Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File:                     3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier:          4g89ziVRQTvdTJeCqZmPPrIXZ8cGfINd9squlJUcDyM=
Subject key identifier:   B9:C8:0C:6A:30:69:5E:BA:DE:2D:48:ED:F6:01:5C:51:CE:8E:21:BE
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer:       /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial:       019A4E4FB1D22555720D108B666A958013FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number:          0936
Signing time:             Tue 04 Nov 2025 10:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:36 +0000
Files and hashes:         1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: pOh1tjdDQ9w+CUNrTpxeuf9D0i32nhm4SMx9fJ5U6VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:b1:d2:25:55:72:0d:10:8b:66:6a:95:80:13:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
        Validity
            Not Before: Nov  4 10:00:36 2025 GMT
            Not After : Nov  5 10:00:36 2025 GMT
        Subject: CN=b9c80c6a30695ebade2d48edf6015c51ce8e21be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c4:5d:ad:8a:3f:d1:10:6a:4a:ca:5d:5e:96:
                    3a:50:21:eb:5e:c9:ff:e7:8b:77:36:c5:2e:36:92:
                    94:40:06:1f:3e:2d:f8:9b:b0:80:27:e8:dd:e7:e5:
                    ce:fa:a5:48:cb:27:87:cc:4c:16:fa:79:66:0f:9a:
                    f1:af:9d:5d:53:7e:7f:53:7e:70:7d:98:f8:9d:fe:
                    cb:55:33:c3:97:85:cf:06:f9:4e:3c:af:8d:b5:64:
                    e2:e8:09:5c:aa:04:40:87:81:7b:3a:82:81:7c:bc:
                    ea:09:78:f6:6c:d0:31:04:96:90:72:14:00:b6:dc:
                    39:76:18:79:9b:89:8c:70:e9:d7:90:56:fc:75:00:
                    b2:0c:f8:32:0b:8f:9f:ff:c2:b7:c0:f5:ed:3c:5c:
                    94:d9:78:e6:75:ab:7c:8c:93:15:68:1f:54:78:f7:
                    57:0a:5a:43:f1:58:4e:a4:b6:ea:d5:17:41:bc:1d:
                    15:d3:be:0a:41:8a:c9:6f:4c:1f:53:81:f6:2c:22:
                    73:d2:9e:72:41:f9:cd:a5:50:6e:ce:d9:4a:16:25:
                    b8:c1:ee:c6:bf:f2:7b:cb:0f:96:fb:45:ad:1b:22:
                    b4:ed:7a:37:d2:51:b6:b8:50:29:f7:97:56:20:96:
                    33:05:8a:e6:6b:ef:b8:55:08:0a:62:90:ea:7c:ec:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C8:0C:6A:30:69:5E:BA:DE:2D:48:ED:F6:01:5C:51:CE:8E:21:BE
            X509v3 Authority Key Identifier:
                keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:12:d7:ec:48:37:2b:af:23:3d:96:b7:d9:ab:66:6a:fd:01:
         62:24:53:66:75:f0:ff:c2:de:00:53:87:ca:93:cc:06:d7:9a:
         d2:24:f2:76:2a:ba:dc:15:a4:6c:f9:d1:6d:b0:f0:b6:c7:ef:
         24:0d:e2:48:2e:c1:32:a4:14:c4:1c:18:ed:d1:7a:80:9a:ac:
         84:61:51:79:f2:ee:69:a5:b2:54:c8:3a:fb:75:4f:ac:f5:1c:
         36:24:55:9f:67:cf:bf:ba:a4:91:e2:eb:70:fe:e4:15:e1:93:
         7c:62:a0:d9:82:04:a8:b2:78:98:99:51:7d:a8:23:c5:11:21:
         63:2f:77:9c:8c:18:72:1e:8d:48:53:27:e1:f2:21:63:f1:92:
         56:c7:37:8d:8a:a4:55:c8:b0:37:95:22:57:44:eb:c7:90:b7:
         1d:6d:a2:e3:78:d5:29:bc:76:67:25:8c:92:f2:7f:6f:5c:e7:
         f0:fc:c0:d8:e2:db:89:6f:1b:77:4d:69:03:6d:6d:d3:5d:69:
         79:18:55:29:20:a9:21:68:ee:b1:42:f4:d0:9a:66:65:af:79:
         e5:c7:8b:68:c8:9f:50:10:28:f7:c5:c4:15:4d:14:f1:91:57:
         44:a2:d0:76:11:2d:48:81:73:0e:4c:be:91:48:e4:ee:4e:e1:
         f7:a8:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:28 2025 by rpki-client