Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
File:                     65fOljUzDxRxFMZG72qTR9aJFjs.mft (raw, json)
Hash identifier:          qg6mohr9Kh1lvXHTwqOfRWdPfE5kjhXUrv3wTRWY99c=
Subject key identifier:   C4:0A:3D:C5:7C:CA:2B:F5:00:0D:8E:97:4F:E1:FC:AF:11:54:26:CF
Authority key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Certificate issuer:       /CN=eb97ce9635330f147114c646ef6a9347d689163b
Certificate serial:       0199FAD7FEDB2AD0900B74332CD5AAC75992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
Manifest number:          1670
Signing time:             Sun 19 Oct 2025 05:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:23 +0000
Files and hashes:         1: 65fOljUzDxRxFMZG72qTR9aJFjs.crl (hash: DeFaJbtmjY5izZAdnAtkn6jukygDXQ+aCpo2eLyisx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:fe:db:2a:d0:90:0b:74:33:2c:d5:aa:c7:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb97ce9635330f147114c646ef6a9347d689163b
        Validity
            Not Before: Oct 19 05:01:23 2025 GMT
            Not After : Oct 20 05:01:23 2025 GMT
        Subject: CN=c40a3dc57cca2bf5000d8e974fe1fcaf115426cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:63:a3:ac:02:c7:55:0c:6c:96:67:8e:cc:37:
                    08:0f:b9:50:e9:12:62:84:e1:c9:99:67:5c:ff:ae:
                    e6:fa:25:4c:78:18:1c:19:0d:97:5e:a9:75:f3:e6:
                    e1:22:17:3f:0d:fb:c9:40:d3:77:9c:43:fd:bd:af:
                    c7:a0:b1:bf:62:b1:c4:c8:74:74:c9:ab:73:ef:40:
                    79:ca:ea:d5:20:47:1d:60:05:d9:1d:49:b7:8d:8a:
                    57:cb:e5:50:7c:6d:ce:a3:82:8b:65:2c:2d:54:b5:
                    7c:6f:0b:8b:ec:d2:ee:ee:29:49:fe:7f:1f:7c:81:
                    00:52:64:3b:32:82:1e:e1:57:57:da:64:72:4e:1b:
                    8c:2a:df:9f:e0:5a:56:e5:f4:e7:f8:e3:ef:79:90:
                    e4:9d:59:22:bd:c8:ec:51:44:9a:b9:21:3e:ed:9a:
                    13:ab:4b:05:13:fa:8d:ff:77:12:b5:31:57:87:ad:
                    58:2c:55:c5:7e:d2:8c:88:a4:f9:d7:23:ac:ac:2e:
                    05:93:d6:37:ed:8a:d5:53:49:99:bc:a4:d5:fc:b8:
                    3e:41:a6:7c:b8:32:11:1c:9d:73:1a:eb:db:5e:07:
                    97:a9:05:ee:34:82:54:14:49:21:4d:c9:41:d6:eb:
                    d2:54:fd:b2:cd:b1:7a:1c:54:7f:24:b0:c1:71:2b:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0A:3D:C5:7C:CA:2B:F5:00:0D:8E:97:4F:E1:FC:AF:11:54:26:CF
            X509v3 Authority Key Identifier:
                keyid:EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:80:71:c0:51:bc:7e:9b:54:1c:54:13:5f:a5:0e:14:65:
         14:41:ed:49:5d:4d:3d:5b:24:94:75:7c:14:4f:dc:6e:d1:10:
         a7:0e:e9:97:48:8e:4c:3c:16:3b:4e:21:81:ec:f4:49:77:a2:
         60:e4:f1:aa:e3:9d:9e:3b:96:43:a8:2a:cc:2e:8f:65:f1:eb:
         0e:02:9b:46:57:14:a2:c3:55:e7:04:9d:ef:9e:45:40:e5:a5:
         78:3a:30:4e:0e:ac:4b:a2:d0:a8:b1:d4:ec:04:1b:d8:18:d0:
         b2:cb:ba:56:52:39:7a:b5:29:b3:23:04:b5:12:4a:a5:41:a0:
         88:05:4e:03:22:52:15:f3:eb:a2:68:3b:a0:83:23:be:e2:40:
         23:33:c1:77:52:1b:cc:ef:40:65:26:1d:41:fa:41:5e:ac:0e:
         ce:9a:92:e8:44:05:11:e7:1a:9a:a0:21:e4:cf:0a:23:64:09:
         2e:8e:3d:ef:f0:bf:66:e3:e5:27:2c:96:30:02:ac:c4:61:b9:
         4b:6a:d3:ce:77:d9:d1:79:86:ea:e4:b9:fc:dc:d1:52:d7:51:
         e3:b4:96:a4:09:c9:4c:7e:0c:2e:2e:44:31:80:c3:26:c2:e2:
         ce:e3:96:94:ad:8e:06:4e:fe:49:f4:bf:d1:58:8a:2d:ba:de:
         60:ca:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:08 2025 by rpki-client