Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
File:                     EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft (raw, json)
Hash identifier:          CZjvJMI/KnsU7x6ZXN6UugIPxhTcJCFOpo4UHKOy18Q=
Subject key identifier:   0E:B6:9F:20:00:4B:CE:AB:04:4A:27:98:8D:17:AC:17:13:AD:64:42
Authority key identifier: 10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50
Certificate issuer:       /CN=1015129921e7e15faef736024a4337340c857050
Certificate serial:       019A7112B2BACFA5BAC53B2271A2C1B90225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
Manifest number:          AB
Signing time:             Tue 11 Nov 2025 04:00:41 +0000
Manifest this update:     Tue 11 Nov 2025 04:00:41 +0000
Manifest next update:     Wed 12 Nov 2025 04:00:41 +0000
Files and hashes:         1: EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl (hash: O38sNlOqVpE0Sz49iTNCEjeLmVdMZ7bLnRStNmnTgBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:12:b2:ba:cf:a5:ba:c5:3b:22:71:a2:c1:b9:02:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1015129921e7e15faef736024a4337340c857050
        Validity
            Not Before: Nov 11 04:00:41 2025 GMT
            Not After : Nov 12 04:00:41 2025 GMT
        Subject: CN=0eb69f20004bceab044a27988d17ac1713ad6442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:64:fb:d8:51:e1:da:27:42:82:87:48:88:7d:
                    93:26:f2:ef:64:33:73:e9:da:85:6c:37:99:6c:2c:
                    eb:58:f0:e1:98:fb:d9:78:c9:ca:2a:e2:52:2f:03:
                    45:ca:23:d2:52:bb:e7:35:a3:2a:a6:07:b0:1f:1e:
                    0e:3a:61:a1:c3:a8:52:06:fd:31:52:cb:a8:97:f0:
                    32:de:ce:c2:0f:2c:48:4b:7c:9e:82:19:86:7f:00:
                    f4:4e:50:70:c2:ef:67:fa:b7:46:f4:d3:cc:08:e1:
                    80:3d:b3:b6:a2:09:7f:a2:80:60:bc:51:d9:ea:3e:
                    30:f2:20:91:ae:a2:88:92:97:f0:95:a5:98:4f:8c:
                    0d:17:a0:b0:d1:ef:51:61:3c:43:d5:18:9d:10:35:
                    56:67:03:77:d6:b2:68:3c:75:45:7a:ae:74:66:7c:
                    58:e5:3a:b3:28:97:49:8e:09:6f:a4:08:71:77:f9:
                    8a:fd:63:96:04:69:8c:28:11:5f:41:55:3d:56:17:
                    c1:69:12:28:e6:7d:07:65:08:18:6f:eb:0c:4e:c5:
                    b6:13:a7:a7:57:9e:bc:2e:38:9a:3c:2b:cf:1c:80:
                    8f:c6:ea:9f:4d:51:63:13:ad:4e:01:7f:b8:9e:62:
                    d8:6e:b6:71:e4:f8:93:a4:5c:28:fc:53:0a:2f:f0:
                    ef:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B6:9F:20:00:4B:CE:AB:04:4A:27:98:8D:17:AC:17:13:AD:64:42
            X509v3 Authority Key Identifier:
                keyid:10:15:12:99:21:E7:E1:5F:AE:F7:36:02:4A:43:37:34:0C:85:70:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBUSmSHn4V-u9zYCSkM3NAyFcFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fc1fa5-1252-4932-98dc-ed95f56a1a55/1/EBUSmSHn4V-u9zYCSkM3NAyFcFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9a:20:77:be:25:c2:59:39:82:69:2e:00:18:a2:1a:a5:32:
         5a:6d:5d:f9:1f:51:53:95:4b:27:ee:b6:de:e2:a7:25:c2:e4:
         a4:be:2a:0d:a2:e4:f8:1c:6a:2c:38:9e:53:a5:c4:46:e3:08:
         6e:14:03:dc:3f:a5:7d:af:d6:41:93:32:3e:fc:ab:d2:1a:f6:
         61:64:dc:f5:e5:22:a9:9d:8d:f9:10:5f:44:93:99:22:92:c8:
         ab:e8:5b:69:e5:e1:b0:73:21:54:c0:48:37:6e:60:3c:af:2a:
         cb:a5:3a:cd:1e:38:ed:ac:be:2c:9a:0a:fc:48:38:cd:af:95:
         3f:7e:4a:8c:42:cd:cb:5a:a2:93:28:94:55:da:ed:98:26:59:
         72:03:49:98:77:89:17:35:07:a5:22:6c:f4:ba:e8:34:78:50:
         28:dc:61:be:f9:03:d7:41:4b:9e:d7:c8:a6:3e:a3:7c:84:c9:
         3e:3e:32:84:37:80:28:51:37:86:0c:d0:3a:42:c9:77:b8:ab:
         34:6f:50:5f:35:9d:f0:87:88:55:9e:95:f9:86:1d:79:27:20:
         f8:14:2b:6b:fa:fc:5b:88:34:67:13:94:f8:ed:d4:66:4a:d3:
         48:32:a1:89:3a:4a:33:3e:a1:5c:35:6f:fc:3c:bf:74:2d:73:
         87:f6:71:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:37 2025 by rpki-client