Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          or9UQLALLDLGWvnM5KNV5KoqqmsxmQpEW+w6hL/UBHE=
Subject key identifier:   59:9B:74:2C:F2:25:31:4D:A8:C3:0E:70:F2:9F:8D:61:A5:8A:CA:2F
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       01975FB97BAD00389A15627D7FC0210C8197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0D9F
Signing time:             Wed 11 Jun 2025 16:01:20 +0000
Manifest this update:     Wed 11 Jun 2025 16:01:20 +0000
Manifest next update:     Thu 12 Jun 2025 16:01:20 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: KfAs6io4u4mDHejXoTSkJv/lZErjLzq823SC3WXFNb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5f:b9:7b:ad:00:38:9a:15:62:7d:7f:c0:21:0c:81:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Jun 11 16:01:20 2025 GMT
            Not After : Jun 12 16:01:20 2025 GMT
        Subject: CN=599b742cf225314da8c30e70f29f8d61a58aca2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:84:0c:4f:42:82:6b:0a:f8:1f:1f:6e:b0:
                    cc:61:d3:c1:43:a7:69:69:b3:22:34:68:ae:b6:46:
                    62:ed:20:f7:a1:77:7e:18:12:26:48:3d:79:63:5b:
                    6c:94:80:75:74:2b:bd:5f:e9:97:ed:fd:04:65:b6:
                    ec:63:4b:4e:a3:cf:38:9c:74:2d:9e:99:41:ab:8f:
                    a4:01:05:94:bf:46:a0:28:e5:b7:a2:e5:e7:0f:a1:
                    7b:bd:65:7c:69:29:05:55:85:44:ce:3b:bf:4f:89:
                    54:1a:f1:0f:30:73:63:a5:ce:10:5b:a6:9b:78:f9:
                    48:d8:cb:0a:62:10:42:f1:71:64:d0:79:78:97:f0:
                    87:d3:ce:3b:26:41:40:25:f0:37:94:1c:57:88:34:
                    fa:fa:56:62:76:bf:b6:ea:03:66:aa:76:14:5d:d1:
                    ec:44:23:64:ac:dd:a3:4d:80:e3:67:25:05:21:4d:
                    96:9f:9c:92:72:bc:95:66:df:b1:58:af:5f:56:39:
                    81:c5:46:3d:bc:96:fe:43:3f:e9:05:6d:39:0a:17:
                    34:a3:91:1c:94:b7:44:89:0c:49:7f:f0:01:59:6e:
                    e1:bc:a7:9a:54:55:26:30:ae:ac:58:22:3a:1a:3e:
                    0c:66:28:7a:53:d2:59:95:fb:c8:df:65:cd:09:50:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9B:74:2C:F2:25:31:4D:A8:C3:0E:70:F2:9F:8D:61:A5:8A:CA:2F
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a5:0b:79:bd:7d:3f:78:66:07:cb:b9:3d:5b:89:df:89:e5:
         9b:07:56:cd:8e:52:46:d4:84:5a:f6:f1:13:50:fa:4e:47:75:
         35:6a:7f:e8:f7:54:dd:50:44:16:9c:ee:4a:7f:58:fb:86:6b:
         de:7a:5b:66:db:86:b5:bb:3c:79:b4:68:f8:54:9b:d6:05:e4:
         26:36:83:f0:0e:2b:f6:cf:8c:ba:5d:5a:40:f0:df:06:82:ae:
         fb:5c:67:a3:7a:69:f9:d6:90:ae:2b:22:b6:ff:d7:33:6a:f7:
         dd:e9:00:cb:d7:6a:78:9a:85:d1:8d:a7:d9:36:ef:2d:ae:c5:
         a6:ac:18:2d:44:c2:a2:b4:10:bd:2f:74:60:c5:1e:e4:bb:17:
         b7:22:f5:5d:15:a8:5d:e2:6d:27:b1:3c:d7:06:b7:b3:15:1f:
         78:87:d4:f2:93:62:30:4e:05:e2:c9:23:b7:2c:9f:f5:f0:b8:
         96:57:fd:38:5d:98:85:f6:4a:bf:9d:5a:9c:82:fc:ce:58:22:
         ee:4a:cd:a6:41:b1:51:2e:1d:2c:d6:62:1c:85:c3:ea:c1:04:
         91:10:82:75:af:e4:7a:66:fa:8e:91:c1:65:30:2b:60:0b:0d:
         03:fc:7b:a0:15:15:e1:7c:eb:93:6d:59:1c:fb:6d:c2:c8:30:
         14:a8:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:21:52 2025 by rpki-client