Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
File:                     eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json)
Hash identifier:          9XA5LSdajqds0Xj9/i0GPXsuIdY21KnRg5T27JEG+x8=
Subject key identifier:   79:60:45:76:E8:61:15:6B:01:3D:B1:ED:74:37:85:A5:2D:9A:18:22
Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C
Certificate issuer:       /CN=78d403d938d71bdc5a3acb076d32af8283be627c
Certificate serial:       019A4EF40D7DF4C21C9C33454B2DE2D09DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
Manifest number:          082A
Signing time:             Tue 04 Nov 2025 13:00:08 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:08 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:08 +0000
Files and hashes:         1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: s/RUIHZER9Xk9yb+CZFCU7EknHWzFmKcxF0fzxxAutY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:0d:7d:f4:c2:1c:9c:33:45:4b:2d:e2:d0:9d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c
        Validity
            Not Before: Nov  4 13:00:08 2025 GMT
            Not After : Nov  5 13:00:08 2025 GMT
        Subject: CN=79604576e861156b013db1ed743785a52d9a1822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5f:9c:a2:1a:07:65:5c:1b:de:25:75:cd:f9:
                    91:35:4d:3c:5f:be:ea:74:f6:bc:44:26:d5:25:b0:
                    09:1a:de:e4:8d:4b:7e:4b:64:09:31:45:1e:5a:99:
                    8e:7a:17:28:10:e2:d8:4d:c1:ef:9c:c3:39:7d:0a:
                    48:28:fb:e8:2b:e8:d9:db:d7:db:7f:39:dd:c9:cc:
                    a2:01:93:e8:ff:7f:ac:de:fa:8a:24:3d:55:e6:48:
                    57:40:22:1a:84:7b:eb:ec:de:48:ea:0b:6b:03:42:
                    a0:85:8d:68:2d:87:b6:6e:53:7c:49:7b:5e:e5:fc:
                    ba:a0:46:36:9a:80:bb:b3:cb:8b:a8:0d:52:07:35:
                    dd:d9:7c:48:05:1b:3b:7b:65:f3:80:26:ed:6f:e5:
                    36:ed:9e:cf:c5:b7:63:08:20:60:32:89:31:32:64:
                    96:08:db:0f:3d:29:41:5e:29:34:d5:96:3c:72:eb:
                    22:36:02:3d:8e:57:8f:c6:bf:3a:64:dc:31:cf:dc:
                    58:0f:d6:10:dc:ec:1c:b5:b0:2c:d4:27:d1:83:4e:
                    70:80:dd:a0:40:b3:41:e2:55:1e:1b:a0:a7:7e:68:
                    c9:cf:23:8f:8e:6a:79:3c:14:9c:de:eb:1e:d0:03:
                    3c:2c:71:47:83:da:e5:f7:91:22:8d:98:40:5f:68:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:60:45:76:E8:61:15:6B:01:3D:B1:ED:74:37:85:A5:2D:9A:18:22
            X509v3 Authority Key Identifier:
                keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b0:39:8b:b3:a8:b4:0d:77:ef:db:65:1d:1d:e9:b2:76:80:
         b4:10:6d:5b:4d:06:32:9f:9d:9e:3d:94:51:08:aa:04:b4:3e:
         5e:f8:cb:4a:8a:46:22:24:aa:93:dd:cf:56:64:2d:4e:2a:fd:
         4d:27:b1:7e:5f:7d:b8:5e:27:88:75:dc:46:80:2e:f8:ec:9b:
         b0:d4:d5:0d:ee:3d:53:3f:8e:d3:7a:30:ed:5f:ca:f5:cd:30:
         9e:3f:48:38:16:d0:fb:c9:3e:66:32:4e:b9:dd:b2:16:34:66:
         95:4f:d9:f6:9d:ed:33:99:36:c9:5f:87:e6:15:3e:1e:2a:88:
         ef:7e:de:3b:f2:f7:10:0d:9a:06:ae:0c:ff:c0:10:29:1f:a2:
         f6:f5:04:b5:b7:c9:ee:43:8d:d9:1b:cf:68:3d:6e:67:f2:9c:
         4d:9c:37:49:bd:5c:7f:59:b3:f9:d1:5a:8a:14:5d:ed:92:30:
         7f:61:76:0c:5f:10:77:1f:0f:70:06:cd:14:b8:1c:d7:fc:66:
         65:3d:8c:c8:87:d0:f5:84:25:d6:eb:54:35:98:0e:65:64:10:
         71:09:dd:67:41:07:fa:a0:9b:38:d7:ab:f0:ee:68:b3:94:53:
         11:8f:20:5d:ab:9b:0b:55:81:6d:6a:53:b7:67:85:cd:3b:32:
         16:e1:d1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:07 2025 by rpki-client