Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          qylBsqXcphDxofM+AgBoveXs6uX3LQmDgO7oGU4A+xI=
Subject key identifier:   CF:E7:6B:4C:FA:DF:2D:FB:79:6A:19:A9:7E:BF:F2:4D:25:17:81:84
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       0197C8024A07FCB22769391D240567A51838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          114B
Signing time:             Tue 01 Jul 2025 22:01:22 +0000
Manifest this update:     Tue 01 Jul 2025 22:01:22 +0000
Manifest next update:     Wed 02 Jul 2025 22:01:22 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: Mto+Eox0rL1PjLFxZAmWfrYjBg3fAi6J7BZQ57t2MUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c8:02:4a:07:fc:b2:27:69:39:1d:24:05:67:a5:18:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Jul  1 22:01:22 2025 GMT
            Not After : Jul  2 22:01:22 2025 GMT
        Subject: CN=cfe76b4cfadf2dfb796a19a97ebff24d25178184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:09:88:fc:c1:a0:7f:48:a0:26:3a:4b:c0:30:
                    ce:9f:18:08:6a:50:50:d3:76:95:24:58:c5:ef:ad:
                    19:a9:42:e4:3b:38:06:48:3b:ea:78:b3:e6:15:cb:
                    7b:5d:20:09:fb:ff:31:c0:e9:f5:d4:af:80:c1:0e:
                    47:d1:2c:ec:fc:e1:0d:2b:f1:02:a4:fb:9c:f5:6b:
                    ae:0d:27:d8:c0:45:df:a0:c9:3a:bb:75:bf:c1:34:
                    4a:e1:1b:96:07:f0:72:27:e0:0b:1b:e6:13:a8:9d:
                    db:24:33:84:ee:fe:e1:19:8f:f3:d0:5a:d9:8d:8b:
                    9f:90:01:ca:5d:3a:06:60:d2:5a:a8:e6:f1:3c:a4:
                    69:76:cb:3c:ce:99:e2:7b:78:8f:b5:7d:8a:73:bd:
                    60:74:55:91:71:89:fb:03:ce:ec:ff:29:3c:83:18:
                    1a:0a:bc:00:f7:ec:2d:10:a3:03:20:54:e2:2a:ab:
                    06:4e:39:b8:ec:1a:23:b7:80:07:45:42:8a:d0:58:
                    bf:da:41:9d:e4:d1:79:02:a5:1d:e3:42:9e:6b:c2:
                    04:79:ff:e1:57:8d:17:44:66:18:1d:d8:c5:03:c5:
                    96:05:6d:06:5c:58:d8:87:7d:d6:18:d1:b3:59:33:
                    a7:c4:ff:5e:10:67:37:15:37:57:4d:d3:d8:c0:d4:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E7:6B:4C:FA:DF:2D:FB:79:6A:19:A9:7E:BF:F2:4D:25:17:81:84
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:28:07:8d:bc:47:9f:95:7d:50:70:ca:8d:11:24:e6:58:
         19:07:94:7e:24:87:ca:d1:29:2c:24:41:0b:e3:c0:5a:75:3b:
         70:34:db:c6:19:60:ff:0c:5c:a0:64:aa:af:33:64:b6:18:e9:
         35:45:3a:56:6b:1c:02:13:ab:06:d3:a0:78:1c:76:f5:9c:e1:
         5e:cd:83:80:5b:66:05:7e:fa:ca:cd:d3:8a:f8:53:13:3d:f7:
         34:a4:fd:03:ad:0d:c0:f0:65:ee:ac:e8:72:6f:b3:a9:01:ea:
         95:38:01:c4:b8:43:38:84:bd:b8:a0:1a:f0:0c:ce:b6:bd:2d:
         ee:cc:17:fe:83:c9:03:34:e0:e8:d4:97:af:9c:15:fb:03:5a:
         0d:32:b3:75:43:33:0c:69:44:cc:15:9b:f9:03:aa:00:97:3c:
         cb:1c:4e:cf:b0:41:ed:22:80:72:07:86:e6:00:b3:74:b0:c2:
         2c:63:5b:98:b0:ac:4e:00:18:18:25:f4:c5:2a:6c:14:a0:9c:
         39:8e:c7:ee:dc:e2:4f:5a:9d:c3:6f:29:47:e5:24:fa:ce:c6:
         02:ba:4e:94:de:60:ed:80:e4:d1:56:3c:58:80:e2:e6:e2:38:
         db:fa:8f:fd:f9:ea:dd:54:eb:8c:e3:60:d5:f8:40:70:f1:8e:
         69:b4:db:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 02:11:21 2025 by rpki-client