Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
File:                     Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft (raw, json)
Hash identifier:          dnkiMSUuWNk+OT5KBsmSwT/m9J2lFTKJKbJWOmEdMT0=
Subject key identifier:   CA:42:C3:EC:F0:55:E0:1B:BF:9A:99:45:1A:4D:D5:D8:A5:98:98:FD
Authority key identifier: 3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58
Certificate issuer:       /CN=3edd1cf4370085b6d25714091436f6686028d558
Certificate serial:       0199FBEAF44F3F9AB3A8CD08E801908E73AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
Manifest number:          0196
Signing time:             Sun 19 Oct 2025 10:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:42 +0000
Files and hashes:         1: Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl (hash: 0n6XO32QWws9XsaQcrGL5CidDfvX89+1SkLagwSkAtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f4:4f:3f:9a:b3:a8:cd:08:e8:01:90:8e:73:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3edd1cf4370085b6d25714091436f6686028d558
        Validity
            Not Before: Oct 19 10:01:42 2025 GMT
            Not After : Oct 20 10:01:42 2025 GMT
        Subject: CN=ca42c3ecf055e01bbf9a99451a4dd5d8a59898fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:44:c6:ae:81:7f:d4:f5:e2:3a:5d:05:87:0a:
                    99:18:b1:fa:2e:a8:f5:78:02:5a:c6:03:5e:b5:68:
                    16:22:89:0f:4d:e1:9b:66:5e:77:ca:7e:a1:7b:4a:
                    69:22:d9:6b:bf:70:45:a0:3a:8c:9c:8f:40:57:68:
                    c6:e7:85:11:94:06:6b:2a:3c:a5:46:91:51:a6:62:
                    e8:70:0d:57:05:e0:b6:46:3a:b4:cd:b7:f7:87:7b:
                    06:7c:85:b3:ca:9a:03:d2:20:05:63:96:40:7d:70:
                    16:1d:c7:20:78:ee:83:e7:f9:c4:4a:9d:f3:c2:0c:
                    02:f2:90:47:f5:82:30:c0:d5:4c:1d:9a:6c:c6:99:
                    97:7e:68:0d:33:fa:c8:4c:61:32:40:e5:79:17:d9:
                    e3:e6:dd:d2:66:f7:91:7b:60:e4:ba:ea:93:5b:3b:
                    03:72:ca:36:5a:29:12:eb:d6:3e:84:2e:7d:0a:e2:
                    1e:ce:f8:9b:15:c5:28:ff:4b:aa:9a:ca:6b:d3:fa:
                    c7:a4:24:e7:87:04:e1:0a:8a:b6:9f:bf:fe:3f:c6:
                    08:14:78:7a:78:6e:c7:f2:a3:2d:55:60:3b:bb:65:
                    f2:99:60:d9:da:28:0f:08:de:84:45:8c:a5:bc:86:
                    42:0d:0f:19:08:e8:ec:5b:4b:23:da:43:2a:1e:05:
                    d5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:42:C3:EC:F0:55:E0:1B:BF:9A:99:45:1A:4D:D5:D8:A5:98:98:FD
            X509v3 Authority Key Identifier:
                keyid:3E:DD:1C:F4:37:00:85:B6:D2:57:14:09:14:36:F6:68:60:28:D5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a258bf-79de-4c28-8a0f-e8ed927c55a4/1/Pt0c9DcAhbbSVxQJFDb2aGAo1Vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:95:0d:f4:53:7f:58:76:b8:47:9d:01:4b:5c:08:81:ee:23:
         08:3c:a3:50:09:4f:67:cb:80:a3:ff:fd:90:0f:44:1d:fb:0f:
         e5:3f:d6:09:38:67:11:06:08:57:c1:6b:a6:a1:a8:f7:db:68:
         b2:78:87:92:c4:4e:ba:de:6b:78:8f:8b:59:04:22:a2:9a:4d:
         e7:64:70:d0:93:f7:92:65:a2:df:23:f2:aa:08:1a:05:63:20:
         57:13:a8:a7:0e:56:9f:cd:24:4a:a9:ff:0e:76:03:b6:47:d7:
         e2:cb:4d:66:23:4f:30:a9:ad:2f:cc:a1:8c:20:e4:fe:88:c9:
         90:b5:0b:7e:a8:eb:05:7f:b4:03:25:99:45:ed:8d:73:18:fb:
         ef:fa:5a:26:70:c7:58:16:9c:41:90:25:cd:57:13:26:bd:3a:
         4c:34:44:e8:40:2e:7b:e0:2e:b8:02:a4:2c:f6:05:24:d8:fe:
         e2:d0:c7:25:df:d6:a0:df:04:17:5d:7f:54:86:9d:c9:19:83:
         19:36:9d:98:d4:86:29:9e:be:7f:f7:5e:6a:f5:9a:ae:0f:7f:
         43:ac:52:44:73:f7:b5:54:77:9c:9e:72:e7:b1:ac:e5:1d:06:
         4a:d4:12:08:ec:48:e2:d9:e6:94:b2:5d:ec:3f:96:9f:1b:6f:
         f5:79:ed:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:21 2025 by rpki-client