Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
File:                     E3ueCmc-FAe_PmWfLqYlN462Mng.mft (raw, json)
Hash identifier:          j1NMSr6YcUIwiM2rvX88y3mZbf53X4E9y+4v8GBwvcU=
Subject key identifier:   08:D6:14:06:D6:30:50:B7:11:32:44:2F:08:3A:08:B8:44:DC:62:50
Authority key identifier: 13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78
Certificate issuer:       /CN=137b9e0a673e1407bf3e659f2ea625378eb63278
Certificate serial:       019A725CE4F0A47C57F731749DF8E88EC78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
Manifest number:          07EC
Signing time:             Tue 11 Nov 2025 10:01:21 +0000
Manifest this update:     Tue 11 Nov 2025 10:01:21 +0000
Manifest next update:     Wed 12 Nov 2025 10:01:21 +0000
Files and hashes:         1: E3ueCmc-FAe_PmWfLqYlN462Mng.crl (hash: Fu9u+nfvo1cmrO36iHkNnKPNWb7Kt12brG0L6n8zobE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:5c:e4:f0:a4:7c:57:f7:31:74:9d:f8:e8:8e:c7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137b9e0a673e1407bf3e659f2ea625378eb63278
        Validity
            Not Before: Nov 11 10:01:21 2025 GMT
            Not After : Nov 12 10:01:21 2025 GMT
        Subject: CN=08d61406d63050b71132442f083a08b844dc6250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:3f:52:8d:68:4f:34:d9:09:17:df:fd:c9:
                    13:30:a9:a0:52:39:22:60:49:40:f3:45:7c:58:31:
                    8d:f7:fe:17:47:96:51:97:25:06:39:c1:5c:53:4a:
                    02:01:69:23:7c:59:b4:ff:e7:07:e5:31:37:a8:75:
                    e1:90:61:7c:6d:9c:39:21:62:a6:1f:f6:3c:24:b1:
                    21:f6:5e:d4:29:1a:e5:3d:c7:e4:c7:54:d1:fd:46:
                    ff:c9:3e:a6:83:58:1e:c9:19:88:b8:3a:4f:0a:00:
                    9c:ca:78:18:b7:cc:ab:bd:20:a8:46:ac:e5:fb:67:
                    0e:ca:a6:66:ce:d0:1f:27:43:42:9c:2b:f1:f2:c7:
                    b6:dd:81:44:e7:6d:bc:72:5e:dd:2f:4a:78:90:87:
                    39:0c:d5:4f:4c:d6:f7:d0:74:9c:23:0d:08:43:20:
                    df:cb:22:4f:f9:6e:fd:44:2d:a0:e3:c6:73:a2:2b:
                    d1:f7:90:8e:ac:62:d0:ef:48:31:68:16:e4:2b:ed:
                    db:0e:29:af:3e:f1:eb:82:c6:80:62:14:83:d0:45:
                    53:13:b0:22:2b:e3:9d:16:b3:f8:06:4f:7f:00:6c:
                    ea:ee:6a:0d:70:a7:f2:49:52:70:64:04:ad:5a:b5:
                    46:42:65:9e:d9:35:f4:10:3b:90:67:43:f2:85:3c:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D6:14:06:D6:30:50:B7:11:32:44:2F:08:3A:08:B8:44:DC:62:50
            X509v3 Authority Key Identifier:
                keyid:13:7B:9E:0A:67:3E:14:07:BF:3E:65:9F:2E:A6:25:37:8E:B6:32:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ueCmc-FAe_PmWfLqYlN462Mng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/fd001c-3338-40a7-af1f-361eba30355e/1/E3ueCmc-FAe_PmWfLqYlN462Mng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:07:ed:61:1c:4c:af:ee:6e:1b:48:46:ce:8a:fe:72:54:41:
         67:6b:b6:c9:32:51:34:b4:29:f7:98:af:b5:0e:f6:d6:d0:8b:
         3d:86:e1:56:a2:0e:d6:af:24:02:a7:7e:c8:80:23:3b:1c:37:
         41:25:86:90:5d:11:76:13:da:c7:48:16:df:85:13:de:26:11:
         db:ce:9a:ba:08:f6:53:63:bc:b8:35:fb:6d:49:e5:58:47:ba:
         1e:1a:e2:02:60:4c:92:83:bc:fd:55:a5:0a:ab:dd:63:21:0b:
         ac:26:98:68:1f:33:65:90:68:89:b7:a4:d8:2f:dc:b2:26:85:
         1f:e4:ae:4a:57:54:3a:d6:fb:5e:e3:07:c9:b8:0d:f0:bc:d6:
         c1:3e:bf:5d:05:be:f8:27:1d:3a:29:da:a0:9c:be:5e:6e:60:
         a5:32:09:0c:c8:0b:9c:13:91:26:0f:ee:0a:19:0b:7b:68:3c:
         2b:5c:82:5e:5e:c6:7c:2d:4b:e8:2d:8c:97:7a:c8:2c:7b:44:
         69:57:e4:1f:5e:c2:b8:2f:42:b5:9b:ea:8e:a7:76:dc:fc:17:
         ba:15:18:cf:58:10:cc:ff:7b:04:fc:c1:72:34:a5:52:a4:54:
         d9:af:4e:9d:cc:4a:10:b2:e5:de:6a:e1:cf:8f:f3:3b:b5:d5:
         7e:7f:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:23 2025 by rpki-client