Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
File:                     eINdJYNK4Na8nZKPZGEn-8VL0z0.mft (raw, json)
Hash identifier:          XCUjNh7YBx9/fZ5NACLPt+CPrkEc/Eu2RlSD199L8os=
Subject key identifier:   C8:5E:23:3D:0B:C4:F7:8C:FA:AA:58:DE:8B:E9:5A:30:62:03:6C:48
Authority key identifier: 78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D
Certificate issuer:       /CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
Certificate serial:       019921B11045F31CD1BB0D62350F4375C7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 01:01:16 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:16 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:16 +0000
Files and hashes:         1: eINdJYNK4Na8nZKPZGEn-8VL0z0.crl (hash: oCjDClVHx4vSOnaWWF54gKcX/AM2SebwTKjHHyorQSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:10:45:f3:1c:d1:bb:0d:62:35:0f:43:75:c7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
        Validity
            Not Before: Sep  7 01:01:16 2025 GMT
            Not After : Sep  8 01:01:16 2025 GMT
        Subject: CN=c85e233d0bc4f78cfaaa58de8be95a3062036c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:be:01:09:8b:3c:56:9e:da:35:db:1c:d9:
                    db:03:47:1f:fa:a2:37:7c:73:96:c4:da:16:20:8a:
                    d0:70:ae:ca:70:d1:ca:66:f7:56:84:15:e8:65:45:
                    94:aa:7c:ab:56:84:0a:41:60:0f:dc:95:28:e3:fd:
                    7e:e5:fd:b2:41:f4:6c:d0:2d:e4:9c:d8:4e:af:82:
                    20:bc:ee:af:91:aa:25:ca:91:2b:49:b1:7d:2c:4f:
                    f4:0f:b2:a7:55:78:11:68:b5:30:1c:4c:e1:dd:c2:
                    79:bd:88:ad:79:21:07:5b:3f:18:a9:d6:95:4a:c1:
                    00:e8:8a:69:dc:24:f4:d4:07:6b:79:34:25:49:48:
                    d8:7a:e5:3e:3a:0d:11:7b:75:17:d1:1d:2a:c3:65:
                    f6:54:52:8b:7f:d2:07:bf:72:7e:a9:d5:11:9b:5c:
                    e5:78:dd:23:27:aa:59:e7:d2:cc:b2:6b:1c:b7:63:
                    83:99:6c:f4:7b:b5:cc:92:04:a5:f3:66:ad:ca:b8:
                    f8:b6:ed:04:2e:49:09:86:e8:54:72:59:c8:6e:2d:
                    29:3c:49:02:4d:3e:d2:f7:1d:65:a0:cb:ad:9a:e6:
                    76:5c:e7:5c:bb:89:39:05:b3:dc:6f:03:32:af:5b:
                    47:a1:a4:77:20:b5:f6:aa:aa:fa:65:bb:39:1a:d0:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5E:23:3D:0B:C4:F7:8C:FA:AA:58:DE:8B:E9:5A:30:62:03:6C:48
            X509v3 Authority Key Identifier:
                keyid:78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:e1:a8:92:e0:5c:16:4b:e4:a0:99:6b:9d:d9:c8:f4:04:
         01:d0:02:aa:81:e3:1f:07:2c:3f:d9:33:d3:3f:3e:00:d6:73:
         2d:f8:b2:dd:cc:d3:df:76:02:1b:27:79:e5:90:7b:0f:f8:fe:
         38:15:34:44:55:9f:ca:72:07:cf:ef:01:e3:ff:35:81:b1:dd:
         21:b9:24:ca:62:31:e8:87:7c:a1:58:d0:fc:eb:39:70:aa:30:
         eb:2f:2a:84:a3:43:9f:60:a3:7f:2c:01:11:f8:2e:0e:3e:b1:
         e3:93:12:28:3e:77:3e:90:7c:82:2e:7c:54:46:63:46:6c:9d:
         f0:2e:43:0b:72:f8:86:02:f6:98:3a:52:80:55:fa:8e:7a:c9:
         6e:d2:d5:40:59:23:1a:fc:ef:0e:ac:f4:e1:0a:0e:38:8b:6b:
         e9:50:6c:4d:78:6c:00:b3:01:04:7e:d8:ef:8f:9f:9e:8a:14:
         99:2c:ec:8d:bb:db:00:ba:68:de:87:3e:71:b9:b0:bc:9e:09:
         20:9c:bb:26:ba:e9:3b:2e:ed:fd:a6:fb:90:68:e5:27:11:33:
         39:9e:84:fb:bc:0d:1f:e9:03:69:73:9f:87:58:2d:7c:ed:a2:
         64:00:e1:17:a8:90:5e:50:ec:d7:da:77:67:ff:94:37:69:6e:
         70:55:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:57:04 2025 by rpki-client