Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
File:                     eINdJYNK4Na8nZKPZGEn-8VL0z0.mft (raw, json)
Hash identifier:          sJ8RdqzPqZFTG1cgxbQwthj4Oq8XKWazAWg384ztXGg=
Subject key identifier:   D7:6F:29:BA:DD:16:7D:24:B6:2C:96:40:65:99:E9:5F:B2:4C:2A:40
Authority key identifier: 78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D
Certificate issuer:       /CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
Certificate serial:       01988EEC43444E93D2FA4C4FADD462DFCDA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
Manifest number:          1622
Signing time:             Sat 09 Aug 2025 13:01:44 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:44 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:44 +0000
Files and hashes:         1: eINdJYNK4Na8nZKPZGEn-8VL0z0.crl (hash: fIYM6tEn8DbYH9p5zDc/ERGxViuYn4nDZqIf4SRHITo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:43:44:4e:93:d2:fa:4c:4f:ad:d4:62:df:cd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78835d25834ae0d6bc9d928f646127fbc54bd33d
        Validity
            Not Before: Aug  9 13:01:44 2025 GMT
            Not After : Aug 10 13:01:44 2025 GMT
        Subject: CN=d76f29badd167d24b62c96406599e95fb24c2a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:63:21:20:63:65:4e:50:26:8a:16:59:1b:
                    a8:76:35:66:36:08:b7:52:c5:6b:01:22:dc:83:78:
                    1f:b2:47:34:1a:d1:7f:c5:f3:f4:e4:e6:1f:6c:82:
                    09:e1:25:22:e9:bc:f6:86:57:68:7b:65:03:33:ba:
                    52:cc:a4:78:29:ac:97:9f:47:9d:c3:12:90:fb:12:
                    b8:39:20:42:d1:d1:38:0b:6b:b0:86:43:c9:d8:5e:
                    ca:36:08:b8:7e:10:59:2d:df:e5:10:a1:0f:dd:0c:
                    d8:03:f3:85:42:8f:3a:74:65:da:92:98:c9:1c:fe:
                    45:24:c3:3f:c6:9e:23:36:6a:6e:e5:49:fd:78:1c:
                    05:75:d3:d5:9c:49:f1:ab:c4:99:71:5b:5a:d9:2e:
                    d7:ae:e1:fd:2e:06:d5:df:79:fb:ba:95:9d:f7:fc:
                    ee:2d:1f:89:d8:35:1c:bd:75:07:a0:ac:5d:d0:1b:
                    66:5b:61:d8:f7:9b:42:a8:49:27:ec:8e:36:b9:39:
                    b0:5a:63:53:5c:d0:bd:43:d5:68:83:5f:26:05:8f:
                    48:ba:62:84:59:5a:72:c6:53:ee:a5:3c:40:f1:bb:
                    46:32:20:d6:93:81:6f:90:85:90:07:a5:f7:11:2c:
                    f0:37:65:db:d8:ce:6f:f4:d2:84:2a:38:98:04:24:
                    87:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6F:29:BA:DD:16:7D:24:B6:2C:96:40:65:99:E9:5F:B2:4C:2A:40
            X509v3 Authority Key Identifier:
                keyid:78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c3:9a:b2:2e:03:99:73:f5:c0:05:92:02:3b:99:59:df:48:
         72:66:00:2e:5d:d9:f4:60:62:98:03:97:e0:30:7f:1b:be:a8:
         74:f6:2e:bf:e1:3f:c0:8b:50:2f:74:bd:b6:48:a6:9d:65:49:
         12:78:e0:9b:1f:eb:07:51:c4:30:99:73:41:21:d8:8d:b4:9f:
         f7:7f:eb:4e:77:91:b4:41:54:77:b7:dd:62:9c:7a:3e:57:31:
         d9:10:3b:0a:83:4b:7c:c7:03:59:96:72:cc:15:32:4a:ad:e0:
         82:91:16:6f:aa:be:4f:93:89:d5:70:ce:1e:16:53:7e:e6:fc:
         9d:29:1f:48:14:45:9e:e3:03:9a:a7:20:23:de:28:bc:a1:23:
         8c:94:33:d7:f6:d0:52:31:86:5e:29:cf:aa:21:a2:b0:85:ad:
         b5:a3:4b:02:8d:50:77:26:01:5b:78:c1:ca:bf:20:9b:fc:3a:
         36:d5:d5:7b:e0:ed:ce:5a:6c:ce:71:c5:6c:a3:6c:27:9b:fe:
         85:10:59:6c:a3:1e:28:a3:82:62:57:70:9e:2e:fa:81:6f:07:
         7d:12:6c:59:bc:d2:97:a3:5c:2a:8e:1a:53:93:20:79:7c:d7:
         8e:b3:18:0f:aa:6e:37:19:90:41:15:ad:0b:4f:e9:07:40:6c:
         72:26:c9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:08:51 2025 by rpki-client