Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
File:                     eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json)
Hash identifier:          0XwtY56v62ys2IT0PYC0xxh500EEzx/gLhYaOlhrG+o=
Subject key identifier:   1D:3B:CE:F4:27:FB:21:65:B3:D3:D7:84:E5:E5:19:B1:D5:5F:35:42
Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF
Certificate issuer:       /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
Certificate serial:       019A2478EA8AA20B0B75106D694DE3B61ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
Manifest number:          1284
Signing time:             Mon 27 Oct 2025 07:01:35 +0000
Manifest this update:     Mon 27 Oct 2025 07:01:35 +0000
Manifest next update:     Tue 28 Oct 2025 07:01:35 +0000
Files and hashes:         1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: Rc6EKJlGWNDG4nNzKM0n+AFDn9bfSLmm4B54VYoIFBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:78:ea:8a:a2:0b:0b:75:10:6d:69:4d:e3:b6:1e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef
        Validity
            Not Before: Oct 27 07:01:35 2025 GMT
            Not After : Oct 28 07:01:35 2025 GMT
        Subject: CN=1d3bcef427fb2165b3d3d784e5e519b1d55f3542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:06:ad:84:94:a4:f3:1a:84:ea:d0:ef:90:
                    ec:97:53:77:0e:87:c3:e1:12:c1:35:fb:96:02:56:
                    da:27:75:f4:6d:89:2e:ed:90:23:56:62:7c:30:84:
                    80:5d:28:3a:52:1e:b4:6e:19:04:69:0e:e0:d5:28:
                    39:d3:4b:8b:72:36:af:74:7c:ce:03:75:64:5a:80:
                    b7:bd:39:9b:da:71:94:f8:06:5b:47:00:d9:79:45:
                    c6:2f:4a:2c:69:e0:54:b0:98:e8:1e:91:d9:fb:f8:
                    f7:06:00:6d:8b:85:29:1f:50:15:aa:05:b6:74:cf:
                    df:7f:16:98:a8:79:c9:fa:59:fe:0c:e4:52:83:34:
                    57:9b:e9:24:8f:60:4c:18:14:43:18:51:fe:15:ff:
                    e7:33:73:81:31:7e:c0:0e:36:fd:06:96:d1:b9:4a:
                    3b:0a:74:9e:75:98:c6:4b:ef:50:8b:16:62:02:d0:
                    ff:04:3d:f8:ac:57:54:f1:ac:da:8a:7c:d3:92:35:
                    4d:e9:c1:4e:1c:3f:37:38:7c:43:50:0e:b2:f0:e9:
                    2a:62:0d:dc:1b:c2:26:1c:9b:cd:d0:a7:bd:a4:bb:
                    e4:f3:84:be:61:24:bb:de:17:33:58:b6:7e:1c:32:
                    a7:2d:5e:61:04:ac:55:7b:b4:2d:c0:de:c0:69:76:
                    51:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3B:CE:F4:27:FB:21:65:B3:D3:D7:84:E5:E5:19:B1:D5:5F:35:42
            X509v3 Authority Key Identifier:
                keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:08:fa:9e:d0:00:0c:0a:59:a7:07:50:19:2a:23:d4:52:eb:
         7e:79:17:da:3c:a3:a8:57:98:82:a2:94:d7:d0:f2:41:d2:73:
         52:54:59:65:6a:b5:13:c0:9e:57:fc:00:39:72:0a:7a:15:a8:
         64:d7:4c:ba:7b:01:99:e2:a0:c7:18:8c:10:97:2b:c8:be:51:
         39:01:74:a1:58:81:78:79:ce:b7:b6:95:d8:f2:54:c9:ec:13:
         e6:c0:47:e6:e5:9e:99:60:6a:37:11:8c:2b:35:14:49:1c:95:
         9f:fb:74:9c:8c:03:68:55:10:05:32:e3:93:62:1e:b0:4b:ad:
         1f:cb:a4:52:8e:7d:9b:8b:73:3c:c6:c5:04:90:1c:d6:06:21:
         7a:95:3f:bb:88:d7:d4:8d:78:9d:65:82:b5:a6:ba:b4:0b:45:
         d9:cc:d3:9f:a2:4e:63:32:eb:dc:3a:94:6c:e5:69:b8:64:45:
         4e:be:74:d6:f8:0f:1e:3e:6c:7f:ff:e2:65:cc:67:89:50:ab:
         f0:34:6c:a7:f3:dd:bf:e6:d8:16:54:ba:d7:aa:43:85:7b:8f:
         af:c8:82:c4:f9:87:22:ee:9b:97:65:c3:50:84:4b:96:f5:32:
         2e:12:cb:d0:78:81:ba:af:da:fb:e3:56:26:1d:96:05:62:d4:
         64:75:98:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:50:01 2025 by rpki-client