Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
File:                     eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json)
Hash identifier:          /is7M7Lnt3aBWhJys07ZhilejMajE7Ns3uR8YUAgwTk=
Subject key identifier:   7A:A8:2A:D5:D1:6B:0D:DF:AC:F3:2E:90:BB:4A:58:A9:4C:2D:18:65
Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65
Certificate issuer:       /CN=790bc19fd79266ca08a9dc23840a004205f4e865
Certificate serial:       019A4EF562B690D28DA231D0039237F5DF1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
Manifest number:          0F24
Signing time:             Tue 04 Nov 2025 13:01:35 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:35 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:35 +0000
Files and hashes:         1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: eI49pCcEXqI13CVTF+z3lg+f9nu2xfExcqP+hjtJNHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:62:b6:90:d2:8d:a2:31:d0:03:92:37:f5:df:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865
        Validity
            Not Before: Nov  4 13:01:35 2025 GMT
            Not After : Nov  5 13:01:35 2025 GMT
        Subject: CN=7aa82ad5d16b0ddfacf32e90bb4a58a94c2d1865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:36:45:2b:cb:f8:50:ff:9b:8c:64:d6:d1:8f:
                    f5:17:70:68:8e:29:0b:fc:a7:76:f4:e5:d4:b7:59:
                    df:31:15:61:f9:05:95:84:6b:c4:01:80:34:30:4e:
                    18:a2:9b:aa:39:5c:bf:5e:45:5d:ba:64:63:d6:76:
                    5c:d1:50:ad:d5:bc:79:93:cc:4c:86:e6:6c:2d:4d:
                    d7:1b:28:3e:2e:38:b6:e3:df:24:3e:63:d9:a2:31:
                    e0:68:de:e3:49:8f:42:98:70:c8:ab:71:ef:7a:94:
                    fd:ee:68:61:2a:80:7f:d0:be:dc:94:67:fa:bd:ab:
                    4f:3f:c2:c2:39:c0:76:e0:35:43:c1:58:c4:7f:ed:
                    63:ea:b2:04:b9:46:7f:e7:4b:a3:ee:88:6b:f3:78:
                    53:49:06:f0:88:a4:3b:3a:88:66:33:20:9d:4d:44:
                    52:14:68:9b:9b:e7:bd:46:6a:c2:67:30:0b:a0:78:
                    45:a5:bd:f9:2b:f0:cc:a4:cf:f0:d3:9d:8c:eb:5b:
                    20:0b:44:12:f2:13:df:07:e5:6c:29:a5:e5:28:78:
                    e5:86:ec:bc:14:c3:57:d1:c7:1e:2d:a2:11:c4:cb:
                    f4:c0:ca:17:67:bd:dd:55:04:02:1b:23:22:82:25:
                    43:10:c4:bf:26:f0:c7:4d:db:6b:8a:1a:24:42:84:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A8:2A:D5:D1:6B:0D:DF:AC:F3:2E:90:BB:4A:58:A9:4C:2D:18:65
            X509v3 Authority Key Identifier:
                keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:82:37:e3:a6:5f:d8:ae:6d:ca:62:74:95:2e:42:ef:14:74:
         9c:2f:99:0d:63:1d:50:10:20:60:78:4b:3f:35:6c:12:5a:95:
         dc:d9:bd:d9:9c:b4:27:a7:5f:ee:04:a9:4c:0a:3c:f8:45:80:
         0a:45:bd:25:f5:2b:f3:84:04:a3:db:5d:b1:00:85:14:37:8f:
         bd:d0:ef:3e:55:54:be:e1:b2:bc:be:d2:e3:cd:54:76:a2:16:
         61:94:d7:88:f3:b5:21:fd:e4:4c:bf:b7:f2:4a:f5:0e:5e:a7:
         d3:0b:c5:6b:c2:82:2e:fd:fb:e2:f5:46:be:eb:a6:d4:a7:7a:
         af:6e:1e:c9:b5:e9:4a:ac:e4:0b:88:82:6c:89:73:ac:55:b2:
         bb:3a:98:60:1d:00:71:d7:f3:69:45:b5:c8:ce:91:a9:5a:06:
         3b:5d:0d:62:ce:cc:19:bd:5c:a8:d8:90:aa:ac:91:e7:0b:2e:
         b3:21:8f:55:dd:f1:06:e3:3d:a5:a0:85:37:51:50:b6:a6:39:
         dc:ba:03:68:6f:34:a3:22:d4:50:53:d9:9d:72:37:87:82:23:
         32:41:75:68:00:b3:c0:38:a5:a7:fc:66:28:31:6f:23:89:06:
         83:9e:ea:15:c1:1f:20:e3:59:5f:94:b3:68:fa:26:2b:94:dc:
         a8:b3:43:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:31:24 2025 by rpki-client