Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File:                     4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier:          0javirn6dKnLg6FXE19mt2/TjgldgQ7Kj7NqS9IXUAk=
Subject key identifier:   61:09:C2:75:BA:56:B1:0A:69:4D:C5:2E:C4:F0:9F:DC:B0:2A:7A:FF
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer:       /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial:       0199FBEAACE411566C8425A1322BA455FE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number:          0816
Signing time:             Sun 19 Oct 2025 10:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:24 +0000
Files and hashes:         1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: YE0dd0ipLbdL7uAqxonjYnmXhuTdlamkCMg28Ey7p/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:ac:e4:11:56:6c:84:25:a1:32:2b:a4:55:fe:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
        Validity
            Not Before: Oct 19 10:01:24 2025 GMT
            Not After : Oct 20 10:01:24 2025 GMT
        Subject: CN=6109c275ba56b10a694dc52ec4f09fdcb02a7aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e6:fc:63:e8:4a:f1:a1:4e:73:23:35:01:97:
                    ec:0c:d1:a0:60:5d:51:28:0a:07:47:f2:25:e7:0a:
                    4e:41:57:7c:d8:92:81:c2:5d:2e:13:b0:bc:93:48:
                    3f:5a:84:6e:03:18:e4:3f:a6:fd:62:9d:65:c0:47:
                    ec:64:37:22:46:52:93:5d:75:82:bc:07:8c:0d:4a:
                    5b:62:04:dd:ef:2a:c2:57:99:66:ab:b9:c9:6c:4e:
                    04:d0:fd:5c:23:74:42:c3:9e:c2:0c:fe:b2:0d:d0:
                    e8:8a:ef:e7:b5:66:32:91:f6:fa:3f:86:f6:ed:e9:
                    4f:d4:7e:4c:63:cb:d8:3b:ea:8c:b4:38:62:9d:0e:
                    02:ea:c8:97:36:7b:bb:f7:3d:5a:43:89:c9:b6:ab:
                    5f:0f:69:c3:cc:e2:6e:ee:1d:2b:e7:46:f3:24:f4:
                    05:fa:5b:64:8e:23:04:38:92:08:a3:3e:1a:99:12:
                    12:5c:11:b7:18:11:5d:7d:45:2c:26:f2:5e:d7:f2:
                    ba:e1:a4:c5:d4:60:8c:2f:04:6d:28:3f:2c:5e:26:
                    3e:a6:17:33:7a:d0:be:e9:b4:e1:93:62:81:64:07:
                    2c:26:6f:3b:93:a2:b5:b7:6d:33:03:40:e4:ca:32:
                    fc:ca:a5:4b:e2:6b:08:0a:26:bb:6c:19:43:5a:df:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:09:C2:75:BA:56:B1:0A:69:4D:C5:2E:C4:F0:9F:DC:B0:2A:7A:FF
            X509v3 Authority Key Identifier:
                keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:98:89:af:03:e1:b9:c4:2d:f2:e8:51:2c:02:ff:32:e1:3c:
         32:58:1d:b3:0e:9f:91:70:03:ed:94:f4:0d:e6:3a:c0:88:d1:
         92:4c:d8:0d:10:dc:f5:f8:77:4f:0d:64:13:ae:24:c6:b4:d2:
         9d:67:7f:ac:57:0f:c2:a6:ce:af:95:21:c6:b3:0a:a6:a5:d2:
         68:ba:4d:c2:2a:b9:51:62:f2:d2:45:1b:5c:9a:88:9e:06:37:
         44:72:30:94:b1:e5:4d:4c:d1:fd:44:ff:58:d7:16:d5:12:b6:
         ff:a7:11:64:2e:b0:87:0f:07:17:34:d9:98:0b:b6:38:fe:9d:
         44:9b:5d:2f:b6:ac:b5:0c:7b:78:50:1b:d3:33:29:ee:7f:ce:
         31:5d:1f:04:e1:57:e7:a3:41:1c:5a:4f:b6:09:f0:10:e1:e2:
         c0:6f:10:41:3b:5e:17:5f:2f:8c:36:42:9d:6b:9b:d5:c1:aa:
         b7:51:79:45:21:57:be:dd:9f:fc:d6:be:00:54:6a:94:a8:96:
         a9:e3:56:e3:6d:df:cd:c2:0f:f6:3b:d8:ad:35:34:f6:58:9e:
         d9:cc:00:55:80:f3:3a:c9:0a:18:91:c9:0d:05:b7:a6:11:30:
         f9:77:6f:f7:d5:57:82:1c:3c:b9:49:eb:d4:e2:5b:23:d2:57:
         e7:1e:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:47 2025 by rpki-client