Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          Iadrt3075VBS4LdWjvwBg7PuCvhUa5B6jviaeKQPsIE=
Subject key identifier:   3C:F2:1D:C5:E4:2D:EE:5F:7B:2C:B8:2F:C0:3E:1F:C7:E4:AB:B4:FC
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       0199FC219310AE26C302F257E853B48127AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 11:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:22 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: Z/N2u0I3ZdTUjOQyT+FzgfKbJE47mW487gYPOIBCPME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:93:10:ae:26:c3:02:f2:57:e8:53:b4:81:27:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Oct 19 11:01:22 2025 GMT
            Not After : Oct 20 11:01:22 2025 GMT
        Subject: CN=3cf21dc5e42dee5f7b2cb82fc03e1fc7e4abb4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:90:fb:8b:c5:4b:76:3d:7a:fc:e8:8a:56:
                    42:a5:1a:2f:a9:5d:2f:38:27:92:7f:6c:ee:33:51:
                    f1:99:ab:1a:2c:0e:fa:e4:b0:86:90:83:32:22:da:
                    e9:ec:0c:d2:ae:51:b4:27:49:99:5c:38:88:37:7b:
                    1a:32:5e:8d:91:6f:f2:bc:15:08:ff:33:4a:49:92:
                    31:03:10:1f:31:f3:18:93:74:2e:bd:6e:74:9b:53:
                    38:b2:6c:6f:73:e8:43:49:f0:db:2e:00:65:68:9b:
                    ae:4c:d9:25:df:37:8f:bc:59:4e:9b:f3:54:44:62:
                    4a:13:d9:9c:16:4d:bf:7e:fe:b1:eb:ab:0f:12:3a:
                    60:56:be:0e:53:b8:5d:03:62:b3:79:78:58:73:e3:
                    db:46:d2:9a:fd:65:1b:e9:80:59:24:17:97:31:a4:
                    3f:da:0f:8a:60:65:be:72:ab:6c:d7:3d:df:d1:1a:
                    c3:82:a4:fa:99:24:4a:88:16:13:90:81:99:e4:4d:
                    2e:12:e1:09:b9:bf:cb:40:44:4e:9f:af:11:47:9d:
                    f6:1c:05:a1:8c:c2:66:69:f3:4c:06:eb:1e:19:86:
                    59:7c:84:49:a2:3f:89:3f:89:d6:5a:df:4c:9b:35:
                    a0:72:3b:90:49:9e:5a:fc:df:10:7e:6c:b4:80:e8:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F2:1D:C5:E4:2D:EE:5F:7B:2C:B8:2F:C0:3E:1F:C7:E4:AB:B4:FC
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:62:91:f1:4a:25:6f:94:6f:c9:7e:e0:71:c4:65:f9:26:b1:
         3b:a9:c5:6b:b0:96:89:78:02:d5:91:4b:80:d7:69:8b:33:49:
         d2:11:c3:f1:5b:69:0e:a6:45:74:0f:1a:1e:51:e3:79:e3:ed:
         5c:2b:00:42:26:ef:0e:16:42:e4:f4:bd:b2:d5:74:86:74:6c:
         d4:a2:af:53:e2:ac:7e:c9:72:24:a8:a5:3f:cd:63:bd:40:46:
         43:01:60:ea:c9:f2:1c:b0:51:0f:00:2b:5b:e6:a5:71:6b:3a:
         9a:3b:e4:c5:c3:0a:1d:16:bd:2c:1f:d1:7b:3c:9b:22:76:26:
         28:db:2c:ca:a3:94:a7:8c:ff:1c:b1:3e:bd:bc:6b:6e:49:58:
         17:8f:f6:b4:5a:a7:f5:c2:7c:ec:36:26:6c:25:d0:3d:24:da:
         ae:a6:25:9d:61:85:bd:44:12:51:b6:4a:7d:c0:45:64:32:ee:
         18:75:06:2a:6e:8c:0a:c6:e0:ec:51:1e:99:5a:99:a6:e9:38:
         37:7d:49:bf:88:5c:5d:07:cf:0e:b6:3c:a9:be:57:5a:09:cf:
         88:44:a4:50:c1:bf:c8:2f:91:53:69:11:ad:e7:e3:07:7c:fd:
         25:32:e3:78:19:69:e3:62:bb:5f:35:63:79:08:2c:fa:23:64:
         e8:c4:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:36 2025 by rpki-client