Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          gW5uytTVEq2vWD/EXNEzKamUw4iAcJDt0E/MOPaVSKw=
Subject key identifier:   BE:80:27:D4:55:43:5E:E0:CF:E5:6B:BB:87:70:53:E7:FD:0E:A2:0F
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       0199239F6867DFFBB3F0B34DE5BF60D8CBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          078F
Signing time:             Sun 07 Sep 2025 10:01:13 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:13 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:13 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: 0tDZDtI3VhR0swAagm0VH0MivtCFe8tFCUo6LYQ8VsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:68:67:df:fb:b3:f0:b3:4d:e5:bf:60:d8:cb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Sep  7 10:01:13 2025 GMT
            Not After : Sep  8 10:01:13 2025 GMT
        Subject: CN=be8027d455435ee0cfe56bbb877053e7fd0ea20f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:bb:e3:b5:05:f7:8c:11:d7:94:b1:0a:73:
                    9a:a0:9a:ac:b1:21:f3:6b:7a:64:36:95:97:1b:14:
                    40:2e:54:22:4e:55:5f:28:5a:a0:73:88:51:a2:67:
                    71:87:7c:ee:e6:d2:13:c5:17:50:fd:5c:ab:72:02:
                    e0:04:1a:1a:5b:24:9d:28:c7:bf:2f:8d:ec:52:54:
                    5e:76:15:68:b3:50:75:dd:73:58:c6:00:2d:3c:8a:
                    53:ae:35:20:69:3a:d4:42:53:93:91:0c:02:70:8d:
                    54:0f:6a:29:df:d5:85:0b:05:d8:73:d4:01:9c:9a:
                    e0:2b:f0:08:83:8b:77:0b:87:d0:b2:a9:5f:b3:a4:
                    4a:53:d1:48:b5:56:8d:51:07:ed:07:9c:2f:34:22:
                    97:45:87:4e:c7:6c:3e:12:73:d9:bd:42:16:69:47:
                    52:0f:e9:18:b4:9c:cc:fa:f4:a9:58:61:ba:3b:b0:
                    f3:55:cf:0b:5b:00:9f:e1:d8:9f:71:bf:30:d0:57:
                    4e:e7:71:a4:93:5e:13:70:cd:0f:ef:e6:dc:37:88:
                    43:6a:79:8f:ff:8e:94:2f:ec:36:ed:60:fa:ec:9e:
                    a1:e3:d0:30:d5:f4:1d:11:48:3c:cf:cd:ac:62:c1:
                    0e:5c:29:f1:f7:2b:a9:c9:d9:ff:bf:9f:df:08:d6:
                    4e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:27:D4:55:43:5E:E0:CF:E5:6B:BB:87:70:53:E7:FD:0E:A2:0F
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:83:1a:72:eb:a5:36:39:ff:19:ac:dc:34:4a:19:f2:a1:8d:
         77:fe:2e:2e:41:f9:2a:ae:b1:79:ae:0d:84:27:38:5d:11:0d:
         96:53:c1:3b:bf:11:af:7d:7a:2f:53:b3:68:ac:ad:3f:28:85:
         8e:04:17:b3:f1:8c:ad:81:d0:ea:2e:95:2d:86:4e:2f:90:95:
         18:ed:98:ec:83:ba:a1:7f:27:4b:8e:5b:e4:7c:44:1e:98:6b:
         85:9e:ac:8f:36:51:d3:cd:a2:d6:98:0f:b9:7b:b0:8e:a4:a7:
         0e:3e:27:ea:8d:34:bd:70:3d:44:2f:39:c2:0f:05:c2:8a:95:
         5d:6b:08:38:1c:85:5a:75:c7:ff:48:40:73:5d:e0:96:dc:ee:
         30:7e:99:89:b8:7d:a4:c6:07:c2:c4:43:1b:35:c5:b3:73:63:
         13:85:c4:a0:1e:ff:00:31:4d:55:0e:d2:c2:f5:91:44:19:ad:
         b9:db:69:7c:9e:e6:3f:3b:ee:94:c4:ca:0b:11:7c:e5:07:e3:
         31:45:6d:06:c7:3b:0a:65:ff:5a:01:c5:f8:68:54:6f:8f:8d:
         3b:ba:ba:f2:2a:c7:7f:b7:80:a9:df:a7:fb:68:1f:e0:1b:34:
         d3:d5:52:4c:b8:36:91:dc:ca:9e:ca:ba:ac:76:cd:0e:cc:df:
         69:07:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:22 2025 by rpki-client