Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
File:                     CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json)
Hash identifier:          7wjbhPUi+3EqQfEK/vVgHaBt7nvmDnzhft7BzsQ+9vE=
Subject key identifier:   D8:5F:0F:39:A8:D8:15:9C:96:3A:F2:1B:3B:B0:D8:61:45:AA:AA:D6
Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47
Certificate issuer:       /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
Certificate serial:       019A4F629F04CF1830016411FA2A44F14193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
Manifest number:          0892
Signing time:             Tue 04 Nov 2025 15:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:54 +0000
Files and hashes:         1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: WUNptTsXK90rSNY3AipCx9l8sC7f0wYiBbly7Dh7XDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:9f:04:cf:18:30:01:64:11:fa:2a:44:f1:41:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047
        Validity
            Not Before: Nov  4 15:00:54 2025 GMT
            Not After : Nov  5 15:00:54 2025 GMT
        Subject: CN=d85f0f39a8d8159c963af21b3bb0d86145aaaad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:35:03:ed:b2:59:42:41:53:3f:84:3c:1c:ac:
                    55:56:92:7c:84:a7:89:9d:b4:d3:91:f8:99:6a:73:
                    3f:42:fe:24:55:d0:df:1c:ad:10:ae:bf:d2:c2:05:
                    d6:c0:a7:4e:51:ab:30:48:ae:8e:85:70:6a:d7:63:
                    d4:3a:04:3f:68:4a:08:57:bb:47:d6:f5:66:64:09:
                    28:8d:36:9b:bd:72:c6:e3:0e:df:5d:1e:06:55:1e:
                    ab:c5:ea:3a:c5:51:1b:16:1b:1f:7c:32:22:2b:e6:
                    4b:70:81:e7:3f:31:ce:82:b2:79:13:99:0e:a5:9e:
                    ca:e0:98:e1:06:a0:3d:06:7c:6a:2a:20:21:5c:11:
                    d8:35:9f:7b:4c:02:e9:77:6f:5a:5c:83:2d:58:81:
                    41:6c:e9:cc:9f:82:74:35:88:bb:af:13:43:f2:ad:
                    75:3b:b4:47:14:c2:da:5a:30:61:d9:fe:23:7d:ce:
                    09:ac:81:db:18:c3:35:f2:30:48:7c:e8:48:69:33:
                    c8:40:56:07:8b:22:4c:ab:c2:e2:68:a1:be:0e:d1:
                    c7:78:27:41:5e:96:8c:44:f3:76:1d:8b:f0:e0:44:
                    5c:9f:8f:d7:15:f0:27:8e:44:7c:72:eb:c2:33:27:
                    20:e6:b3:8d:85:68:8c:87:b7:24:7b:ad:73:58:e5:
                    3c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5F:0F:39:A8:D8:15:9C:96:3A:F2:1B:3B:B0:D8:61:45:AA:AA:D6
            X509v3 Authority Key Identifier:
                keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e3:b4:99:b9:03:31:91:8e:71:2d:86:ad:cf:ea:cf:6d:81:
         31:f9:f4:c5:eb:cd:e2:5c:1f:9b:91:46:74:f0:39:d2:2e:1d:
         a7:fc:41:40:2f:3c:a7:ab:e2:58:dd:31:50:f8:42:e6:32:f6:
         23:7f:08:88:4c:dd:f0:09:dc:c6:22:9e:47:00:19:a3:d1:26:
         b3:7c:e4:b2:df:4f:26:e7:68:0b:5b:e8:52:f8:e3:95:67:4f:
         cb:90:13:a2:c7:7c:f6:cf:41:84:ec:87:46:4c:60:26:7f:e3:
         94:d1:40:96:89:9c:4c:c3:9f:d8:3f:2b:93:52:21:a0:32:e1:
         20:bd:a8:c0:f5:cc:b2:0d:d2:83:61:77:a0:c2:bc:84:6f:60:
         5d:ad:fc:a7:d1:7c:39:44:1b:30:9e:38:fb:74:68:2d:32:ce:
         b0:4c:f7:b4:ed:d7:96:90:d8:95:06:97:23:df:77:30:8f:58:
         f6:88:2a:5f:32:8d:2a:9b:8b:52:7c:85:7e:46:eb:57:6a:f2:
         b4:8b:b2:47:08:c4:05:f2:6d:ec:e3:68:5b:99:24:ea:4b:2e:
         d3:8f:55:02:59:16:02:8c:89:16:ac:30:fd:ac:c8:2c:59:d1:
         16:73:74:63:66:9b:1e:1b:dc:c8:c2:8a:29:0a:3b:cf:9c:9e:
         d2:ce:02:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYp8EzxgwAWQR+ipE8UGTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTdhNzhkNmMwZjdhOTgwMTM5N2JiOWQ1MjlhODcxNTk1
YzgwNDcwHhcNMjUxMTA0MTUwMDU0WhcNMjUxMTA1MTUwMDU0WjAzMTEwLwYDVQQD
EyhkODVmMGYzOWE4ZDgxNTljOTYzYWYyMWIzYmIwZDg2MTQ1YWFhYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTUD7bJZQkFTP4Q8HKxVVpJ8hKeJ
nbTTkfiZanM/Qv4kVdDfHK0Qrr/SwgXWwKdOUaswSK6OhXBq12PUOgQ/aEoIV7tH
1vVmZAkojTabvXLG4w7fXR4GVR6rxeo6xVEbFhsffDIiK+ZLcIHnPzHOgrJ5E5kO
pZ7K4JjhBqA9BnxqKiAhXBHYNZ97TALpd29aXIMtWIFBbOnMn4J0NYi7rxND8q11
O7RHFMLaWjBh2f4jfc4JrIHbGMM18jBIfOhIaTPIQFYHiyJMq8LiaKG+DtHHeCdB
XpaMRPN2HYvw4ERcn4/XFfAnjkR8cuvCMycg5rONhWiMh7cke61zWOU8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhfDzmo2BWcljryGzuw2GFFqqrWMB8GA1UdIwQY
MBaAFArnp41sD3qYATl7udUpqHFZXIBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUt
YWMwZjk1ZDhlZjIwLzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUtYWMwZjk1ZDhlZjIw
LzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuO0mbkD
MZGOcS2Grc/qz22BMfn0xevN4lwfm5FGdPA50i4dp/xBQC88p6viWN0xUPhC5jL2
I38IiEzd8AncxiKeRwAZo9Ems3zkst9PJudoC1voUvjjlWdPy5ATosd89s9BhOyH
RkxgJn/jlNFAlomcTMOf2D8rk1IhoDLhIL2owPXMsg3Sg2F3oMK8hG9gXa38p9F8
OUQbMJ44+3RoLTLOsEz3tO3XlpDYlQaXI993MI9Y9ogqXzKNKpuLUnyFfkbrV2ry
tIuyRwjEBfJt7ONoW5kk6ksu049VAlkWAoyJFqww/azILFnRFnN0Y2abHhvcyMKK
KQo7z5ye0s4CSA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:32 2025 by rpki-client