Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
File:                     eJULoZtPF6NHMSf9B3qaIALr6jY.mft (raw, json)
Hash identifier:          sBT9IyZj2wI7NZ+I9Opmi9oVLP64PwktVrWf60EUae8=
Subject key identifier:   3F:C6:93:EE:C4:AA:20:03:F5:AB:3B:69:30:AA:C1:E0:57:2F:6A:F6
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Certificate issuer:       /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial:       019922555EEB9A5C04A69B6A0D27C519B1FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 04:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:44 +0000
Files and hashes:         1: eJULoZtPF6NHMSf9B3qaIALr6jY.crl (hash: c067O06UMO1ZUFqYfVl0uz+79rS9dwH1q+Cez/sD2Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:5e:eb:9a:5c:04:a6:9b:6a:0d:27:c5:19:b1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
        Validity
            Not Before: Sep  7 04:00:44 2025 GMT
            Not After : Sep  8 04:00:44 2025 GMT
        Subject: CN=3fc693eec4aa2003f5ab3b6930aac1e0572f6af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d2:63:7e:ab:a5:79:4b:d7:0d:94:50:80:92:
                    71:81:24:76:73:67:4d:72:c7:9f:5b:a0:15:20:4e:
                    1f:d9:b9:00:f4:a6:5a:8b:bc:fc:59:0c:2c:5e:e0:
                    96:e7:ed:d3:c0:da:08:0b:e6:99:08:f9:c9:41:fc:
                    64:b1:46:d0:ea:89:24:3e:4d:a6:35:19:f7:db:03:
                    88:bb:24:da:e3:6e:ab:7d:92:cd:8f:76:14:70:8e:
                    39:35:61:57:92:63:2c:c2:79:86:1f:b6:00:73:42:
                    2b:f7:f2:c4:e6:ec:69:28:bc:50:2c:af:24:0d:ce:
                    32:66:45:89:6c:e8:44:22:55:31:1a:f5:82:e2:32:
                    3b:57:cc:48:7f:75:dc:0a:31:fb:63:04:ea:4b:48:
                    54:c4:c0:d3:f0:f6:78:c4:59:0b:f9:86:92:a5:62:
                    f8:34:4f:1a:a2:73:c7:2b:5c:f6:1b:20:74:c0:3f:
                    e8:95:9d:b0:fb:b8:8b:cd:c7:88:98:9d:53:7e:27:
                    ab:86:a1:05:5a:fd:ae:f5:da:ee:77:1e:18:8a:e7:
                    ed:28:9d:2b:16:52:28:97:18:28:cc:66:57:47:44:
                    c0:c3:1d:c1:c6:09:3f:ca:68:c5:3f:88:4d:0a:4c:
                    f0:8d:43:f7:81:c1:11:2a:b7:58:6b:07:49:7f:b4:
                    51:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C6:93:EE:C4:AA:20:03:F5:AB:3B:69:30:AA:C1:E0:57:2F:6A:F6
            X509v3 Authority Key Identifier:
                keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:29:f6:b0:c4:48:f4:48:45:b8:2a:a5:bf:1e:b2:63:89:25:
         b1:43:1e:38:9c:a9:39:59:10:49:c9:7c:36:13:20:7b:f2:a8:
         c2:45:1c:3b:de:08:47:e6:dc:e6:4e:27:1f:0d:45:6d:34:41:
         95:42:dc:d7:4a:11:1c:d4:24:28:f4:b1:39:85:9a:54:43:ab:
         de:08:da:3f:3e:08:49:e8:a8:6d:9a:bd:86:80:e3:8e:38:7e:
         95:08:6f:ed:29:33:d3:f3:bc:38:92:49:1c:44:1a:b0:bb:3f:
         44:82:92:58:38:7d:64:46:86:6e:e5:12:e8:8c:47:fb:03:8a:
         ae:fc:3f:1a:1e:92:1b:3e:dc:1a:b1:38:0a:d4:ff:f3:0d:5b:
         b8:73:d8:3c:d6:de:a5:9d:69:a8:1c:63:bd:c6:94:76:f2:b5:
         c6:4a:52:82:ac:15:b8:6d:9a:20:d4:0a:df:5f:61:13:ad:cc:
         f6:80:de:7d:57:27:ce:44:27:dd:02:66:c2:81:e1:ef:0d:61:
         1d:6a:4e:64:7a:a4:0f:ac:6a:6e:88:6e:81:d5:fa:ae:d7:a2:
         4b:9b:33:c7:93:62:5d:5e:14:21:5f:13:3b:a3:ee:c0:e1:15:
         7c:e4:fb:70:de:8b:fc:0f:78:bb:35:36:3e:41:d8:66:e6:d0:
         89:7c:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:30 2025 by rpki-client