Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File:                     eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier:          Qyom+/R9MbHL0SAYLLoiRaruNrsn4g1oIW9GlRFZuZI=
Subject key identifier:   57:69:01:87:67:8B:66:94:31:E5:6D:5F:1F:01:4B:5C:72:DF:B8:26
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer:       /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial:       019A71B81B23A58BA2EF9B898154163A5F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number:          0330
Signing time:             Tue 11 Nov 2025 07:01:21 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:21 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:21 +0000
Files and hashes:         1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: H/VZDkh/nVR8CLzmzmzdUPcIPc7mcWPNidWoFX7r01k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:1b:23:a5:8b:a2:ef:9b:89:81:54:16:3a:5f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
        Validity
            Not Before: Nov 11 07:01:21 2025 GMT
            Not After : Nov 12 07:01:21 2025 GMT
        Subject: CN=57690187678b669431e56d5f1f014b5c72dfb826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c4:0b:5f:33:33:21:4c:59:71:a7:4f:b8:b6:
                    05:72:2a:79:be:06:22:f2:38:00:8d:60:39:13:62:
                    a0:09:84:7d:d3:9d:80:da:9d:44:da:2a:92:88:bb:
                    cb:4e:b4:ae:8a:f6:62:9c:8c:e7:a0:db:d7:6f:b7:
                    e1:cf:22:34:36:48:1a:40:28:3f:ae:2f:2d:e8:83:
                    a8:11:ea:a4:13:83:f7:04:17:6c:60:64:3a:d6:11:
                    b0:c7:33:81:61:b5:14:08:16:c5:c6:91:03:5c:57:
                    bc:10:bc:99:99:11:6b:bb:7e:87:81:3b:b1:41:1f:
                    ae:1d:b6:1e:54:af:bc:bc:eb:be:75:f4:04:7f:91:
                    78:79:4c:43:b6:67:5b:8f:35:f6:bd:1b:72:94:e7:
                    73:a6:76:ce:47:65:d2:61:f8:58:e7:e6:b7:2a:0f:
                    ec:aa:3c:01:a5:81:21:e0:ba:40:61:ad:1a:3c:9b:
                    ab:f2:c8:89:de:ec:ba:d8:a1:c4:84:e5:97:e4:13:
                    99:c3:5a:4b:9e:71:a6:5a:a1:69:dc:ca:ed:a9:92:
                    5e:5c:9f:40:75:68:f4:8f:cc:db:11:e6:67:83:9b:
                    7a:16:8e:0d:98:38:05:3f:01:83:32:c3:7a:38:9b:
                    c2:dd:64:48:f8:a1:5e:91:8b:d4:67:42:87:72:a2:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:01:87:67:8B:66:94:31:E5:6D:5F:1F:01:4B:5C:72:DF:B8:26
            X509v3 Authority Key Identifier:
                keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:46:b7:23:bc:bd:cc:70:ad:d8:91:b9:7a:02:7c:c0:02:
         3a:12:74:81:55:e5:44:9e:a2:d0:b5:06:76:92:a0:21:33:fa:
         1d:03:60:ab:38:09:74:dd:09:b5:a1:17:04:39:c7:66:66:41:
         0d:9d:d7:70:1a:cf:f5:c4:d7:fd:70:8b:79:aa:5b:7c:aa:32:
         23:b0:11:1f:d1:97:00:be:66:15:99:c0:16:3a:25:b4:e6:16:
         d2:fb:c8:c2:71:f0:52:c9:64:04:1e:3b:9f:d8:42:9f:9d:0c:
         8b:b7:56:09:f9:7e:13:e0:b6:e5:5f:2d:ba:be:24:0a:9f:08:
         25:c4:4c:3b:d4:a5:4c:ca:35:16:e5:25:d4:40:8b:62:ec:dc:
         05:f5:82:d3:3d:d7:d0:6e:7e:37:b2:e3:05:b5:5c:2d:c4:ef:
         71:c3:98:d1:7a:19:5f:30:a2:f2:53:49:37:0b:2e:c2:91:73:
         10:67:33:a4:05:ed:77:a2:4f:e6:87:06:3a:5a:de:a1:f7:48:
         f3:90:93:17:11:8e:39:a9:16:e2:36:01:df:15:53:d6:bc:03:
         eb:17:1e:95:ff:f6:ec:33:f2:07:54:53:b4:34:52:50:f8:4e:
         49:2d:6d:d7:88:85:71:b6:2f:8f:e5:b6:47:56:6b:8b:c1:4d:
         f6:4e:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:27 2025 by rpki-client