Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File:                     ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier:          IcHQTGBihbiVn3+ABg8EudCG+/+M0PUg3lmFwg8r6pE=
Subject key identifier:   BA:CB:3E:05:0C:C2:75:FE:02:4E:8E:31:85:48:60:A1:E5:55:69:2F
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer:       /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial:       019EBEECFD725EC4782EC29848087766D797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number:          0771
Signing time:             Sat 13 Jun 2026 03:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:02 +0000
Files and hashes:         1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: q2Hast7QmQbWvnXcA6DqoNqMGzQXML/8nuaIqvDOUqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:fd:72:5e:c4:78:2e:c2:98:48:08:77:66:d7:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
        Validity
            Not Before: Jun 13 03:01:02 2026 GMT
            Not After : Jun 14 03:01:02 2026 GMT
        Subject: CN=bacb3e050cc275fe024e8e31854860a1e555692f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:25:43:8a:d6:fc:20:56:ed:eb:17:24:7a:45:
                    71:8c:d6:c4:e7:83:78:68:ac:fc:6f:51:c9:49:44:
                    14:c2:ef:4b:45:ff:ad:0b:48:07:3c:43:e3:4b:07:
                    01:7c:e5:48:53:9a:23:86:1a:b9:a3:22:d7:50:ea:
                    0e:53:6c:c7:2b:01:7c:5b:5e:c3:3d:19:ee:83:4a:
                    3c:71:7b:ed:16:b4:c3:4a:d0:da:2e:c3:52:bc:90:
                    77:fc:c0:9c:b7:51:a0:6d:7a:14:c2:d3:12:83:71:
                    43:3e:43:ba:fb:a0:b6:f0:6e:af:a4:59:9a:dd:52:
                    fc:c4:10:f9:a2:68:c3:0c:47:30:9e:00:38:87:c1:
                    bf:1f:ca:1a:d4:e7:34:93:03:c0:46:f8:2d:3b:39:
                    ff:a5:13:f0:55:fb:a8:af:46:85:ec:51:68:c8:12:
                    7e:40:73:08:61:41:4a:01:a7:32:17:32:01:2e:3e:
                    16:13:fd:ab:54:e3:45:da:b4:60:db:54:22:a2:fe:
                    d3:94:9e:6b:78:9f:2c:31:fa:7c:52:45:18:5d:79:
                    eb:0c:c1:85:69:d5:b7:48:94:ef:aa:7a:94:65:8d:
                    54:2e:f7:2d:51:c2:57:08:ca:d7:2f:08:67:f5:26:
                    f6:52:39:0d:95:58:9e:bc:4a:9f:84:a4:e0:d0:4e:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CB:3E:05:0C:C2:75:FE:02:4E:8E:31:85:48:60:A1:E5:55:69:2F
            X509v3 Authority Key Identifier:
                keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:96:76:c9:75:29:e1:59:c6:f8:d6:05:61:03:7f:8e:4e:
         a8:e6:78:86:ed:02:5e:73:82:98:56:97:4e:5b:03:cc:98:d5:
         ef:39:51:e9:05:c7:6a:a8:21:55:ed:47:ba:a2:ac:58:2b:fa:
         82:ed:f6:fa:40:5e:76:f7:24:ba:2c:23:62:56:0f:c9:f3:4b:
         f7:9d:ee:46:35:20:aa:ad:92:0a:bc:af:81:8b:3a:cd:ed:39:
         a0:56:c3:96:72:86:26:a9:13:de:83:81:c0:8c:6f:d3:08:d3:
         ae:57:e2:a3:7e:23:43:87:df:86:ac:9d:03:45:d4:40:5f:d5:
         85:13:95:0e:47:b7:96:e5:2d:30:1e:79:76:68:70:5a:90:58:
         5c:e8:84:49:1d:d5:a5:f4:9f:8d:81:42:e3:7c:77:11:3b:f6:
         34:02:58:48:49:27:1d:d2:ed:8c:01:c8:45:42:6f:07:04:7a:
         3f:06:d3:e5:db:72:2d:fc:f7:41:5c:78:fa:6f:cf:b5:fe:be:
         7b:e6:77:64:a4:84:3f:e3:6a:28:eb:28:65:04:ea:1f:4a:23:
         84:2d:2e:80:52:c3:3d:70:9f:63:81:6a:5e:27:58:93:4c:a7:
         4b:1a:40:36:0f:9c:1d:44:33:07:90:15:00:2f:5a:c1:3c:76:
         11:7c:c6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:55:21 2026 by rpki-client