Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          vJiQ8tOn2IOeiHkDSvqtqN7v379MG1S7vWCT7WZAVEk=
Subject key identifier:   DE:49:A0:8D:B2:84:95:70:18:78:64:FC:2F:53:4A:D9:CB:1F:B1:EB
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       01984965D294E903654A83EDFCD51C81B716
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          118E
Signing time:             Sun 27 Jul 2025 01:01:06 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:06 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:06 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: KsoKGGrzRAIiscO2VhkAM+klS+jxTKRu0w1UT3bOf3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 01:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:d2:94:e9:03:65:4a:83:ed:fc:d5:1c:81:b7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Jul 27 01:01:06 2025 GMT
            Not After : Jul 28 01:01:06 2025 GMT
        Subject: CN=de49a08db2849570187864fc2f534ad9cb1fb1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:07:99:7b:0a:7b:f4:c2:10:40:6f:3c:56:
                    e1:17:7b:33:13:fb:8d:5f:86:55:48:18:1a:c5:9c:
                    3e:21:c5:7e:ba:0e:e9:f2:18:c5:27:5f:b8:27:7c:
                    7a:c0:d3:89:13:4a:06:8b:82:d7:cb:c0:e7:e2:16:
                    f4:58:00:03:6d:e1:d3:e9:be:57:74:39:b5:d3:ab:
                    23:84:11:94:79:c5:f3:6e:d2:5f:f5:52:1a:24:c5:
                    83:64:3f:e1:a7:6f:4a:a1:da:fa:21:57:89:46:0c:
                    af:41:0c:75:64:ff:8a:ee:34:99:5d:31:6a:f6:b7:
                    a0:ce:af:07:52:c0:52:ba:af:bf:e4:a7:d8:73:7d:
                    e3:02:fb:90:c1:b5:04:9e:8e:e9:1b:26:0b:39:ae:
                    63:eb:7d:98:c4:ca:ba:a7:16:08:61:7a:a8:5e:35:
                    4a:72:bc:14:9b:ce:e2:1e:12:46:db:3d:ec:de:a2:
                    f2:7b:d7:0b:13:21:f9:f4:9a:df:fd:4e:ef:6a:dc:
                    22:65:b5:df:10:a1:3c:0f:f1:b7:85:da:86:a3:d6:
                    22:55:8c:2c:24:ef:4a:1c:db:e6:bf:fc:d2:4c:9c:
                    01:61:b3:47:a5:2a:f7:09:b0:09:0a:16:e2:62:6d:
                    25:03:03:03:06:f7:97:15:a2:8a:c9:a3:63:74:08:
                    11:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:49:A0:8D:B2:84:95:70:18:78:64:FC:2F:53:4A:D9:CB:1F:B1:EB
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:d1:de:c9:02:0d:fe:59:81:66:b7:77:25:9c:f4:db:e5:d1:
         88:3d:da:f1:93:58:b8:48:58:76:29:fe:a2:7b:65:cd:42:20:
         e6:49:54:86:a6:43:b5:f9:a3:fe:4d:b2:b4:a8:98:e9:e0:3a:
         49:a7:ae:94:72:a6:77:2e:63:04:6d:2c:d6:07:df:e4:da:87:
         fc:68:78:f5:27:bc:6f:f4:f1:2e:a2:31:ec:13:6f:78:fa:8c:
         3b:5e:6c:46:52:51:6b:f6:e7:7e:e8:c1:0f:20:ba:de:b9:0f:
         d2:65:90:38:d7:07:91:65:20:a3:e2:1d:28:bd:2b:dc:fb:ec:
         28:54:92:f9:7f:2b:b2:3e:f0:f1:1a:59:5f:29:de:11:5f:8b:
         3b:82:3c:aa:72:39:f1:d7:8f:c2:b4:e6:3b:b0:01:1b:7b:98:
         ef:be:cc:95:c7:cb:77:67:3b:25:35:77:3d:31:95:85:38:9f:
         05:90:3b:88:73:c3:e6:72:4a:19:1d:de:d9:f6:38:32:17:e4:
         e4:23:d9:a9:06:49:79:4f:6e:e3:33:1c:b9:eb:f0:ca:8c:14:
         c2:31:95:6a:e8:0c:c3:32:eb:31:47:fb:6d:97:70:c6:f0:7b:
         29:48:26:ce:34:87:d2:53:ae:52:45:88:33:0b:64:21:d6:a5:
         4a:fd:49:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZdKU6QNlSoPt/NUcgbcWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZWZhODQ2ZWU4ZThjMDc5Y2ExZTg3MmJmZTA1ZjllMDRm
N2ZmZWYwHhcNMjUwNzI3MDEwMTA2WhcNMjUwNzI4MDEwMTA2WjAzMTEwLwYDVQQD
EyhkZTQ5YTA4ZGIyODQ5NTcwMTg3ODY0ZmMyZjUzNGFkOWNiMWZiMWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVsHmXsKe/TCEEBvPFbhF3szE/uN
X4ZVSBgaxZw+IcV+ug7p8hjFJ1+4J3x6wNOJE0oGi4LXy8Dn4hb0WAADbeHT6b5X
dDm106sjhBGUecXzbtJf9VIaJMWDZD/hp29Kodr6IVeJRgyvQQx1ZP+K7jSZXTFq
9regzq8HUsBSuq+/5KfYc33jAvuQwbUEno7pGyYLOa5j632YxMq6pxYIYXqoXjVK
crwUm87iHhJG2z3s3qLye9cLEyH59Jrf/U7vatwiZbXfEKE8D/G3hdqGo9YiVYws
JO9KHNvmv/zSTJwBYbNHpSr3CbAJChbiYm0lAwMDBveXFaKKyaNjdAgRZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5JoI2yhJVwGHhk/C9TStnLH7HrMB8GA1UdIwQY
MBaAFHjvqEbujowHnKHocr/gX54E9//vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zYzg3YjgtYTg0MC00MDkwLTk0NjUt
NjNjZWYyM2Y4ZDMxLzEvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8zYzg3YjgtYTg0MC00MDkwLTk0NjUtNjNjZWYyM2Y4ZDMx
LzEvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNHeyQIN
/lmBZrd3JZz02+XRiD3a8ZNYuEhYdin+ontlzUIg5klUhqZDtfmj/k2ytKiY6eA6
SaeulHKmdy5jBG0s1gff5NqH/Gh49Se8b/TxLqIx7BNvePqMO15sRlJRa/bnfujB
DyC63rkP0mWQONcHkWUgo+IdKL0r3PvsKFSS+X8rsj7w8RpZXyneEV+LO4I8qnI5
8dePwrTmO7ABG3uY777MlcfLd2c7JTV3PTGVhTifBZA7iHPD5nJKGR3e2fY4Mhfk
5CPZqQZJeU9u4zMcuevwyowUwjGVaugMwzLrMUf7bZdwxvB7KUgmzjSH0lOuUkWI
MwtkIdalSv1JCw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:15:37 2025 by rpki-client