Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
File:                     p0FyV8tjZv81cjOybSXdWIfaifs.mft (raw, json)
Hash identifier:          e+EIQGszhYoAVR0X5HzBSVei87WDmj4n+IMEgVUlTZc=
Subject key identifier:   77:F7:4F:90:CE:09:D0:6D:8D:40:CF:1E:F4:B4:07:A4:A1:E9:12:B3
Authority key identifier: A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB
Certificate issuer:       /CN=a7417257cb6366ff357233b26d25dd5887da89fb
Certificate serial:       0199FBEB2F93FA651BD14ED924A80B8DC49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 10:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:58 +0000
Files and hashes:         1: p0FyV8tjZv81cjOybSXdWIfaifs.crl (hash: DSuDnlR9gWCIZnjX3p0939ZVt3ioCUwERL1E1IS4zLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:2f:93:fa:65:1b:d1:4e:d9:24:a8:0b:8d:c4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7417257cb6366ff357233b26d25dd5887da89fb
        Validity
            Not Before: Oct 19 10:01:58 2025 GMT
            Not After : Oct 20 10:01:58 2025 GMT
        Subject: CN=77f74f90ce09d06d8d40cf1ef4b407a4a1e912b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:69:f4:59:b1:e5:44:77:20:2d:b0:b1:13:
                    51:01:f1:9d:28:82:3b:ae:ab:a3:14:4b:08:93:1a:
                    6b:4a:f2:8e:16:f6:ca:6f:af:34:80:84:2e:7e:df:
                    fa:9f:35:9f:17:fd:27:90:f7:d6:b2:05:0a:b0:f6:
                    e7:1f:dc:81:29:63:a3:4b:8e:74:87:7c:f2:bd:a8:
                    a9:f3:d7:9c:d8:95:b6:59:3e:fc:f1:82:08:8f:51:
                    bc:1e:f4:f3:f4:1f:87:fc:27:45:b3:a7:c8:e7:50:
                    44:3a:04:2f:2c:96:4c:de:af:60:fc:a5:2a:18:6f:
                    a5:a2:14:45:67:fa:d7:37:55:bd:e9:c0:30:86:8c:
                    98:2b:a1:f5:17:1d:9c:74:1d:b5:fa:b2:e5:a6:3a:
                    c7:0c:38:18:ca:51:e9:50:55:06:41:d1:e1:24:a5:
                    50:bb:63:84:d1:0a:1c:d6:65:5d:7a:f8:16:4a:3f:
                    ea:8e:34:df:75:38:31:55:56:c0:1d:13:b9:a1:82:
                    c3:ef:7a:15:38:bc:82:57:1c:97:5f:3a:39:48:28:
                    f1:9b:0b:e4:24:f8:97:9e:34:2c:d6:53:96:13:4b:
                    c1:d2:a8:aa:b7:33:ac:8b:ed:3c:df:df:ad:bb:5a:
                    75:86:ae:00:56:88:ea:f7:6b:e6:53:90:27:c9:b2:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:4F:90:CE:09:D0:6D:8D:40:CF:1E:F4:B4:07:A4:A1:E9:12:B3
            X509v3 Authority Key Identifier:
                keyid:A7:41:72:57:CB:63:66:FF:35:72:33:B2:6D:25:DD:58:87:DA:89:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0FyV8tjZv81cjOybSXdWIfaifs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e2adff-d106-4ab8-a994-ff8fe25526c6/1/p0FyV8tjZv81cjOybSXdWIfaifs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:53:db:00:b2:57:ee:7a:76:c2:97:9e:92:08:8e:1f:4d:92:
         84:3f:92:32:65:47:fa:b3:32:66:b4:33:e3:98:e7:90:95:50:
         0d:c8:a4:de:f3:61:df:42:c3:2b:84:6f:08:a8:01:73:ee:57:
         d5:84:de:73:82:4d:a3:ec:54:68:ef:ea:c5:fc:3a:65:d3:a8:
         0d:34:ba:02:58:6f:ea:eb:bd:c3:dc:b6:98:e4:06:b7:fe:a9:
         80:a3:aa:16:ed:60:dd:35:6b:66:24:d9:9c:75:ed:4a:13:74:
         02:a8:d3:a1:9d:05:80:eb:64:4a:df:77:ab:5b:93:7f:fa:63:
         80:12:c1:9b:46:d4:5f:bf:0e:fa:a1:a5:63:fb:6d:d9:7d:f1:
         00:43:3b:d1:a0:e8:3a:84:23:dc:0c:58:87:e1:34:1f:43:e8:
         1e:37:7c:f3:bb:07:ca:83:19:b4:81:a1:ca:68:89:5b:b9:d8:
         f3:5a:3d:31:a1:c6:c4:1c:8b:5d:6b:d7:30:12:f1:29:73:1e:
         d7:1e:47:30:98:0c:ec:6d:1b:ec:ee:46:17:c8:99:5c:dd:e8:
         96:8e:b8:49:70:9f:0c:4e:c3:e3:86:83:3c:a4:48:3e:c3:5f:
         d3:2e:79:ac:78:47:f8:87:d5:bb:da:bb:74:1e:86:7f:ad:b9:
         f8:02:ce:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:39 2025 by rpki-client