Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File:                     CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier:          0/KYjhkt/lvbFb1AB/XQZmtLtuJQiu6Daq+2EMe/3Co=
Subject key identifier:   FB:5D:50:4B:32:33:42:FE:86:FB:E6:89:AA:31:94:1A:47:44:C9:49
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer:       /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial:       0199FFC83173CCFBDB0B4F61E4BC16152D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number:          16E0
Signing time:             Mon 20 Oct 2025 04:02:13 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:13 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:13 +0000
Files and hashes:         1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: RjBrAA1g3ycrIvl4TAfofgwz7zIRtsXKOXIJb6UTF+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:31:73:cc:fb:db:0b:4f:61:e4:bc:16:15:2d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
        Validity
            Not Before: Oct 20 04:02:13 2025 GMT
            Not After : Oct 21 04:02:13 2025 GMT
        Subject: CN=fb5d504b323342fe86fbe689aa31941a4744c949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9b:4d:92:bf:f3:d5:6e:f1:33:45:86:aa:a9:
                    70:8c:2e:ef:46:c2:81:5b:7f:f1:ba:9c:88:d4:9f:
                    3d:56:27:64:36:21:6a:54:20:29:83:e6:46:cd:1d:
                    17:68:18:7f:23:8d:c0:60:f8:f0:16:87:df:33:66:
                    6d:03:73:18:11:d3:b4:95:45:e1:54:57:c6:e6:ee:
                    db:a1:25:56:d7:42:08:5e:bf:32:58:e1:48:36:d0:
                    aa:e8:d3:45:46:38:e3:b9:4c:d9:0d:87:f4:5c:60:
                    dd:fa:c6:07:d8:df:17:24:2d:e0:ff:5f:d7:56:eb:
                    06:30:b1:04:59:cc:a1:1c:8e:f4:d9:d3:e0:86:13:
                    12:d8:db:07:e2:64:4c:fd:dc:97:58:29:df:05:b0:
                    fb:29:b2:14:ff:d0:a3:c4:6c:81:5b:73:5f:97:fa:
                    f1:40:57:4d:72:16:aa:37:95:0a:a9:0e:7a:a3:24:
                    16:0c:36:11:78:e3:e8:af:e8:34:97:21:8a:25:4a:
                    3d:72:46:fa:c7:98:24:3b:79:67:61:a1:bb:20:dd:
                    4c:94:20:c3:49:6c:30:de:a5:58:f6:a4:39:4b:a5:
                    f8:21:62:b3:5f:45:08:5a:09:f5:6a:8e:07:2d:07:
                    07:81:7b:0f:d6:03:d1:c6:74:25:33:68:c8:ac:20:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5D:50:4B:32:33:42:FE:86:FB:E6:89:AA:31:94:1A:47:44:C9:49
            X509v3 Authority Key Identifier:
                keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:38:93:58:d2:ba:4f:54:38:f2:e7:42:22:54:4e:15:2b:1e:
         5f:91:9f:21:9f:64:e2:c9:62:fa:b0:a6:d5:84:c2:18:eb:24:
         ab:63:dd:b8:48:23:37:0d:f6:5a:23:47:7b:f9:57:1b:f8:04:
         3a:2a:3b:7c:45:ce:56:b5:f3:db:c8:d2:23:b8:e2:ca:ac:80:
         84:03:80:0f:33:f1:db:e8:31:09:9c:18:9b:68:4d:dd:fe:00:
         c0:85:cc:77:93:93:62:32:fd:19:a2:5a:b7:1b:77:3a:2d:d8:
         1b:94:0e:fe:08:35:f1:b6:9a:2a:20:8f:6d:10:6b:eb:dc:1a:
         8a:d8:17:57:2d:2f:a9:86:f6:da:b8:07:2f:92:fc:07:ba:c2:
         c4:2b:b7:57:2a:0b:66:6d:29:6d:9c:6b:a5:f8:8b:2c:31:ce:
         46:4c:a7:83:7c:03:d9:ee:19:78:ee:1a:ba:df:f3:10:cf:18:
         a0:52:7c:18:10:8c:eb:68:ec:9a:15:62:8f:55:24:c8:a9:44:
         3b:c9:6d:92:99:3a:71:98:69:f3:dd:d4:54:9d:1a:45:91:5a:
         d9:a8:32:d4:be:2e:09:7b:43:a4:f8:10:81:61:38:a5:2d:ce:
         b2:71:e3:2b:ae:47:96:bf:df:ad:4f:2c:eb:dd:49:25:52:26:
         c0:0d:3c:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yDFzzPvbC09h5LwWFS0VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjUxMDIwMDQwMjEzWhcNMjUxMDIxMDQwMjEzWjAzMTEwLwYDVQQD
EyhmYjVkNTA0YjMyMzM0MmZlODZmYmU2ODlhYTMxOTQxYTQ3NDRjOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZtNkr/z1W7xM0WGqqlwjC7vRsKB
W3/xupyI1J89VidkNiFqVCApg+ZGzR0XaBh/I43AYPjwFoffM2ZtA3MYEdO0lUXh
VFfG5u7boSVW10IIXr8yWOFINtCq6NNFRjjjuUzZDYf0XGDd+sYH2N8XJC3g/1/X
VusGMLEEWcyhHI702dPghhMS2NsH4mRM/dyXWCnfBbD7KbIU/9CjxGyBW3Nfl/rx
QFdNchaqN5UKqQ56oyQWDDYReOPor+g0lyGKJUo9ckb6x5gkO3lnYaG7IN1MlCDD
SWww3qVY9qQ5S6X4IWKzX0UIWgn1ao4HLQcHgXsP1gPRxnQlM2jIrCA7OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtdUEsyM0L+hvvmiaoxlBpHRMlJMB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDiTWNK6
T1Q48udCIlROFSseX5GfIZ9k4sli+rCm1YTCGOskq2PduEgjNw32WiNHe/lXG/gE
Oio7fEXOVrXz28jSI7jiyqyAhAOADzPx2+gxCZwYm2hN3f4AwIXMd5OTYjL9GaJa
txt3Oi3YG5QO/gg18baaKiCPbRBr69waitgXVy0vqYb22rgHL5L8B7rCxCu3VyoL
Zm0pbZxrpfiLLDHORkyng3wD2e4ZeO4aut/zEM8YoFJ8GBCM62jsmhVij1UkyKlE
O8ltkpk6cZhp893UVJ0aRZFa2agy1L4uCXtDpPgQgWE4pS3OsnHjK65Hlr/frU8s
691JJVImwA08gQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:28 2025 by rpki-client