
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
File:                     eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft (raw, json)
Hash identifier:          6yv+NP3memK9eF+63BhMCw7FDFJeVgnqn4ofDJhYn5w=
Subject key identifier:   F7:52:68:8C:30:8B:E6:E7:AD:25:A9:8E:9D:BF:B8:7B:FA:F2:ED:08
Authority key identifier: 79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
Certificate issuer:       /CN=7968c4d3ffca8e737868a45696a198fde09fd457
Certificate serial:       019A4EF43F84DB3E88E0AB4A81B3B2943345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
Manifest number:          031E
Signing time:             Tue 04 Nov 2025 13:00:21 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:21 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:21 +0000
Files and hashes:         1: eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl (hash: pFM8hbIXjuea2lMyXQWez/7kzV0/Be1QGnAmqoui41E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:3f:84:db:3e:88:e0:ab:4a:81:b3:b2:94:33:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7968c4d3ffca8e737868a45696a198fde09fd457
        Validity
            Not Before: Nov  4 13:00:21 2025 GMT
            Not After : Nov  5 13:00:21 2025 GMT
        Subject: CN=f752688c308be6e7ad25a98e9dbfb87bfaf2ed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ef:52:d7:57:2d:05:3b:a1:9f:fb:f4:c6:83:
                    50:6b:4e:17:6c:2f:96:e2:d5:46:75:70:0f:41:69:
                    51:c8:09:fb:5e:6f:d1:18:8b:a8:35:14:8d:20:48:
                    9e:3c:13:ce:35:f0:1f:ff:87:c3:98:e5:23:42:85:
                    bf:45:42:ef:c0:eb:f6:8e:9f:e7:8e:ed:44:9b:57:
                    57:91:68:40:30:b9:7b:4f:c4:fb:9c:2a:61:02:b0:
                    8e:ff:ff:7d:4a:b9:04:e2:e5:5a:f1:4c:4b:7f:ab:
                    5e:75:46:8e:5b:b8:bf:17:01:ab:b9:17:31:01:d3:
                    1e:7c:05:29:91:9c:06:92:9c:47:ac:ef:a6:9c:df:
                    6b:e7:1f:b1:57:4c:e3:c1:94:5a:d0:01:6c:cd:7d:
                    39:90:54:30:ad:6b:c5:53:b0:cd:82:d1:3b:83:d2:
                    44:6c:c9:ef:69:c0:74:ab:d8:89:12:7b:84:24:59:
                    13:1f:04:6a:84:3f:58:fd:5e:32:76:0e:a3:06:39:
                    7c:53:38:f2:f8:88:35:ea:a2:28:72:de:50:68:9f:
                    49:11:18:c3:4d:75:01:f9:44:2c:ee:09:b7:21:b0:
                    21:11:de:82:70:0c:fc:88:c3:67:33:e3:79:92:08:
                    08:94:d8:2a:cc:11:5d:2a:90:70:84:42:0b:b7:5d:
                    cc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:52:68:8C:30:8B:E6:E7:AD:25:A9:8E:9D:BF:B8:7B:FA:F2:ED:08
            X509v3 Authority Key Identifier:
                keyid:79:68:C4:D3:FF:CA:8E:73:78:68:A4:56:96:A1:98:FD:E0:9F:D4:57
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWjE0__KjnN4aKRWlqGY_eCf1Fc.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/990560-e393-4f54-97e9-0773ed6f4ffd/1/eWjE0__KjnN4aKRWlqGY_eCf1Fc.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         37:00:51:ad:e4:78:b8:5f:e2:85:82:aa:e7:28:c8:32:46:14:
         04:2e:8d:98:40:e0:23:39:ad:fc:51:47:b2:20:34:b7:30:ff:
         a7:56:65:3e:98:0b:62:e8:b2:27:73:c7:26:9a:6c:5d:75:ae:
         85:c0:af:83:aa:dd:b1:f5:a4:e4:ec:4d:5b:e0:35:1c:d8:78:
         d0:a2:a5:5d:f9:7d:55:f2:61:0f:65:13:6c:83:4b:86:01:6a:
         6b:7f:19:f6:94:40:b8:a1:ed:9d:8e:3b:3d:a0:69:7e:29:76:
         c3:18:c9:f8:de:b1:00:b6:5c:9d:3a:e6:17:d8:c4:46:30:8c:
         2b:70:87:7c:3c:e6:dc:fd:dd:c0:fb:32:a1:e1:e8:3a:88:9f:
         7b:f4:4c:9c:85:68:6a:e6:5c:60:12:94:a0:ba:2c:ef:9c:d7:
         35:39:8f:ac:66:14:be:f5:24:08:b7:3e:6a:0b:7d:ad:73:0a:
         48:f7:dd:7c:84:06:c2:06:ef:67:c2:2d:a7:92:8e:b4:99:1b:
         fd:c2:e3:04:c6:69:8f:b2:6c:46:1d:ab:5a:49:d7:d0:84:68:
         5a:56:bb:14:ba:49:03:b1:df:54:f9:0d:2a:64:b4:c0:f4:80:
         e3:d5:5f:ed:8f:2d:25:7b:9f:ba:20:ef:de:0d:03:8d:48:8d:
         4b:39:66:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:42:49 2025 by rpki-client