Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          rG6ycd0vpakzqpnNixV49cigNPkwyibVwPMvbuvfuLE=
Subject key identifier:   C4:16:44:D9:D4:B3:79:CD:DB:6D:DF:C5:05:C6:76:21:0F:C3:DF:D7
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       0199FFC7BC885F46E8C8873ED878A89EC980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          0801
Signing time:             Mon 20 Oct 2025 04:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:43 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: w3ob3LL+01OF1hOly3krx927BQfAZSpzS1uWzHYtUMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:bc:88:5f:46:e8:c8:87:3e:d8:78:a8:9e:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Oct 20 04:01:43 2025 GMT
            Not After : Oct 21 04:01:43 2025 GMT
        Subject: CN=c41644d9d4b379cddb6ddfc505c676210fc3dfd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:a7:2f:6f:f5:c4:fb:73:50:5b:49:d0:da:
                    cd:e6:f9:3c:f5:31:ec:c8:bf:8e:54:d4:a9:13:7d:
                    9f:3b:88:b0:2b:fd:68:16:24:81:cd:be:33:77:74:
                    d2:54:02:f9:59:be:73:70:ee:89:9d:a1:78:1a:cb:
                    1c:de:c6:bd:f5:1d:1f:13:d6:73:f4:65:6f:42:36:
                    88:57:91:ce:40:5e:4f:89:44:4d:5b:5d:81:ac:09:
                    f5:cb:00:8f:da:b7:31:93:be:30:02:aa:3d:5c:00:
                    04:38:fa:ce:66:48:af:2e:58:49:97:9d:02:f8:1c:
                    9f:9b:87:31:20:f0:61:c8:3a:74:1b:70:a4:fb:7b:
                    bb:36:77:ab:32:4a:1b:f8:e5:37:a2:d8:f4:bc:2d:
                    fa:c2:64:0d:a3:67:01:8b:96:1b:22:12:7c:2e:97:
                    15:a0:c1:d4:d0:f2:d7:a7:73:2f:d7:ce:53:73:fe:
                    94:c4:59:40:b5:13:73:96:3d:97:d1:4e:dc:cf:c5:
                    8f:05:b3:6d:68:34:59:29:29:f8:2e:f3:c7:54:c2:
                    9d:81:81:c3:29:ff:72:cf:67:b6:49:d1:3f:84:71:
                    36:4d:32:82:b3:8f:dd:48:56:2a:74:cc:3f:93:36:
                    a8:18:99:5c:95:99:68:9c:d7:19:a7:e0:8f:a7:e5:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:16:44:D9:D4:B3:79:CD:DB:6D:DF:C5:05:C6:76:21:0F:C3:DF:D7
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:f3:9a:c3:b1:7c:cd:00:ab:b1:21:3b:e2:5c:fe:a8:07:
         6a:58:1a:10:ac:6f:58:17:40:1a:ec:30:c7:50:c8:55:2a:ea:
         5a:24:1d:1d:0f:1e:56:47:43:86:9f:44:55:3c:e8:12:37:30:
         2b:48:b4:1e:de:b1:8c:32:62:94:bc:46:63:b1:c3:c8:59:76:
         7d:db:1e:1e:c3:2f:e9:fa:64:1f:45:75:84:87:43:0f:35:f9:
         c9:61:8e:f3:f6:52:1f:3a:3f:7f:ed:bd:df:fb:68:0d:23:01:
         f3:25:00:56:6e:46:7b:71:37:4a:65:fb:62:61:4b:c6:eb:6e:
         66:0e:be:48:36:56:54:58:50:07:b6:92:d2:09:db:3f:07:dc:
         d7:ce:66:dc:de:a6:64:5d:0d:93:45:45:e1:54:95:48:44:b6:
         ee:ad:ba:51:b7:89:84:94:d1:4b:d2:c2:33:50:c2:ba:51:ff:
         ec:ff:5a:e4:93:56:90:9a:78:2d:cf:1c:92:fb:53:fb:03:66:
         1c:b8:94:34:b2:27:c8:ef:05:40:26:77:ac:f2:3f:ac:10:06:
         ad:29:95:ae:9d:1f:57:a4:c7:62:f2:0f:24:e2:b9:70:b9:7c:
         56:cb:bf:00:0a:53:4c:bf:c8:c5:4e:42:f8:1d:b4:4b:80:a4:
         a7:b7:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:30:33 2025 by rpki-client