Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File:                     jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier:          ogQpwea8893oqDgiF7r2t53BTyVpobZrBtLyN7awKV0=
Subject key identifier:   55:FB:4C:83:F7:7B:94:FE:EC:FC:47:78:D6:FE:6D:68:FF:6A:4D:AF
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer:       /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial:       0199FBEB1311451078DBF135B1F5DE25F81C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number:          0EB6
Signing time:             Sun 19 Oct 2025 10:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:51 +0000
Files and hashes:         1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: mjoguDWV5mlv0hEiDIkNQl+dGML4c/4lxgmIDTGP8A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:13:11:45:10:78:db:f1:35:b1:f5:de:25:f8:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
        Validity
            Not Before: Oct 19 10:01:51 2025 GMT
            Not After : Oct 20 10:01:51 2025 GMT
        Subject: CN=55fb4c83f77b94feecfc4778d6fe6d68ff6a4daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:91:f5:9c:5a:80:c9:ac:25:14:a2:0f:b0:
                    da:4d:a0:62:38:16:1c:a4:68:7b:36:23:e1:29:77:
                    76:7d:ef:47:98:83:18:11:aa:d5:90:86:7e:31:d5:
                    b5:d2:40:c7:47:42:03:be:9e:94:c8:35:fb:22:7d:
                    b4:04:c6:47:26:99:1e:13:3b:74:1d:db:9f:83:69:
                    e0:65:de:04:05:d5:29:e2:b9:67:94:e7:d9:66:46:
                    1d:44:5e:50:46:cb:59:50:2a:d4:22:d6:da:53:e9:
                    9a:7f:42:df:52:8b:0a:e4:d2:43:3f:c8:da:ab:e8:
                    f3:ae:5f:24:76:eb:7d:2a:a1:ef:3e:2e:ee:d0:66:
                    fe:35:2c:1f:dd:77:7f:76:20:6d:ea:9e:cb:f1:de:
                    4f:b8:ed:60:fa:34:e3:f1:3f:eb:0b:e5:ff:73:9c:
                    41:24:b1:c6:d6:52:2a:52:1c:39:ef:9a:52:95:f2:
                    ac:c6:b5:8d:1e:ad:08:94:b9:02:2d:7f:84:16:86:
                    a4:1d:82:aa:69:fc:b9:fb:c3:2c:cb:95:61:6d:97:
                    f2:8b:e5:13:42:8e:73:8e:98:70:e8:dd:08:f9:cf:
                    65:0f:71:45:e6:96:11:e2:53:9c:6b:68:89:a6:18:
                    42:f6:2c:45:b7:45:ca:a2:e7:3e:0f:70:0d:30:21:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FB:4C:83:F7:7B:94:FE:EC:FC:47:78:D6:FE:6D:68:FF:6A:4D:AF
            X509v3 Authority Key Identifier:
                keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:50:97:9f:51:dd:c8:82:3e:78:ba:23:68:05:94:53:2d:aa:
         ec:62:07:2b:ad:5a:e2:32:81:ad:90:91:ea:49:b7:49:07:5b:
         75:04:0a:6e:42:35:a2:b6:74:bd:61:b6:be:fa:a2:ce:e7:12:
         5d:bb:e7:7d:b9:b2:b5:b9:61:eb:bb:71:24:d6:51:45:76:18:
         78:d3:e3:2e:37:d8:5d:c4:7d:b3:6b:45:4d:1f:65:6b:fb:75:
         58:7d:28:c7:25:5b:3f:7f:96:1b:80:89:70:78:23:6c:94:b8:
         81:c3:24:dc:fc:00:ba:9a:31:e7:6b:30:a7:17:17:75:71:e1:
         2a:42:36:6a:2f:2c:f0:8b:a5:e6:f7:4d:83:8e:4e:4d:89:20:
         16:73:ae:be:65:08:47:7b:c9:c1:d2:48:63:36:3b:2e:2e:8c:
         ee:05:4a:7d:54:c2:67:01:14:26:45:ca:cf:dc:6c:92:2b:53:
         6b:b2:a6:c0:ef:d1:05:24:5c:ba:fa:7e:81:84:58:0e:6a:aa:
         1f:06:c9:3f:c0:08:a7:28:97:dc:12:7c:74:76:5b:65:3b:1a:
         31:d1:58:5d:ed:a7:13:0f:d2:2d:20:ae:79:57:74:9d:83:f1:
         1b:02:b4:f3:95:db:1b:07:15:5a:5e:4e:20:93:6c:ff:ef:3c:
         11:ca:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:20 2025 by rpki-client