Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File:                     elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier:          kM26I9RxPY0A0PrbbHAe6eDVSkxeZ18/A3NC+wyA3GE=
Subject key identifier:   CF:6B:C5:74:B3:BA:78:86:5F:F2:65:1A:B7:B9:98:70:D1:1A:99:73
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer:       /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial:       019A5007504014BFCF49647EBC833196A9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number:          070C
Signing time:             Tue 04 Nov 2025 18:00:47 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:47 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:47 +0000
Files and hashes:         1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: SIJix+aLpqtUjuwrMXVEcSoL4rwV71I5PItg+vYZZuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:50:40:14:bf:cf:49:64:7e:bc:83:31:96:a9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
        Validity
            Not Before: Nov  4 18:00:47 2025 GMT
            Not After : Nov  5 18:00:47 2025 GMT
        Subject: CN=cf6bc574b3ba78865ff2651ab7b99870d11a9973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:df:da:b2:fe:42:9f:b4:8a:a9:8d:a1:bc:
                    3c:8e:ed:b5:2c:3b:7a:4d:c9:2c:e2:7b:b0:0f:e5:
                    90:88:d6:8a:83:9a:91:ad:0c:89:dc:f7:2d:e9:80:
                    a0:1c:bc:b9:c3:d1:61:ae:ef:7d:05:90:5f:41:8a:
                    e8:a3:26:c0:68:a3:fd:63:df:45:ab:e4:b9:04:0d:
                    ab:c5:15:63:ef:16:54:e9:80:1a:22:d6:40:fb:db:
                    01:6a:3c:3f:7b:da:89:84:f8:20:6c:28:82:37:84:
                    61:55:2f:81:2c:12:12:98:33:21:65:73:fb:c1:31:
                    f1:22:5e:87:0e:ca:05:04:10:c3:3d:80:e4:3b:88:
                    54:58:ae:e5:f7:fc:03:72:2f:e0:8a:96:98:93:60:
                    35:56:15:51:9b:23:de:24:da:65:26:b3:ed:40:33:
                    65:fb:65:ba:3c:a4:d4:31:7a:75:51:a4:bd:1f:22:
                    98:2f:62:cb:76:37:5e:63:79:f8:8e:a3:f9:1f:49:
                    7f:e4:b5:98:91:e6:65:08:67:79:8a:b7:70:64:2f:
                    55:20:70:85:ab:5a:30:2d:13:f0:76:e6:bb:3a:22:
                    0a:11:b9:ff:c8:e0:1b:e4:26:1d:05:89:a1:35:59:
                    78:2b:bf:55:08:e3:42:3d:14:85:b4:ff:86:bf:f6:
                    c0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6B:C5:74:B3:BA:78:86:5F:F2:65:1A:B7:B9:98:70:D1:1A:99:73
            X509v3 Authority Key Identifier:
                keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:dc:3f:2e:7b:0b:22:ac:79:0d:0b:f8:c2:ac:c3:da:47:
         11:2d:0c:c5:02:49:ef:e3:18:61:14:53:f4:eb:e9:85:14:2e:
         d0:69:f5:59:4e:48:33:40:2e:d3:ba:33:62:67:8c:ba:a9:77:
         cf:b0:4e:6a:f2:c2:e9:eb:18:90:d9:07:cb:e3:d7:21:ed:31:
         b9:2d:bb:45:85:bb:86:ea:4e:48:91:a9:fd:a6:7b:4f:ba:3e:
         08:20:9c:94:e9:cb:2f:d4:bf:1b:1a:8b:47:08:31:6d:27:9b:
         8e:1a:8d:f9:bb:bc:d3:b9:06:12:21:2d:bd:ea:a7:ee:59:5a:
         bf:ab:a2:f4:24:b0:9f:b0:97:ab:56:74:6c:e3:26:18:f9:5b:
         9f:bf:d3:7e:dd:4f:09:87:29:06:f7:24:db:4a:6c:3c:e6:b8:
         e7:6b:82:b1:6b:20:66:b2:6f:ec:4f:cf:b6:d9:db:49:9b:57:
         ae:8e:16:75:de:5b:21:0c:13:d1:01:4b:33:88:63:c1:0b:01:
         7f:37:74:8f:df:f2:76:c0:9b:ed:4e:f6:5e:09:2c:f6:b9:4c:
         23:cf:ae:ac:27:db:49:ee:d2:55:37:d2:93:3f:5a:87:21:5c:
         8a:2d:b3:31:df:11:f9:95:ab:02:70:2d:2e:61:6d:de:38:32:
         e7:95:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:53 2025 by rpki-client