Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
File:                     639rU_mItXcyDvKJM4Cl6oJLauQ.mft (raw, json)
Hash identifier:          6Qe9f3QMsuJK1XrfRfptvSI9WMHf1XCNGu5PFjpBL2A=
Subject key identifier:   68:77:B9:D4:20:D0:D1:44:D4:F7:34:93:2B:0B:B9:6F:BF:07:0C:D0
Authority key identifier: EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4
Certificate issuer:       /CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
Certificate serial:       0199FDDA279C5D719D93E5F546DCC7D3F814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 19:02:36 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:36 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:36 +0000
Files and hashes:         1: 639rU_mItXcyDvKJM4Cl6oJLauQ.crl (hash: Zl1S1fGr4Jk1CObCPbW0lZQYLTfazapktUqqEDY4aoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:27:9c:5d:71:9d:93:e5:f5:46:dc:c7:d3:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7f6b53f988b577320ef2893380a5ea824b6ae4
        Validity
            Not Before: Oct 19 19:02:36 2025 GMT
            Not After : Oct 20 19:02:36 2025 GMT
        Subject: CN=6877b9d420d0d144d4f734932b0bb96fbf070cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:47:d3:39:10:c7:e3:da:33:a8:c9:64:a5:
                    f2:fa:92:42:e6:44:96:9e:05:f1:7c:b1:60:50:ce:
                    d8:5b:88:7a:ed:15:67:66:ef:03:95:69:1d:a4:fa:
                    e3:6b:2c:b7:87:e3:fe:10:10:dc:a6:fa:c2:d9:b0:
                    30:d2:eb:71:c4:c6:b0:9c:fb:52:07:a2:a9:9a:c3:
                    7e:59:27:c4:f0:63:86:5d:24:a1:3f:44:76:93:91:
                    54:6e:e9:cf:75:39:8a:75:50:0c:b1:fc:d3:f3:c7:
                    36:0c:f7:63:91:91:2e:24:6d:a6:2a:af:81:79:3d:
                    64:06:08:37:7e:aa:4c:80:02:41:38:bc:51:ac:9b:
                    f0:43:bd:04:49:63:96:a5:f9:be:d5:69:78:7b:87:
                    7c:ad:ff:bb:64:a9:91:b6:7d:88:de:61:1d:d2:0a:
                    58:cd:46:68:77:8b:11:ed:54:ef:ed:05:96:42:56:
                    7f:8b:32:19:d1:6b:ea:bd:67:63:db:b0:b1:5d:c6:
                    1f:e7:36:8f:42:6e:3f:02:80:00:b5:28:ef:9c:e5:
                    9e:20:39:6b:9f:98:2b:f8:06:52:22:40:60:09:39:
                    b8:a3:72:6e:d2:d5:2b:f3:5a:3d:48:81:fb:d1:7a:
                    66:de:a8:e3:ab:ae:2b:54:bc:b8:51:bc:75:65:ef:
                    1f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:77:B9:D4:20:D0:D1:44:D4:F7:34:93:2B:0B:B9:6F:BF:07:0C:D0
            X509v3 Authority Key Identifier:
                keyid:EB:7F:6B:53:F9:88:B5:77:32:0E:F2:89:33:80:A5:EA:82:4B:6A:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/639rU_mItXcyDvKJM4Cl6oJLauQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ffacee-09cc-41cb-9362-02f3013d91a9/1/639rU_mItXcyDvKJM4Cl6oJLauQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:d9:c4:87:ec:cb:f9:e0:df:6b:4b:83:6f:a0:51:06:4e:4a:
         70:17:e3:f7:a4:53:82:e4:73:14:2e:9b:d0:f2:6c:f0:ef:bf:
         20:13:da:06:93:00:77:8b:cb:e9:35:8a:6c:3a:b1:e5:f6:4f:
         b8:b3:91:89:d0:a2:d7:cc:5e:2f:e1:a6:ed:a4:af:bf:6a:93:
         1c:0e:91:f2:50:c1:2a:68:5f:8b:31:b2:06:8c:b9:23:52:2f:
         30:76:6b:b1:d6:b7:4c:29:0e:63:44:e6:f8:d6:e5:e8:2b:49:
         99:c6:0d:dc:f0:27:be:5d:af:7c:ab:9c:89:35:e5:3b:6f:59:
         89:d1:83:28:dc:be:bc:82:74:2b:b7:e5:1f:62:86:5f:df:6c:
         bb:44:62:ec:7c:53:77:2f:93:92:4d:f3:c2:31:d5:1d:74:b1:
         11:82:d8:1d:00:c4:d7:c3:2e:46:11:82:63:ce:a5:0d:b9:ad:
         25:17:85:dc:f9:c4:1a:75:08:6f:51:38:cc:3a:f0:bf:80:49:
         23:48:e7:b0:2d:b0:12:53:b3:1d:43:6d:9c:74:c5:bf:57:25:
         89:9d:a0:63:9c:95:8e:7b:67:43:ea:4d:11:5e:a3:02:6c:68:
         d7:41:1f:fb:38:e0:ab:be:14:3c:1c:d3:97:6c:99:a2:d6:93:
         19:e2:13:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:00 2025 by rpki-client