Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
File:                     RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft (raw, json)
Hash identifier:          hb2uE4i7kwNFuQczw7JkqbbisVT5B17YTGt1r15/5m0=
Subject key identifier:   87:09:23:90:29:B4:3C:84:DB:B2:AA:89:59:64:58:24:37:BD:A3:60
Authority key identifier: 44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31
Certificate issuer:       /CN=44957c7e26a3fe52f27ffbbc40e842764016b131
Certificate serial:       019A4EF5EC93EBFE3BAB72EABAC447C5F075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
Manifest number:          07AB
Signing time:             Tue 04 Nov 2025 13:02:10 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:10 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:10 +0000
Files and hashes:         1: RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl (hash: BGnHIG0v9E/RwqCFypn0oQuvUKuVYpKYdKgBans/yTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:ec:93:eb:fe:3b:ab:72:ea:ba:c4:47:c5:f0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44957c7e26a3fe52f27ffbbc40e842764016b131
        Validity
            Not Before: Nov  4 13:02:10 2025 GMT
            Not After : Nov  5 13:02:10 2025 GMT
        Subject: CN=8709239029b43c84dbb2aa895964582437bda360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d9:d5:8f:fd:c4:57:5b:1d:84:5e:b3:b1:28:
                    41:7d:a7:30:87:3b:e6:59:ba:89:38:71:ae:09:ae:
                    b8:5d:0d:7b:bf:b2:03:30:72:41:5f:d8:64:a6:81:
                    bc:df:ee:18:e0:ad:87:4e:79:5b:dc:38:2a:78:2b:
                    2a:3a:b8:3a:1a:3c:f8:3c:0c:20:82:c9:3d:8d:a6:
                    04:8b:e5:b5:ab:7e:bd:b1:e4:cf:48:73:ab:99:33:
                    a3:2d:e5:2d:96:1c:72:97:1c:aa:3d:33:cc:cf:ba:
                    b9:33:1e:09:07:c7:bc:9f:7f:c5:ee:84:f9:c4:13:
                    8b:76:5e:bd:7c:6c:99:74:92:f6:9b:f4:f4:4b:47:
                    2c:1b:83:9c:67:f5:10:3f:19:03:3c:9f:9b:3c:d6:
                    0d:c3:09:53:96:e9:b9:9b:19:d0:83:1f:4f:fd:1c:
                    38:c0:c5:5b:9d:dc:79:07:01:c2:e3:34:d0:8c:1a:
                    f8:04:5b:a2:58:c7:33:89:eb:d1:df:77:91:67:0b:
                    98:66:0a:ae:a2:66:7b:fd:6a:2b:24:5c:4b:ea:21:
                    a0:8a:27:53:93:76:08:77:b2:92:76:6e:67:8e:0b:
                    8d:79:f3:4c:b0:d6:f5:74:f5:f5:90:c3:89:8b:83:
                    c6:27:2a:fc:5d:c7:14:cc:c0:4b:10:0a:97:09:f1:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:09:23:90:29:B4:3C:84:DB:B2:AA:89:59:64:58:24:37:BD:A3:60
            X509v3 Authority Key Identifier:
                keyid:44:95:7C:7E:26:A3:FE:52:F2:7F:FB:BC:40:E8:42:76:40:16:B1:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJV8fiaj_lLyf_u8QOhCdkAWsTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a77502-5ce5-4809-90fc-a166503b3262/1/RJV8fiaj_lLyf_u8QOhCdkAWsTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:42:0d:a4:ef:c8:83:c9:dd:08:ac:b9:45:be:66:f0:79:ef:
         c8:2b:bf:9e:46:51:67:43:ed:e8:c6:31:05:82:d1:c6:2e:7f:
         ec:da:20:a8:cf:22:07:09:52:7e:88:4f:03:60:ed:c3:b5:36:
         34:6c:49:ba:02:a9:0c:49:7a:d8:64:10:b4:12:3a:6f:e9:ac:
         7b:64:f4:02:4f:9f:bc:89:17:68:0f:fb:12:e1:34:51:12:8f:
         74:21:9e:f6:4b:bb:85:11:eb:4a:31:41:2a:79:61:ac:8f:6d:
         d7:de:50:39:82:bd:68:b1:a5:25:da:3b:b7:df:5f:f7:40:f2:
         d2:b1:92:ed:d7:4f:33:5b:2c:9a:da:41:23:32:79:a3:f2:00:
         97:2e:fd:5a:62:ac:dd:ac:ab:1d:7f:69:15:00:71:c0:6b:0f:
         25:b3:36:ae:93:ba:bb:ed:f3:5d:63:3d:69:cb:1b:dd:31:fb:
         2d:f9:fb:31:d6:17:d4:42:f1:32:2f:67:70:ea:a3:84:2a:4a:
         37:28:76:be:d9:59:16:fc:b1:76:45:8d:54:27:88:64:26:98:
         cb:d7:b4:9b:6c:a8:e8:27:97:ee:6d:c4:a4:a7:a2:bd:a5:22:
         85:97:fb:43:ce:af:2d:8b:4e:be:c1:f6:ae:ce:06:18:85:7e:
         fe:e9:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:39:01 2025 by rpki-client