Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
File:                     EU05B6zlGbJF_rzuMsO3rUk7KGw.mft (raw, json)
Hash identifier:          NEUS68mJNuZsKnOEwsVxYm/7+EPv/KNakwjpDUnz1qs=
Subject key identifier:   A8:C3:8D:20:29:82:CD:A8:3D:72:02:59:71:5D:67:28:20:93:A9:6D
Authority key identifier: 11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C
Certificate issuer:       /CN=114d3907ace519b245febcee32c3b7ad493b286c
Certificate serial:       0199FD33FD05B53B55E296C002A6893CD1C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
Manifest number:          0524
Signing time:             Sun 19 Oct 2025 16:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:06 +0000
Files and hashes:         1: EU05B6zlGbJF_rzuMsO3rUk7KGw.crl (hash: e/QN4oS3EPg0eCglOHFiM46Xmu4ol87OzX1Py2mmFRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:fd:05:b5:3b:55:e2:96:c0:02:a6:89:3c:d1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=114d3907ace519b245febcee32c3b7ad493b286c
        Validity
            Not Before: Oct 19 16:01:06 2025 GMT
            Not After : Oct 20 16:01:06 2025 GMT
        Subject: CN=a8c38d202982cda83d720259715d67282093a96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:40:6b:9b:4b:07:09:41:75:9a:66:9d:46:
                    74:59:0c:99:0b:18:71:14:89:fc:1e:38:a9:08:f0:
                    08:f5:2c:44:2d:61:c6:ca:99:ec:a4:30:e9:f4:b2:
                    32:98:72:61:3a:5b:a3:a9:6c:64:12:63:14:8f:4b:
                    df:e3:45:9e:02:e8:79:fb:70:1f:60:e3:7c:ff:50:
                    58:19:3e:62:67:b1:e7:0e:4e:5b:53:1b:ae:81:50:
                    6d:ca:42:59:42:af:0b:db:4f:fc:67:92:10:7e:e3:
                    6f:62:85:fa:72:2b:05:5a:3d:ff:14:ac:ff:6a:07:
                    ce:22:e3:cb:79:7e:41:42:6d:a1:ef:bf:0d:5f:07:
                    34:73:fb:6c:1f:a7:16:ab:d4:36:b6:d6:ab:d4:c4:
                    79:50:f4:b2:48:64:47:39:5c:4b:ed:1a:ca:b9:7a:
                    f6:d1:bc:22:ae:e9:f1:38:35:0f:e0:0a:ba:36:81:
                    18:3e:c8:72:b9:44:d1:eb:7a:ab:4e:e4:60:a3:bc:
                    db:1c:41:c3:3c:99:87:ee:f1:e5:0e:84:21:d3:6f:
                    1f:28:20:26:33:21:89:3b:3d:c8:eb:a8:90:47:3f:
                    65:80:ca:32:06:62:68:b2:f3:8c:b8:13:7d:13:9d:
                    ac:a7:0b:6d:5f:31:0b:7a:17:8f:49:08:e2:60:83:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C3:8D:20:29:82:CD:A8:3D:72:02:59:71:5D:67:28:20:93:A9:6D
            X509v3 Authority Key Identifier:
                keyid:11:4D:39:07:AC:E5:19:B2:45:FE:BC:EE:32:C3:B7:AD:49:3B:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EU05B6zlGbJF_rzuMsO3rUk7KGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a5df04-de51-4faf-80ca-a06f7110547b/1/EU05B6zlGbJF_rzuMsO3rUk7KGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:b4:62:f2:81:28:96:2a:83:03:d4:f5:c2:d0:a6:51:66:33:
         3f:e7:f9:46:91:49:2c:a5:ca:ed:55:95:3b:38:d3:63:ce:03:
         c9:af:7d:6a:5a:b5:43:9a:84:9f:35:1b:ac:f8:11:15:81:1e:
         33:11:00:b5:87:94:6c:51:e7:08:5e:34:b4:ce:bb:23:11:bb:
         84:c1:bd:e9:a5:ef:9b:54:ca:1e:71:9b:46:4a:f5:64:e5:c2:
         85:84:cc:d8:82:b8:41:36:5c:16:2f:33:08:d2:8e:6d:7f:d4:
         c6:c2:8d:6d:dd:ec:79:85:47:6b:98:bf:b5:92:eb:2c:ae:57:
         6b:c1:6b:51:52:2d:98:67:0f:ea:56:eb:82:a1:9f:46:8d:f2:
         17:94:cd:0e:52:55:f9:1c:5a:1e:9a:66:3d:ab:f4:a0:24:08:
         d7:9c:ec:db:f2:a9:6c:e1:9f:31:ff:bd:f3:f8:75:1c:1c:69:
         f2:43:78:92:df:5a:da:53:e4:8d:4e:97:70:31:32:bc:7a:a5:
         12:1c:92:83:e6:f1:ef:64:c3:28:4c:f2:97:25:98:a1:31:e2:
         e3:a6:a3:24:8a:1e:0c:f1:66:a9:f3:c0:83:d2:6c:46:6b:1e:
         8c:6a:4d:55:73:bb:2b:e9:ee:4b:00:90:58:cc:35:8d:d1:9c:
         7d:a6:25:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:29 2025 by rpki-client