Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          NCVT36WryOdO1OTWZXikb0rWKTRTLeLEHsIPRwRTJiA=
Subject key identifier:   DB:C0:94:7C:B7:B9:C8:8D:AC:F9:B1:B7:0B:E0:C9:89:31:43:2A:ED
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       0199FDDA53E465F1DE288E5E6357552FB40C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          1270
Signing time:             Sun 19 Oct 2025 19:02:47 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:47 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:47 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: p6TFwgH8529HtvK6ldMjHo3NzKOekvUeccRQJZYKimw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:53:e4:65:f1:de:28:8e:5e:63:57:55:2f:b4:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Oct 19 19:02:47 2025 GMT
            Not After : Oct 20 19:02:47 2025 GMT
        Subject: CN=dbc0947cb7b9c88dacf9b1b70be0c98931432aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:93:9b:aa:0c:9c:13:4f:78:c8:37:dc:b7:
                    fb:2c:22:8a:2e:64:20:76:63:9a:77:b0:83:51:57:
                    7f:6f:90:6a:b9:71:3e:ed:cf:64:0e:4c:cb:af:bd:
                    a6:24:71:d9:76:d0:53:42:03:27:71:74:20:d4:0f:
                    a4:e2:53:b4:ae:0d:a3:e2:f1:7a:36:79:78:7f:3b:
                    cc:e1:a5:22:84:ca:fd:10:d8:b6:3a:b1:c3:b1:d8:
                    20:10:b1:65:13:a0:7a:6e:52:04:ae:f1:c4:ba:f2:
                    c6:b2:e1:46:88:ff:c0:97:53:e6:c9:52:fd:e7:92:
                    1a:5e:52:e3:40:c9:fd:ae:0c:88:d3:09:b8:a1:0c:
                    08:d0:f3:c8:57:79:d5:f2:18:99:74:24:40:6d:c8:
                    b0:56:dc:53:5d:08:f0:5b:a2:62:25:02:a2:08:ed:
                    b7:36:a3:1c:6a:57:a9:ae:81:0d:11:14:b0:16:e2:
                    1b:58:92:b8:28:8c:a3:b7:f1:a7:90:eb:db:57:36:
                    cc:37:77:e7:0b:26:ee:6a:da:77:fb:31:51:77:df:
                    c8:2f:3d:fc:9b:60:d5:53:a9:dc:03:88:4d:73:6f:
                    18:9b:c0:81:78:d3:2e:e8:ee:88:d3:74:9b:bf:3c:
                    39:b0:c4:85:c5:49:89:e7:07:f5:92:05:52:2e:98:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C0:94:7C:B7:B9:C8:8D:AC:F9:B1:B7:0B:E0:C9:89:31:43:2A:ED
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:2e:ea:2d:56:89:1b:d3:58:c8:93:a5:4d:f5:1a:02:56:e5:
         61:6d:73:ad:48:80:53:bd:f2:01:f6:c9:55:98:5d:8c:ca:38:
         8f:d9:9f:8b:14:94:03:5b:9a:e0:97:97:08:00:9f:11:d3:65:
         49:86:9a:de:2b:83:11:f0:7b:7d:76:b1:d1:2d:4d:00:0f:57:
         c2:ee:ed:33:25:20:33:9c:ec:f0:a0:5b:15:c0:77:1a:01:48:
         43:e7:66:98:67:e5:12:ef:b3:66:fe:30:9c:7f:c5:8e:74:1e:
         46:69:fd:68:97:19:bc:0e:1b:e4:0a:14:80:de:3f:3d:49:0a:
         a4:3a:84:c3:39:11:35:0c:f6:d6:cf:75:9e:d5:0f:5e:b4:fa:
         d4:55:22:74:be:0d:84:b2:28:0d:90:6c:3d:d7:99:93:a6:d0:
         26:a3:b0:b5:eb:e3:c5:54:07:29:50:6c:05:44:07:8d:7b:da:
         5d:4e:15:27:e2:bf:19:bb:5a:4f:67:50:80:37:29:f7:7c:27:
         27:0d:e2:a1:fd:ea:0c:d9:ef:6d:84:f2:b8:59:4d:e3:24:7d:
         60:63:08:51:91:a0:7c:23:a2:d1:5c:33:48:15:31:6a:05:f9:
         ee:61:47:ff:88:0f:2b:f0:9f:dc:3f:98:06:cd:ed:4a:de:97:
         57:fa:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:34 2025 by rpki-client