Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
File:                     4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft (raw, json)
Hash identifier:          QZ1oXa97lqf2O1Bkky6m38+NxTR/z2gKdkWJqgTMe78=
Subject key identifier:   92:A6:66:E9:2A:EF:AC:ED:49:DB:B5:BA:1C:81:2C:7B:0D:55:C0:58
Authority key identifier: E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46
Certificate issuer:       /CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
Certificate serial:       0199FDD9D26455C6DA6F38FD792987217421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
Manifest number:          016F
Signing time:             Sun 19 Oct 2025 19:02:14 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:14 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:14 +0000
Files and hashes:         1: 4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl (hash: 9DGuOZ60rL1ne2jgFSWEzDtbPfpX6wgI/NWHkVcGyEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:d2:64:55:c6:da:6f:38:fd:79:29:87:21:74:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2ff4c4e238106dc5f296e26a9cecf3c4a435546
        Validity
            Not Before: Oct 19 19:02:14 2025 GMT
            Not After : Oct 20 19:02:14 2025 GMT
        Subject: CN=92a666e92aefaced49dbb5ba1c812c7b0d55c058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7a:bf:2d:30:9e:0c:92:00:0c:f6:d2:df:86:
                    df:e3:3f:80:b2:5e:39:a8:9a:67:02:64:eb:e8:4a:
                    8e:d1:43:1f:14:5c:e2:99:1e:19:32:d9:c0:06:9b:
                    ff:d4:67:3d:37:ca:32:88:d4:b8:87:8b:73:7b:e4:
                    e0:96:00:21:e9:a3:c9:3d:54:c3:59:42:42:2c:0a:
                    81:04:04:88:74:c5:eb:ba:11:5e:b6:57:c0:99:c2:
                    86:27:10:22:fe:79:31:22:94:23:48:a2:a6:3e:7c:
                    9e:eb:15:68:f1:27:97:61:c7:76:e0:c7:74:d2:65:
                    fc:97:a8:28:14:4e:16:be:73:e8:ca:cc:6e:80:ea:
                    43:b6:9e:53:d5:52:6a:0d:6f:e6:9c:b7:0b:6a:73:
                    3f:61:8c:e6:a3:6b:65:aa:77:93:6c:2b:59:6d:c5:
                    4d:6d:19:4d:14:4f:75:3f:16:10:94:f1:80:56:de:
                    68:ba:97:fb:9b:58:41:8a:7d:72:13:b7:67:3d:55:
                    1a:e6:4a:a1:c5:29:53:a4:6c:a5:16:7d:65:cf:37:
                    92:2e:17:46:89:3a:2e:7d:aa:dc:5e:54:af:c1:2b:
                    ef:3f:0a:df:30:2e:bd:93:34:e6:2d:f0:0b:df:32:
                    e1:51:8d:95:32:0c:d9:c3:a9:5d:c9:20:70:f6:3b:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A6:66:E9:2A:EF:AC:ED:49:DB:B5:BA:1C:81:2C:7B:0D:55:C0:58
            X509v3 Authority Key Identifier:
                keyid:E2:FF:4C:4E:23:81:06:DC:5F:29:6E:26:A9:CE:CF:3C:4A:43:55:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4v9MTiOBBtxfKW4mqc7PPEpDVUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d86137-a8c8-4a62-87c9-23ef6cee5edf/1/4v9MTiOBBtxfKW4mqc7PPEpDVUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:44:d9:5c:e9:aa:11:b4:3c:93:8c:25:b5:25:cf:7d:0f:9d:
         f8:75:48:58:c3:a5:ec:d8:0c:12:81:aa:b7:ed:83:cc:d2:3a:
         85:30:6f:8d:55:85:b8:be:49:e6:e7:bf:bd:69:7d:f5:65:54:
         04:74:43:10:0f:94:60:ba:09:ba:e1:a8:e6:6f:41:fe:86:00:
         a7:b1:83:fd:a6:77:89:d1:6d:bb:ac:e7:a3:79:14:b3:ce:8a:
         af:89:ac:6f:1c:c6:c3:a0:1d:4f:6d:3d:2c:0f:2f:c8:db:7a:
         a7:a3:6f:41:ff:39:8e:9e:0d:1f:43:d2:05:f9:39:e6:7f:9d:
         b7:ad:2c:fc:91:75:07:07:94:eb:e2:24:03:5d:bf:08:2d:3d:
         d5:20:1f:35:5a:d8:8a:29:1f:92:d7:91:ff:1a:9f:76:2d:a5:
         b0:4e:99:8b:a7:12:28:f1:4a:96:34:a3:d7:e9:03:e7:53:7f:
         eb:77:b6:6f:6d:a8:80:ff:4c:a7:53:5c:7d:4b:71:84:84:04:
         aa:83:61:0a:19:0d:29:89:4b:0e:69:f8:0c:46:42:7f:3d:98:
         57:4d:56:b7:79:80:52:af:87:1c:22:57:e9:8b:5d:9a:05:e7:
         fb:8d:ee:cc:e4:06:b6:a6:02:81:d6:fe:52:76:c8:57:a5:59:
         aa:60:e5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:43 2025 by rpki-client