Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
File:                     eX87nykJe6W_ddRkbgJZ9RxCGlg.mft (raw, json)
Hash identifier:          xfqniYc8m70acqHmFs1t4u69qXBhKRBYDyTK7pRIpAc=
Subject key identifier:   8C:5E:1E:31:3E:AD:B6:48:FF:20:88:0E:AA:09:E3:61:06:2F:56:1C
Authority key identifier: 79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58
Certificate issuer:       /CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
Certificate serial:       019A50E2B4A3105D79AAFF5E004F1953B547
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
Manifest number:          0DDF
Signing time:             Tue 04 Nov 2025 22:00:25 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:25 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:25 +0000
Files and hashes:         1: eX87nykJe6W_ddRkbgJZ9RxCGlg.crl (hash: h7wf2PHJ3ZbgYeW0vBZz4tyI1zIN621te7quoEOj0tI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:b4:a3:10:5d:79:aa:ff:5e:00:4f:19:53:b5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797f3b9f29097ba5bf75d4646e0259f51c421a58
        Validity
            Not Before: Nov  4 22:00:25 2025 GMT
            Not After : Nov  5 22:00:25 2025 GMT
        Subject: CN=8c5e1e313eadb648ff20880eaa09e361062f561c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:45:62:da:0d:97:dd:66:00:b6:98:e2:a3:
                    55:82:d7:77:20:74:98:65:55:f3:e2:ee:ee:d9:b2:
                    af:81:06:ec:83:63:a0:97:8d:1f:c9:d7:c3:65:36:
                    49:b7:c1:f5:70:c5:39:52:9b:65:4b:e6:c5:da:c4:
                    77:e6:9a:d6:53:c4:ab:13:0e:48:aa:5d:87:85:0f:
                    f2:37:fb:2a:94:53:c5:c9:81:17:1d:25:b5:04:bb:
                    80:5b:53:ed:6e:ec:62:c8:6b:ab:84:81:d3:53:ff:
                    49:0e:88:85:91:66:85:a8:2f:ba:fb:b2:3f:e6:b3:
                    88:bf:d5:01:26:bb:9c:1d:89:0b:2a:3e:a0:5a:77:
                    6a:65:f7:f8:65:f2:f2:06:57:d3:8d:21:36:7b:d0:
                    52:ce:47:6d:80:18:f5:db:59:39:35:86:0a:e4:bb:
                    f4:a7:cc:b0:b2:6c:8a:07:be:ce:e3:d1:43:6d:5d:
                    b8:9d:ed:be:83:e3:21:96:a5:06:0f:d3:46:c9:12:
                    3d:44:77:cb:89:75:2b:5d:58:ae:0a:b4:4f:99:f6:
                    d2:f7:7a:65:86:96:f0:c1:8a:16:06:ef:30:a6:27:
                    bc:c3:d7:c0:19:5f:22:c3:c4:cc:9f:47:51:53:a6:
                    cf:1a:a4:a0:c5:e3:f9:ee:89:4a:d3:ed:f5:a2:4d:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:1E:31:3E:AD:B6:48:FF:20:88:0E:AA:09:E3:61:06:2F:56:1C
            X509v3 Authority Key Identifier:
                keyid:79:7F:3B:9F:29:09:7B:A5:BF:75:D4:64:6E:02:59:F5:1C:42:1A:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eX87nykJe6W_ddRkbgJZ9RxCGlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/e63328-45a5-4798-bcf4-c1acf012b9bc/1/eX87nykJe6W_ddRkbgJZ9RxCGlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:37:40:b5:24:d1:68:a4:e5:86:58:53:d7:06:fe:57:8d:02:
         43:8e:22:a5:b7:e7:fd:fc:72:96:85:c3:00:ba:f0:c2:33:aa:
         c4:b4:50:f7:39:f4:54:69:1c:24:c7:47:13:e8:09:0f:ad:e1:
         ad:1f:93:67:6f:7f:6d:7d:27:16:3b:92:95:3f:88:71:9e:1f:
         fa:58:fe:5c:c8:f9:31:b3:ae:48:51:68:6c:f2:f8:1a:44:f8:
         e1:b5:9e:d4:9e:98:75:44:94:96:2c:b5:f4:7f:39:c7:95:20:
         c8:d4:ae:b2:54:87:b3:51:61:3a:a8:0b:e6:2f:62:c8:2e:7c:
         be:32:90:b5:1a:71:df:bc:e2:17:04:b7:58:a3:67:2e:74:de:
         62:84:8c:8f:3c:62:d0:70:36:49:e4:68:8f:d7:b4:ce:2d:43:
         a2:59:43:ef:d8:73:62:86:80:d3:ab:92:6d:09:1e:59:3e:1e:
         4e:90:4d:28:3e:7a:8a:a7:e0:b1:cd:75:9b:ff:36:29:25:6b:
         7b:9c:3d:32:9b:ab:59:5d:cd:19:fa:1d:9e:5c:cd:e3:d3:34:
         1a:2e:d1:f0:84:b1:f3:59:a5:2e:58:dc:d6:fa:bb:8e:4e:96:
         5a:83:1d:77:af:04:5f:f7:fd:0d:c5:09:b7:bb:da:13:a3:be:
         01:5d:48:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:17 2025 by rpki-client