Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
File:                     PKE4ItxLDjEIGkhX_QQHDW2svgw.mft (raw, json)
Hash identifier:          JaT5EHINxQlNZVs/JI1khD8Sp1yXRXr9nyK6PPJaB+c=
Subject key identifier:   CD:BB:76:79:2D:61:32:84:57:EC:03:E5:A2:2D:8F:5C:58:F9:92:F5
Authority key identifier: 3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C
Certificate issuer:       /CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
Certificate serial:       0199FB45E014481A9172D218F39AFCCA8B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 07:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:24 +0000
Files and hashes:         1: PKE4ItxLDjEIGkhX_QQHDW2svgw.crl (hash: Uxb2tuFIOrHc33pFKa1ML1awuJ7yPzYMtJVUngdjke0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:e0:14:48:1a:91:72:d2:18:f3:9a:fc:ca:8b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca13822dc4b0e31081a4857fd04070d6dacbe0c
        Validity
            Not Before: Oct 19 07:01:24 2025 GMT
            Not After : Oct 20 07:01:24 2025 GMT
        Subject: CN=cdbb76792d61328457ec03e5a22d8f5c58f992f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:73:82:db:f0:9e:1c:7d:eb:7b:0c:64:71:
                    e6:d6:af:bf:5a:46:30:4e:e0:ba:a5:60:91:f8:2c:
                    77:1f:89:df:dc:f0:e3:cb:25:7b:76:cb:76:f8:f2:
                    b0:58:f9:ce:7d:e4:f8:a7:f6:e6:93:de:49:43:ca:
                    72:10:b6:90:84:4b:29:e6:40:b0:86:0f:c9:2c:af:
                    d3:66:a9:de:a2:eb:ae:dc:70:dd:ce:61:8e:33:44:
                    08:19:5e:49:60:04:0a:d5:64:65:e2:6c:9b:ae:40:
                    95:19:15:c9:ca:11:28:a2:24:79:c9:f4:33:7b:84:
                    36:bb:83:b1:9f:8b:c6:49:a9:b6:af:60:32:1a:c5:
                    9b:6a:0f:7f:63:ed:92:76:a3:d6:07:fb:21:ef:19:
                    ef:93:8a:12:a6:b8:26:bc:3e:19:f5:3c:f5:0a:67:
                    ec:cb:e3:0e:bd:c9:1a:10:01:02:68:99:2e:8d:e2:
                    35:bf:34:73:19:8c:d1:2f:ee:39:05:f9:00:f8:29:
                    d0:cd:77:1a:c2:01:54:74:3c:0c:de:5a:29:e3:de:
                    e7:2d:f0:fc:2b:10:18:bf:ce:55:0f:68:fc:cb:88:
                    2b:6b:1b:cd:6f:c4:ed:c6:23:44:5d:07:49:e6:82:
                    2d:26:90:de:0b:13:57:10:b0:6f:c0:d2:4d:2d:ad:
                    08:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BB:76:79:2D:61:32:84:57:EC:03:E5:A2:2D:8F:5C:58:F9:92:F5
            X509v3 Authority Key Identifier:
                keyid:3C:A1:38:22:DC:4B:0E:31:08:1A:48:57:FD:04:07:0D:6D:AC:BE:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKE4ItxLDjEIGkhX_QQHDW2svgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/37f0bd-ad1a-42f9-b948-b294f6bf8137/1/PKE4ItxLDjEIGkhX_QQHDW2svgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:03:00:e1:02:b5:d3:5d:93:01:6e:d9:70:81:84:9a:9e:7a:
         23:01:ae:27:3e:72:b7:e3:ff:83:d4:20:de:13:76:22:b1:56:
         59:48:aa:ea:79:3a:55:dd:86:8a:d9:b5:d3:eb:80:f1:b5:c7:
         3d:f1:08:33:c7:ad:a0:0e:e7:4f:db:f4:2a:be:df:b0:24:dc:
         39:a1:b2:e0:5e:ec:c6:a0:2b:86:40:27:5c:e8:c3:b8:24:5f:
         c3:61:fa:3d:dd:9c:86:98:f2:ef:6a:99:8c:d9:7a:f0:d4:75:
         73:e5:0f:a3:86:01:89:3a:d9:ed:12:10:9b:79:e3:fe:90:46:
         59:21:67:64:cf:54:13:3f:fc:ec:83:f5:d8:1c:56:78:e1:a9:
         04:1d:63:64:c0:08:6d:cf:b0:da:05:71:1d:40:d1:7e:e5:a5:
         46:c8:7b:07:ed:6e:65:ac:84:d8:2f:43:98:c0:1d:1d:ca:ab:
         5b:fa:7d:e6:02:6b:9a:72:18:8a:54:43:15:25:dd:18:e7:73:
         7a:fe:6a:ee:1e:1b:b4:33:00:81:c6:9c:ed:ca:2f:33:38:e7:
         94:08:9e:57:67:b9:b4:ee:9d:45:5b:92:e8:35:63:3a:48:26:
         be:88:30:ef:41:f1:92:29:2b:e8:a6:0f:b0:1a:fe:0a:b0:80:
         17:3b:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:05 2025 by rpki-client