Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
File:                     CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json)
Hash identifier:          klRxexAvqSN2wRWPAhmgxtoL4JKEU/akDFnmRRID7/8=
Subject key identifier:   BA:B5:64:49:76:91:8A:5F:22:02:0C:23:66:98:7B:E4:FA:81:D9:B0
Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D
Certificate issuer:       /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
Certificate serial:       0199FCFD982D356B4B0A174FB97E6720C3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
Manifest number:          0481
Signing time:             Sun 19 Oct 2025 15:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:41 +0000
Files and hashes:         1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: hWRx8pvztMxVucArWT5Mcx5AIvlZSyA91ZHEqljW+0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:98:2d:35:6b:4b:0a:17:4f:b9:7e:67:20:c3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d
        Validity
            Not Before: Oct 19 15:01:41 2025 GMT
            Not After : Oct 20 15:01:41 2025 GMT
        Subject: CN=bab5644976918a5f22020c2366987be4fa81d9b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fe:6a:d8:75:1d:99:19:e1:0c:c6:f0:b9:78:
                    b3:da:3c:cf:21:e6:63:f0:cf:60:5a:14:9b:1f:3a:
                    b7:6e:ee:29:77:42:ff:e0:87:75:3d:e9:2a:79:4c:
                    a5:fc:48:e3:cf:0f:3d:a3:7a:28:9a:ee:81:26:e1:
                    ed:d0:c2:58:3d:1a:52:b6:e0:38:55:89:2b:4b:07:
                    bc:23:68:fa:ee:95:e6:96:6d:1f:86:2e:86:14:3b:
                    10:34:1f:da:fe:7d:0e:11:c1:a6:68:6b:e3:ec:30:
                    47:c8:78:f1:74:33:04:d4:21:75:d2:c1:25:df:0e:
                    3e:81:11:79:7a:15:2c:a3:31:58:d7:92:9f:93:9e:
                    89:99:13:52:c2:65:ac:16:a2:35:39:e4:67:f6:5a:
                    17:dd:88:77:27:28:a2:09:bc:1a:bc:ae:2a:6f:d5:
                    50:c6:0d:91:54:1c:a2:f5:33:a0:4d:51:f6:00:a9:
                    da:db:61:c4:08:af:5e:3b:21:eb:24:58:be:72:84:
                    87:a1:48:f9:5a:c1:20:b4:e8:05:b5:a2:17:32:8d:
                    39:da:81:68:56:a3:b6:6b:76:a9:48:c9:63:40:c3:
                    3d:48:e8:9a:c1:a4:75:f5:f7:65:de:a0:c8:3e:ef:
                    21:45:a8:ec:eb:a3:f6:de:cb:f6:59:19:0c:94:9b:
                    81:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B5:64:49:76:91:8A:5F:22:02:0C:23:66:98:7B:E4:FA:81:D9:B0
            X509v3 Authority Key Identifier:
                keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0e:36:fc:98:ed:d7:09:09:29:43:6b:78:ee:16:25:a5:b2:
         29:9f:0d:c0:98:ff:70:fd:af:9e:61:ab:d0:85:03:55:9c:04:
         58:45:0e:e3:c5:89:74:ee:d2:7c:91:74:66:5c:6b:e1:41:79:
         8f:6d:cb:f5:23:5b:24:b1:7d:d3:97:07:ce:ac:c1:f4:91:e1:
         bd:3e:3e:48:b7:9d:97:9a:15:5e:49:6e:15:11:27:0b:5d:d2:
         c6:0c:8e:62:34:2f:67:d1:a7:0c:9a:8d:ae:55:1b:20:4f:fb:
         8e:36:c8:56:7f:74:4d:20:d0:88:a9:61:96:1e:d2:03:4d:e4:
         76:eb:33:5e:03:2f:67:64:0b:cb:dc:e0:a4:76:5e:2a:39:f3:
         a5:62:23:54:cd:58:0e:0c:56:c3:17:c2:93:03:84:bb:70:6a:
         0e:81:fc:62:f3:fe:99:a6:57:47:43:b8:eb:ba:40:41:5c:f7:
         84:db:b1:ab:0a:df:55:9a:59:82:6c:35:30:db:c0:2f:51:65:
         db:e5:54:63:c6:0a:61:c5:43:b1:58:fa:ee:e0:a6:eb:1e:a6:
         19:ff:27:d1:4f:81:36:77:3c:28:c8:cc:30:1b:a7:53:19:90:
         1f:5b:2a:58:0c:94:61:fe:91:db:17:e8:b3:4b:af:61:87:ba:
         99:92:bb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:26 2025 by rpki-client