Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
File:                     eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft (raw, json)
Hash identifier:          LzBWBuirbyrm9j47XJGNhFX5hGw/W1jRVK4mNhgWeuM=
Subject key identifier:   06:1C:F3:6D:B7:24:3E:6A:B4:8C:91:06:36:1C:1B:A4:9F:25:33:25
Authority key identifier: 78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F
Certificate issuer:       /CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
Certificate serial:       0199FBEA7DB14D0C5A4FB5E2E4D5BAF05AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:12 +0000
Files and hashes:         1: eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl (hash: l3a7dW3vG5ir+1i5DHFs6TEZ+vkKwqkvWVtB82jOwgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:7d:b1:4d:0c:5a:4f:b5:e2:e4:d5:ba:f0:5a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb203bbc2dbd1464b542b7aadc99ad403f510f
        Validity
            Not Before: Oct 19 10:01:12 2025 GMT
            Not After : Oct 20 10:01:12 2025 GMT
        Subject: CN=061cf36db7243e6ab48c9106361c1ba49f253325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:b7:6f:63:66:67:ac:a9:3d:e9:e2:80:71:
                    70:92:be:63:bc:f3:d8:e7:97:c7:a1:05:ba:32:bb:
                    c6:ec:15:77:bb:f4:87:9c:2a:80:b9:b0:bc:0b:9d:
                    94:e4:0c:1c:26:28:71:ca:1d:ce:33:d5:41:e3:70:
                    aa:82:a6:88:95:a5:78:81:47:67:4f:76:d6:3e:fd:
                    84:ac:b5:bc:3d:f7:8a:9e:69:10:66:88:9c:88:fc:
                    da:07:02:8c:6c:04:05:56:5c:0c:d7:e7:97:b9:80:
                    d8:ea:9a:17:b2:ed:05:b4:d9:f6:ce:b6:86:bc:cb:
                    42:05:ef:8a:de:67:dd:7d:b8:c9:b5:b6:9f:c4:d0:
                    00:8e:c8:00:62:02:54:ab:90:c2:a2:b6:e0:1e:af:
                    54:7a:61:17:58:78:42:fc:ef:06:81:2b:a0:79:2b:
                    80:51:3d:cf:a7:e1:e6:b3:39:4b:7f:86:e7:9d:c3:
                    5d:f8:7f:47:21:b6:50:4a:4c:fb:e8:cb:da:ff:66:
                    78:08:7f:5b:d4:3e:aa:91:92:8d:b1:a6:20:f0:a0:
                    66:76:1f:07:1c:db:bb:47:73:dc:6e:cf:10:3b:ae:
                    30:73:8b:6b:61:e5:6f:c3:36:b5:fc:f8:66:ad:37:
                    4a:d4:6c:a1:89:b7:73:1a:c6:e4:c9:4f:2f:fc:46:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1C:F3:6D:B7:24:3E:6A:B4:8C:91:06:36:1C:1B:A4:9F:25:33:25
            X509v3 Authority Key Identifier:
                keyid:78:CB:20:3B:BC:2D:BD:14:64:B5:42:B7:AA:DC:99:AD:40:3F:51:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMsgO7wtvRRktUK3qtyZrUA_UQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e96646-0c91-49b1-a140-e3924f78d842/1/eMsgO7wtvRRktUK3qtyZrUA_UQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:84:ad:37:cc:01:29:14:65:ce:d1:88:43:fb:30:df:a5:7b:
         86:fe:91:2c:05:4c:4a:fd:c9:dc:43:db:53:dd:d6:78:02:dc:
         8f:b2:ff:7c:2c:a1:f9:43:2b:87:be:c2:6b:ba:74:ca:48:72:
         d1:29:d0:b5:d8:12:85:0a:d4:47:a1:7e:ab:b8:7f:5c:a8:09:
         46:06:c0:a5:6b:2b:5f:e5:39:fa:20:75:3a:7d:9a:98:d8:d0:
         86:08:f7:1b:ad:fe:20:37:18:d3:d3:81:86:be:3d:f4:76:3f:
         bd:a3:d8:2c:8b:3c:93:85:83:5b:66:f2:27:b5:1f:97:2e:7e:
         73:5f:51:c6:d4:22:19:b7:b7:ce:f7:aa:ea:4a:fb:84:c5:67:
         b0:e2:2e:a1:25:eb:fb:d9:48:47:64:87:8e:ce:0e:fb:91:4c:
         5e:d3:1c:5b:b8:cb:14:e7:f9:0b:38:fd:c9:b3:0f:c8:1c:a9:
         10:2b:88:71:28:37:a7:df:21:c7:3b:02:3c:e9:01:27:68:fc:
         6a:cd:33:8b:90:e7:e5:b7:cd:5f:2a:6e:0a:e3:88:ab:fb:40:
         92:9c:85:38:d3:02:e7:a2:73:2a:fa:c8:89:4a:67:ad:c5:ef:
         9d:54:df:65:46:76:e4:b9:93:20:ef:4f:07:d2:55:4f:d9:c9:
         5a:b0:fa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:56 2025 by rpki-client