Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          UX4awXDDj1M4BPvHWfpTh/PyC7KyJ6SXyPQoY2IO8gw=
Subject key identifier:   58:8D:F8:CB:97:36:E8:3C:41:E1:B3:A9:55:3F:39:82:6D:FF:CF:81
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       019849667691CC502FC5370F7330725EBABB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0E18
Signing time:             Sun 27 Jul 2025 01:01:48 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:48 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:48 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: /eQIdAbLOk8cDrr5hguej4/L1v4VH1S7rIO9kKQnuR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:76:91:cc:50:2f:c5:37:0f:73:30:72:5e:ba:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Jul 27 01:01:48 2025 GMT
            Not After : Jul 28 01:01:48 2025 GMT
        Subject: CN=588df8cb9736e83c41e1b3a9553f39826dffcf81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:6a:3e:a4:03:0d:20:7b:81:80:4d:7f:be:
                    40:44:6c:18:cc:cf:44:49:e8:38:80:2a:28:84:96:
                    b2:f5:ef:a1:9a:b3:72:7c:95:6e:b2:93:b1:c9:76:
                    b7:b1:e4:12:62:3d:55:4d:5c:d8:83:73:e2:ee:90:
                    96:10:b3:13:7a:e0:e2:5b:91:92:dd:3e:56:bf:db:
                    09:4b:23:25:1b:4e:d9:c9:54:d5:26:8b:4b:33:92:
                    21:52:9f:5e:78:31:96:be:98:77:d0:77:d4:e0:23:
                    97:12:de:30:e7:e2:21:f6:db:3a:de:44:27:9a:de:
                    f9:f1:10:f5:43:73:f3:e8:6b:67:89:71:f0:ad:38:
                    b4:ed:58:d5:08:a5:22:2e:f7:ed:0f:01:11:04:0d:
                    3d:f1:c8:9b:0d:20:58:77:54:ca:71:c8:5f:09:47:
                    34:2f:e3:a6:28:2a:7d:c6:42:7a:08:1a:c1:56:84:
                    c5:a4:2a:c4:e7:f1:83:3c:24:b6:f4:83:e0:16:b5:
                    0d:23:e3:01:bf:01:7c:56:5a:b4:5f:01:a3:4c:85:
                    b5:77:f4:5d:f8:e9:3e:25:39:b5:0b:0c:74:54:df:
                    77:47:a0:fa:14:01:8e:ab:48:eb:86:af:fe:d6:c5:
                    10:a2:f2:e6:85:55:eb:9a:27:fb:e7:4a:62:bb:27:
                    33:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8D:F8:CB:97:36:E8:3C:41:E1:B3:A9:55:3F:39:82:6D:FF:CF:81
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:56:f7:ef:95:33:88:b5:c9:98:20:3d:89:f2:e1:68:c5:7c:
         6f:de:86:f3:bd:b7:37:c9:7d:3b:0a:4e:a7:7c:93:cf:eb:18:
         13:ac:68:ed:94:a1:e9:c7:4a:48:0d:9c:ba:58:d2:ba:79:50:
         83:3d:47:c5:09:75:06:20:f0:df:a8:9c:76:f0:e7:74:e3:7e:
         d8:be:01:38:6f:78:34:ce:94:56:bf:08:83:28:7b:b8:ee:c0:
         95:65:59:16:b5:0d:4e:d2:3e:eb:9f:d5:44:ac:f2:e1:4e:06:
         e0:04:bb:16:fb:c1:f3:ae:98:8b:86:a6:7c:40:29:4f:2f:ec:
         b9:50:4f:0f:ae:81:41:39:91:e5:fd:55:f7:ee:e7:cc:b1:c1:
         d1:ab:30:49:7f:96:27:ca:03:c0:fb:39:ea:02:d7:9c:3e:6f:
         dc:3a:e6:2f:ea:34:fa:4a:85:be:a2:e7:35:4d:63:d6:4d:25:
         fa:9d:79:93:73:7b:05:4e:db:7b:a2:c3:e9:56:81:1b:60:f0:
         86:be:08:6c:87:83:80:70:1c:75:64:67:db:11:38:9f:77:52:
         55:5f:f5:e6:3e:58:f2:d5:52:a3:6e:b6:be:b6:ae:f6:8a:d7:
         e0:bc:0e:ef:24:5e:41:18:d2:9f:40:9c:86:fd:5c:2f:d5:37:
         b0:e2:49:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZnaRzFAvxTcPczByXrq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MGJjMTlmZDc5MjY2Y2EwOGE5ZGMyMzg0MGEwMDQyMDVm
NGU4NjUwHhcNMjUwNzI3MDEwMTQ4WhcNMjUwNzI4MDEwMTQ4WjAzMTEwLwYDVQQD
Eyg1ODhkZjhjYjk3MzZlODNjNDFlMWIzYTk1NTNmMzk4MjZkZmZjZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSJqPqQDDSB7gYBNf75ARGwYzM9E
Seg4gCoohJay9e+hmrNyfJVuspOxyXa3seQSYj1VTVzYg3Pi7pCWELMTeuDiW5GS
3T5Wv9sJSyMlG07ZyVTVJotLM5IhUp9eeDGWvph30HfU4COXEt4w5+Ih9ts63kQn
mt758RD1Q3Pz6GtniXHwrTi07VjVCKUiLvftDwERBA098cibDSBYd1TKcchfCUc0
L+OmKCp9xkJ6CBrBVoTFpCrE5/GDPCS29IPgFrUNI+MBvwF8Vlq0XwGjTIW1d/Rd
+Ok+JTm1Cwx0VN93R6D6FAGOq0jrhq/+1sUQovLmhVXrmif750piuyczZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiN+MuXNug8QeGzqVU/OYJt/8+BMB8GA1UdIwQY
MBaAFHkLwZ/XkmbKCKncI4QKAEIF9OhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVF2Qm45ZVNac29JcWR3amhBb0FRZ1gwNkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iNjNjYTctMTcwMy00Y2ZkLTg0NmYt
MDllZGMyZDU2MjAxLzEvZVF2Qm45ZVNac29JcWR3amhBb0FRZ1gwNkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9iNjNjYTctMTcwMy00Y2ZkLTg0NmYtMDllZGMyZDU2MjAx
LzEvZVF2Qm45ZVNac29JcWR3amhBb0FRZ1gwNkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOlb375Uz
iLXJmCA9ifLhaMV8b96G8723N8l9OwpOp3yTz+sYE6xo7ZSh6cdKSA2culjSunlQ
gz1HxQl1BiDw36icdvDndON+2L4BOG94NM6UVr8Igyh7uO7AlWVZFrUNTtI+65/V
RKzy4U4G4AS7FvvB866Yi4amfEApTy/suVBPD66BQTmR5f1V9+7nzLHB0aswSX+W
J8oDwPs56gLXnD5v3DrmL+o0+kqFvqLnNU1j1k0l+p15k3N7BU7be6LD6VaBG2Dw
hr4IbIeDgHAcdWRn2xE4n3dSVV/15j5Y8tVSo262vrau9orX4LwO7yReQRjSn0Cc
hv1cL9U3sOJJdw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 06:01:38 2025 by rpki-client