:dd:a2:a7:d5:00:a7:66:2f:71:
                    39:c8:16:c7:04:82:76:7a:6c:01:1d:20:43:e7:67:
                    1c:e6:f2:08:f1:d5:dc:e3:df:bd:97:2d:0b:a6:76:
                    bf:ca:22:6b:e5:32:2e:4a:2f:90:75:09:ec:f7:cc:
                    43:d4:da:bb:df:57:c6:fe:e7:39:7a:71:9b:76:c3:
                    69:51:5c:71:68:3a:fd:84:05:13:8e:29:dc:af:a6:
                    db:f1:98:06:12:14:03:bf:e2:82:98:2e:de:1f:75:
                    b1:b1:73:14:58:e1:87:07:6b:04:4d:88:2d:a0:cf:
                    68:98:77:39:08:8c:03:a4:56:6b:c8:14:64:e6:34:
                    c8:c3:44:75:70:eb:7b:61:92:fd:74:61:a3:7d:54:
                    2d:fd:2e:ce:51:d1:c5:b9:50:79:b4:3b:24:bf:84:
                    f7:44:86:96:89:99:96:82:a2:2f:25:3a:1c:f2:fe:
                    3f:87:4b:93:76:ca:eb:57:fb:d3:ff:4f:8e:d0:a6:
                    37:7b:44:8d:e1:7d:f4:a5:b7:5c:3a:76:c5:39:ff:
                    79:ec:1f:48:88:0d:45:b9:9a:36:de:35:e3:8d:23:
                    27:93:c7:09:5f:33:ae:0a:54:f1:48:ff:43:ea:5f:
                    d3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:37:09:50:AA:58:E6:53:DA:E1:6B:5A:46:04:44:A5:97:27:6F:4C
            X509v3 Authority Key Identifier:
                keyid:12:29:FE:67:7F:47:DF:0F:D7:CC:34:95:F1:72:D9:3B:3C:BA:0E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ein-Z39H3w_XzDSV8XLZOzy6DgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/dc8e07-98b5-43ef-a242-3ab66bf47bd3/1/Ein-Z39H3w_XzDSV8XLZOzy6DgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:da:46:81:fd:0a:a9:7e:ee:d9:8f:bf:7a:f9:cb:a6:ba:ca:
         77:ba:f0:f5:15:b9:b5:75:45:4f:32:7b:a6:c0:01:9b:73:25:
         20:5b:6a:c9:3a:bf:e4:45:b2:d0:8c:53:95:6e:86:d9:98:cc:
         53:29:b9:e7:3b:c7:8b:08:af:95:c2:68:61:d5:c6:27:96:c6:
         dd:d5:03:96:f4:86:aa:9b:65:2d:13:24:34:8f:81:bc:b3:82:
         30:7e:bf:38:8a:41:77:38:98:8f:b5:f0:c9:61:25:b9:0b:6f:
         47:4f:4f:00:a1:78:4d:5c:e8:db:4b:65:e2:de:aa:5e:87:65:
         0e:3a:80:db:55:3e:61:28:d9:cb:42:50:1a:4e:d2:67:ef:a4:
         45:3c:bb:2a:6e:57:75:d6:cd:2e:1e:b1:5c:0c:97:4f:4f:80:
         97:59:35:b0:0f:ac:04:76:ba:a3:24:b0:4e:32:5e:b9:79:d4:
         46:60:52:69:2a:f2:aa:cf:86:99:a6:7e:9b:34:3f:de:36:f0:
         89:65:68:7d:1a:b3:a9:9e:c3:23:dc:18:47:1f:0a:32:fc:c8:
         ae:19:14:3c:90:d0:aa:db:0c:88:bd:18:e6:8e:4d:ef:3a:37:
         bd:6e:80:de:e0:9b:f6:11:be:9b:de:93:bd:6f:b2:15:b5:2c:
         97:7c:ec:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:45 2025 by rpki-client