Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
File:                     euirxe_YoA4Rx7LA2OH3b4IUYks.mft (raw, json)
Hash identifier:          VgfRiLuSLgNu/f7IY70vMBwyPS84e9wyZD9PJ+j7338=
Subject key identifier:   F9:21:50:46:F2:6A:20:CC:1B:CA:4A:1D:1E:39:26:F2:46:55:5C:90
Authority key identifier: 7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B
Certificate issuer:       /CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
Certificate serial:       019A4E4FCADB2E62DB233F760FE3359CC5F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
Manifest number:          0B07
Signing time:             Tue 04 Nov 2025 10:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:43 +0000
Files and hashes:         1: euirxe_YoA4Rx7LA2OH3b4IUYks.crl (hash: GlBYh8Q4x3Iih03xuRnf3k3ZkFMYFTcXNYivu7D/prA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:ca:db:2e:62:db:23:3f:76:0f:e3:35:9c:c5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ae8abc5efd8a00e11c7b2c0d8e1f76f8214624b
        Validity
            Not Before: Nov  4 10:00:43 2025 GMT
            Not After : Nov  5 10:00:43 2025 GMT
        Subject: CN=f9215046f26a20cc1bca4a1d1e3926f246555c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:37:ce:41:37:d7:b5:9a:6d:04:ad:68:91:27:
                    be:5c:c4:f8:94:e0:c3:6a:0e:1a:4b:53:49:79:a0:
                    7b:aa:70:8a:e7:43:15:ca:db:0b:9d:e6:f7:ec:23:
                    c0:4f:d9:75:54:99:8b:b3:65:82:c7:b9:46:6f:ca:
                    56:3a:e1:e0:14:bb:c6:03:ad:b4:47:4f:e6:4b:fe:
                    91:fa:39:28:72:ee:51:cc:77:3d:7a:76:61:ca:ba:
                    af:e5:44:74:bb:e4:d4:d2:61:b7:af:e7:de:b4:cb:
                    47:2a:de:b1:65:2d:e3:a3:41:5f:a9:8b:54:42:41:
                    ea:e3:69:04:38:ea:77:d2:45:30:ed:d5:c7:e8:24:
                    dc:48:4e:b4:e7:c5:ea:1b:d3:e2:63:23:bc:c3:92:
                    58:9e:3a:0f:21:a4:2c:29:61:70:72:11:f7:d6:66:
                    66:19:99:2e:e8:1d:c9:b0:e9:46:89:48:43:c7:66:
                    6c:2c:a7:cd:67:73:ba:e7:36:8b:f4:e7:e6:55:c8:
                    65:a2:c7:c7:c2:91:aa:1d:09:47:2e:b5:a1:44:de:
                    63:40:c3:13:13:30:48:e3:a1:32:14:70:6e:8f:1d:
                    f0:8b:fa:03:6e:6a:94:54:8c:13:4f:3e:9d:53:6d:
                    ce:c1:53:28:ed:1d:a9:1f:f8:e7:14:be:5a:1b:84:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:21:50:46:F2:6A:20:CC:1B:CA:4A:1D:1E:39:26:F2:46:55:5C:90
            X509v3 Authority Key Identifier:
                keyid:7A:E8:AB:C5:EF:D8:A0:0E:11:C7:B2:C0:D8:E1:F7:6F:82:14:62:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euirxe_YoA4Rx7LA2OH3b4IUYks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ed1877-17c4-4c56-ab38-57bea9d11d09/1/euirxe_YoA4Rx7LA2OH3b4IUYks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:fc:66:a2:ed:fa:21:11:40:d7:27:68:d7:c8:08:96:3d:95:
         51:95:fa:87:b9:91:91:3c:12:f6:90:95:cd:10:94:be:d1:86:
         65:4f:a0:1c:34:d7:b7:a9:80:41:24:d5:12:3a:8b:55:0f:ab:
         ec:a4:16:43:7a:39:91:a2:71:5e:b4:28:6a:e5:51:f9:bf:76:
         3c:6a:b3:c2:60:7f:5c:f7:07:b2:f4:cd:51:c8:19:12:95:ba:
         75:f0:38:34:8b:e7:0d:02:eb:fc:24:ff:28:eb:1d:d7:ba:aa:
         b0:5e:2f:3e:7a:6d:ab:bb:6b:26:c4:b6:73:0d:aa:aa:87:b3:
         ba:39:7f:39:84:71:2c:c5:46:37:d1:09:eb:36:87:ea:40:f8:
         10:cb:e8:32:c8:a7:98:6a:7e:52:b0:ee:8b:a9:35:1a:7e:b1:
         f1:d0:b4:5c:83:cd:54:8b:24:47:5f:17:85:5e:c4:aa:89:68:
         0f:30:b1:04:81:6b:51:ae:c5:4e:ca:3b:9b:54:63:e4:c6:cc:
         f5:67:e3:e5:ba:8f:d4:4e:f6:03:d6:49:a7:02:c0:a5:26:d9:
         bb:e1:8d:ad:2e:0b:47:34:27:51:2e:33:76:da:6f:e6:ca:35:
         7c:27:b2:a4:5a:f9:d1:fe:db:65:42:f4:4a:6b:c3:6c:66:eb:
         dd:4a:f1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:22 2025 by rpki-client