Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
File:                     XOackdRTOWv6Fm8FG_jwbAOghcs.mft (raw, json)
Hash identifier:          8IrqR29oLT9zefYoXQOLivv67DVe0N8xdDhIlvkVgpo=
Subject key identifier:   7B:91:6C:8F:81:E7:AD:50:BA:8F:FA:DE:84:BF:7C:2E:9B:3E:7E:2B
Authority key identifier: 5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB
Certificate issuer:       /CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
Certificate serial:       0199FBEB8B46B778E5BCB4503833B09BDB0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
Manifest number:          0BEE
Signing time:             Sun 19 Oct 2025 10:02:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:21 +0000
Files and hashes:         1: XOackdRTOWv6Fm8FG_jwbAOghcs.crl (hash: zp7yN30qqRxi5k4Mx+0JKpFxfKZgXauPkntbJmL6Dv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:8b:46:b7:78:e5:bc:b4:50:38:33:b0:9b:db:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce69c91d453396bfa166f051bf8f06c03a085cb
        Validity
            Not Before: Oct 19 10:02:21 2025 GMT
            Not After : Oct 20 10:02:21 2025 GMT
        Subject: CN=7b916c8f81e7ad50ba8ffade84bf7c2e9b3e7e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:77:ba:f0:87:c9:ee:43:40:90:4e:0c:c7:
                    f3:52:a6:15:d5:f6:6d:6a:bb:22:c8:a0:c3:84:31:
                    e5:fd:80:ac:72:06:32:a3:39:f0:8d:1a:1a:ca:68:
                    ca:33:1e:b5:9c:fa:a4:96:10:6d:8e:6f:3b:52:9f:
                    49:18:c1:cf:80:ee:b6:3f:22:fa:c9:5a:04:37:81:
                    97:6e:86:91:66:55:b7:26:d6:61:0b:3c:1f:41:0e:
                    85:8d:64:2a:8d:b1:9c:1d:a4:0e:74:5f:4a:90:30:
                    f6:e3:74:67:60:48:51:26:5f:be:88:5f:a8:c8:cc:
                    7f:cc:6a:37:d1:16:99:be:52:2d:c9:4a:a5:8e:ee:
                    71:88:55:cb:12:da:b1:45:ef:9a:26:46:30:58:a4:
                    a8:19:9d:24:90:0a:d3:2a:4c:d4:03:3a:52:c8:7c:
                    39:f8:4b:93:14:c6:6d:0a:7f:47:49:fe:61:39:11:
                    33:60:2f:37:3b:c4:c3:70:38:2d:e0:36:d3:2e:6e:
                    89:7f:14:68:81:6e:a8:00:af:61:0f:3f:b0:0e:3d:
                    2f:ec:15:21:59:ca:18:7e:f1:61:e1:c3:5c:01:a5:
                    1e:9a:9f:fd:e0:cb:9d:70:e2:bd:9d:15:46:ea:43:
                    c8:62:c9:96:2a:19:f9:12:eb:01:55:bb:ce:f7:db:
                    e6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:91:6C:8F:81:E7:AD:50:BA:8F:FA:DE:84:BF:7C:2E:9B:3E:7E:2B
            X509v3 Authority Key Identifier:
                keyid:5C:E6:9C:91:D4:53:39:6B:FA:16:6F:05:1B:F8:F0:6C:03:A0:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOackdRTOWv6Fm8FG_jwbAOghcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/6e6dd8-1bca-4630-9574-a597ee637db4/1/XOackdRTOWv6Fm8FG_jwbAOghcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:9a:b9:1e:b9:fc:5a:2e:6d:46:34:3d:14:4a:4e:c4:af:ea:
         bc:ec:7c:e0:6f:e5:a4:7d:23:27:be:36:a0:4d:4a:e1:5f:77:
         34:1d:95:f9:f8:84:ad:c9:3e:d5:a9:3c:57:43:6e:e9:1d:18:
         35:fe:02:12:c3:1a:2a:ed:a7:8c:8d:75:3c:b0:95:d3:59:36:
         b2:dc:05:0e:0c:5b:da:b5:ad:26:04:cb:5e:43:2d:de:fe:61:
         74:4f:c4:40:7e:a8:f0:0f:27:1f:29:a1:b9:8e:f8:b2:e6:97:
         29:22:a8:b2:06:32:57:bb:8a:cb:52:43:93:d5:75:45:aa:98:
         fe:2e:16:61:81:aa:e5:20:d8:bf:3f:f2:3b:50:f7:98:ba:58:
         9a:5a:05:4d:49:f2:a2:32:ad:16:84:c1:fc:f2:64:72:06:b1:
         72:6d:ea:bf:73:e2:e5:cf:f9:ec:da:b7:bc:cf:83:90:ca:20:
         87:5b:6c:8a:79:62:ed:23:a3:37:51:fb:3a:08:7e:98:31:31:
         1b:b2:c5:6c:7f:27:33:27:7a:2d:7c:bc:7b:c5:f5:de:ae:0c:
         11:05:b9:0c:3c:d9:09:03:24:5d:76:00:f2:2b:1b:02:b8:19:
         b4:bd:db:3d:f0:ca:a4:09:93:51:35:0f:23:2b:9b:43:ef:18:
         2a:33:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:15 2025 by rpki-client