Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
File:                     AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft (raw, json)
Hash identifier:          n1M4qwyvDQRIFEsoI/7JDzjc3x6jcYLJOO95Z4/+ftQ=
Subject key identifier:   E8:FA:27:49:9E:93:93:7B:EA:8B:FD:10:D5:41:C7:AC:63:57:01:98
Authority key identifier: 01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48
Certificate issuer:       /CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
Certificate serial:       0199FB46203E39646C5378271885BF983832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
Manifest number:          15C3
Signing time:             Sun 19 Oct 2025 07:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:40 +0000
Files and hashes:         1: AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl (hash: lAX7btW9bWl1mkLNDuxw8p2mAkM2jpuvZrhQAUYtpXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:20:3e:39:64:6c:53:78:27:18:85:bf:98:38:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014a808ccf5919d0567dc4234e90a3e60ceb1648
        Validity
            Not Before: Oct 19 07:01:40 2025 GMT
            Not After : Oct 20 07:01:40 2025 GMT
        Subject: CN=e8fa27499e93937bea8bfd10d541c7ac63570198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:38:21:b0:0a:c1:2a:37:f1:f8:af:c3:d5:
                    2c:8c:f1:e3:79:fa:15:40:05:3f:f7:a9:e9:9b:6f:
                    09:04:89:04:43:ae:d5:bb:63:01:87:86:2f:92:29:
                    63:61:65:0f:07:4e:ef:09:48:b0:9b:bf:77:03:d8:
                    02:90:50:bf:d8:55:4c:7a:e5:9f:90:e5:c8:ef:d4:
                    c8:ba:a3:a2:be:c5:86:24:3b:9d:fb:73:f2:48:1b:
                    75:5e:54:cf:12:f4:9a:e5:b9:c7:b8:ff:57:7d:d2:
                    67:b3:9f:8c:12:46:20:0c:81:45:d5:fc:e0:bd:75:
                    60:24:19:6d:a9:8c:66:91:11:a3:5e:8a:00:1e:2d:
                    8a:df:7f:dc:45:6d:d7:95:72:6d:e0:dc:e0:fa:00:
                    2b:33:15:84:02:27:72:90:8d:4c:08:f9:40:c7:26:
                    ac:5d:3b:3f:e0:fd:bb:64:75:79:67:2c:dc:c1:95:
                    5c:83:a0:24:bf:8e:4c:f8:ea:44:11:77:9f:70:4d:
                    88:43:00:7d:52:62:64:e6:54:15:84:01:e9:f2:c0:
                    ff:ed:35:a4:73:87:ea:90:f4:8b:98:9b:db:73:19:
                    7b:0b:1d:83:a9:14:e4:45:73:2a:65:35:e9:02:2c:
                    89:b8:c2:75:23:a2:1d:87:c5:40:5b:c1:21:73:1e:
                    61:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FA:27:49:9E:93:93:7B:EA:8B:FD:10:D5:41:C7:AC:63:57:01:98
            X509v3 Authority Key Identifier:
                keyid:01:4A:80:8C:CF:59:19:D0:56:7D:C4:23:4E:90:A3:E6:0C:EB:16:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d28729-84ee-4085-b85c-16a2d3e6c994/1/AUqAjM9ZGdBWfcQjTpCj5gzrFkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:50:e5:7b:50:49:5d:d7:35:40:34:0e:d9:55:73:eb:1d:d3:
         18:28:69:59:31:6d:d7:37:6e:d3:10:1b:65:36:aa:2e:e1:d3:
         6f:43:be:dd:e0:d1:8f:9c:26:7f:05:6c:20:9d:09:0c:70:06:
         b2:76:db:ca:4c:7d:d1:bb:69:fb:84:37:53:bc:00:db:3d:ff:
         4c:50:f1:51:26:ba:20:02:85:9d:ab:cb:fa:da:c8:b3:9f:02:
         09:d2:17:fe:85:c3:cc:8b:8b:41:f9:c0:83:ec:f1:65:4a:71:
         81:91:a6:c1:3d:fc:8b:c4:10:29:c2:63:52:e2:6a:c3:c5:cd:
         d0:b1:3e:ea:da:fe:6f:97:fe:0e:56:81:ac:41:e8:b2:f1:f9:
         90:02:bd:54:ae:13:5c:a5:37:7a:36:4f:c0:de:7b:7b:97:3e:
         59:1b:32:be:97:31:d8:42:ee:e3:b6:3f:88:68:50:82:9e:44:
         bd:36:5b:c9:cb:89:e1:00:73:11:51:ec:e0:84:31:99:69:dd:
         87:82:c2:47:4d:c3:ea:7a:06:a2:01:c2:ab:6a:98:bb:1f:7b:
         15:7a:41:89:db:10:27:11:bb:a6:a6:fe:b3:c9:aa:0c:24:ee:
         9f:a5:76:01:f8:46:c2:46:7c:37:26:88:71:83:7f:cd:55:b1:
         18:e1:64:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:54 2025 by rpki-client