Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File:                     1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier:          A51gEp38e5s5+8cWrKQ+5+ptv0pnb03Lw79hNhqkaJ8=
Subject key identifier:   A7:5C:4E:99:A1:90:92:5E:F1:93:7A:FE:82:93:47:DB:B9:75:8D:49
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer:       /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial:       0199FBEAA0E33279D15650FC52BBC18712C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number:          0CA5
Signing time:             Sun 19 Oct 2025 10:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:21 +0000
Files and hashes:         1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: Icpga5lf569+bEIThSaABpW7hUKIZPixXUVokkiIr3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:a0:e3:32:79:d1:56:50:fc:52:bb:c1:87:12:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
        Validity
            Not Before: Oct 19 10:01:21 2025 GMT
            Not After : Oct 20 10:01:21 2025 GMT
        Subject: CN=a75c4e99a190925ef1937afe829347dbb9758d49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:48:e0:51:c5:72:41:31:8c:66:0a:56:3d:
                    ce:aa:2a:04:ad:f8:81:a7:00:08:28:9e:5a:f9:ac:
                    eb:02:9d:d0:14:5b:e7:b3:32:de:9f:45:c5:42:f4:
                    fb:86:ed:71:6b:a8:22:01:d1:0c:35:e6:0a:5f:26:
                    6e:bc:df:36:95:46:1e:4f:da:53:56:7a:a6:cf:8d:
                    cb:98:9e:b7:02:73:7b:97:e2:4e:a6:e2:db:2d:ac:
                    2b:e8:eb:ba:db:d3:0b:c4:2d:6b:b4:7e:68:f0:58:
                    a6:fd:9b:02:a2:12:aa:77:c6:24:62:83:9c:20:6e:
                    b5:ab:c2:7e:95:af:89:f3:4d:d1:b9:dd:63:12:e3:
                    d2:8f:fe:67:ad:4f:06:ed:cd:eb:7d:73:fd:41:9f:
                    65:78:87:4a:04:6a:5e:93:77:c8:1e:6e:6a:5e:86:
                    2c:e8:ec:72:bb:67:d6:fb:64:2a:26:2e:41:86:51:
                    76:d1:d9:4c:30:b3:71:f1:39:8e:13:93:0d:db:e2:
                    ac:c4:cb:a6:40:6b:bd:92:45:52:c1:76:d3:e2:cf:
                    81:81:55:4d:c4:cc:98:a5:2b:f3:57:19:f4:8d:b0:
                    13:03:28:26:68:18:aa:b8:ab:d6:4b:62:55:af:0c:
                    8f:2b:28:b7:d0:8e:ce:33:74:6f:bc:c5:90:31:64:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5C:4E:99:A1:90:92:5E:F1:93:7A:FE:82:93:47:DB:B9:75:8D:49
            X509v3 Authority Key Identifier:
                keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:15:af:a3:8c:e0:cc:48:10:1c:a2:29:ad:ba:09:83:c7:7e:
         50:18:62:cd:05:df:9f:0f:d5:91:a6:bb:aa:34:79:b0:1a:24:
         6b:c3:9c:ac:41:e3:40:e5:29:38:3e:8c:11:31:50:a7:d1:e4:
         75:7f:55:c1:bc:df:18:dd:67:7e:46:57:53:35:e7:fa:a7:c4:
         dd:cf:6b:00:f5:97:08:c6:db:a1:97:21:a8:da:f8:4c:9d:88:
         a9:43:cb:f1:da:67:a3:9b:d3:5c:04:24:46:2e:6e:b1:f5:e5:
         52:b1:0c:c0:1f:92:31:d3:50:ff:af:e1:76:71:9a:6b:7d:76:
         65:e8:ea:14:7e:21:18:0a:6b:e2:16:6a:56:f2:41:ab:e5:01:
         e5:43:fb:1c:8a:ca:d2:98:c3:b4:d1:cc:79:79:50:b0:13:e7:
         8a:ba:00:20:98:ee:9e:88:a3:37:3d:77:4d:19:96:66:bd:68:
         74:24:fc:35:2e:44:9e:e2:4c:a9:bb:42:ce:25:b7:76:80:0a:
         4a:2e:57:38:9d:bd:49:24:fc:d8:85:73:22:2c:88:72:63:e9:
         84:71:03:8e:05:f5:8f:49:42:4f:8a:18:70:1a:e5:52:65:bf:
         3c:96:47:bf:0b:4e:cc:dd:2a:54:a8:b1:b4:a6:6c:47:9a:c5:
         45:8a:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:33 2025 by rpki-client