Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
File:                     spK68_TAei7dR9iMKxW2Wir33q0.mft (raw, json)
Hash identifier:          3AYxgv8VVu3iLPhm+qyb4eWI5uYqh++JoEwaTVySHXc=
Subject key identifier:   5C:DD:D6:AC:68:B0:71:E0:41:7C:C7:70:5F:AF:0C:C1:91:DE:87:D6
Authority key identifier: B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD
Certificate issuer:       /CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
Certificate serial:       0199FBEAFCDBFB7DA4EF902A565C18F24E11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
Manifest number:          0D7A
Signing time:             Sun 19 Oct 2025 10:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:45 +0000
Files and hashes:         1: spK68_TAei7dR9iMKxW2Wir33q0.crl (hash: B+VqE7r8vKymao5rnA+pUj+Xa9UJcTNopVDX8AceIT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:fc:db:fb:7d:a4:ef:90:2a:56:5c:18:f2:4e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b292baf3f4c07a2edd47d88c2b15b65a2af7dead
        Validity
            Not Before: Oct 19 10:01:45 2025 GMT
            Not After : Oct 20 10:01:45 2025 GMT
        Subject: CN=5cddd6ac68b071e0417cc7705faf0cc191de87d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:1d:d1:3f:f4:c6:93:1a:59:6f:ae:bd:d8:
                    9e:66:01:32:cf:e3:92:70:8e:cd:4d:af:b8:f6:9c:
                    99:8a:8b:00:b1:f9:80:05:7c:49:29:1f:5e:6b:46:
                    f9:2b:2f:24:2e:79:b4:ed:d4:05:55:ca:c7:05:c2:
                    0e:85:7d:ed:a1:a3:c3:c0:2b:1d:9e:6d:f8:78:ef:
                    0e:b5:6f:1c:d8:42:4c:23:9f:d8:b0:6a:cc:5e:cc:
                    f9:ea:a0:9f:e4:b0:9b:0f:14:36:59:83:c7:6b:04:
                    59:d5:91:8d:e3:cc:c7:7b:b6:b7:10:e4:a2:c9:35:
                    e8:6a:62:40:cd:31:ec:f0:a6:87:bc:dd:c0:ab:a3:
                    6e:61:77:d6:5d:32:74:b6:89:9d:66:19:8c:f7:6e:
                    e8:2d:b1:aa:9b:ac:65:cc:e2:c6:29:95:f3:04:9d:
                    5c:2a:9e:82:e4:e1:a4:09:d9:b5:3e:1e:d8:7a:87:
                    3d:47:05:38:b8:90:9a:e9:b2:f7:90:b8:c2:d1:28:
                    94:5c:68:69:2a:54:08:47:23:3c:f7:6b:e5:0d:30:
                    48:1d:6c:87:f5:11:57:55:fc:c5:ca:6a:58:bf:0f:
                    54:ac:25:26:90:b6:6e:58:1e:e8:2d:6c:7c:20:8b:
                    df:b1:12:98:3e:6b:60:99:82:21:cd:82:18:61:6c:
                    20:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DD:D6:AC:68:B0:71:E0:41:7C:C7:70:5F:AF:0C:C1:91:DE:87:D6
            X509v3 Authority Key Identifier:
                keyid:B2:92:BA:F3:F4:C0:7A:2E:DD:47:D8:8C:2B:15:B6:5A:2A:F7:DE:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spK68_TAei7dR9iMKxW2Wir33q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/c1f83a-dfc7-494d-9a4b-2a72c2858bac/1/spK68_TAei7dR9iMKxW2Wir33q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:23:1f:49:f0:04:dd:02:fd:2d:f4:90:5a:3f:67:8b:55:7a:
         f8:07:6a:fd:d0:b9:cb:c1:de:80:76:06:a2:24:c5:24:80:96:
         80:b5:88:de:12:42:b0:e8:66:3d:d0:aa:42:0f:a3:45:75:5e:
         66:c5:b8:85:93:db:97:9c:bd:2a:0c:e9:db:1d:c1:e7:05:b9:
         e5:4c:05:c0:e1:32:1c:0a:46:3a:14:b2:c4:ee:28:d4:9b:52:
         39:b2:21:d1:1c:81:8a:0a:d1:fe:df:63:d7:1c:63:cd:d2:1a:
         df:3d:6f:5c:17:c1:8d:93:29:47:89:5f:1f:fe:75:80:e7:7f:
         02:81:7f:f1:c9:48:e7:a0:d7:d6:af:d5:bd:3e:e4:4a:68:ba:
         d3:5a:72:e6:ad:86:f8:3a:3a:86:b7:1f:1e:0d:17:dd:12:85:
         b1:74:5b:84:18:52:d1:48:ed:8b:bd:b5:d1:61:d9:e9:b9:e2:
         d6:81:b7:29:88:85:73:fc:87:e6:f1:f4:94:4f:15:90:49:29:
         0c:01:4c:97:64:12:55:2d:d6:ad:58:e4:cb:4a:e3:7d:87:51:
         b5:0d:c6:76:76:8b:91:5b:8a:0a:a8:db:cf:a7:e1:b7:ce:c6:
         bd:67:f0:21:c9:57:79:c5:28:c8:23:04:78:9f:75:11:34:40:
         b8:39:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:37 2025 by rpki-client