Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
File:                     Pl96BiMXb2x_xmVMATvzmcqQxXg.mft (raw, json)
Hash identifier:          zHB2xbKsuvUCUnWVEu7GjQ6w+fzy/GB7ityLPDLgF3I=
Subject key identifier:   DE:0A:E3:DF:69:79:44:5D:19:9C:7E:9E:EE:42:10:43:2E:BB:22:57
Authority key identifier: 3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78
Certificate issuer:       /CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
Certificate serial:       0199FBB35A656B614BC5DB1D7F302DFE646D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
Manifest number:          89
Signing time:             Sun 19 Oct 2025 09:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 09:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 09:00:59 +0000
Files and hashes:         1: Pl96BiMXb2x_xmVMATvzmcqQxXg.crl (hash: 2zMAHTScXMWLo3EZ8bOmeWt9hsMdfs7m3uGXRM1guXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:5a:65:6b:61:4b:c5:db:1d:7f:30:2d:fe:64:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5f7a0623176f6c7fc6654c013bf399ca90c578
        Validity
            Not Before: Oct 19 09:00:59 2025 GMT
            Not After : Oct 20 09:00:59 2025 GMT
        Subject: CN=de0ae3df6979445d199c7e9eee4210432ebb2257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cb:88:4a:a2:31:b3:ec:8d:4b:9a:1d:8c:14:
                    4e:be:5e:17:00:21:b6:97:d8:f7:12:0e:c7:74:79:
                    ad:ea:73:f0:3d:90:ea:1f:13:63:e0:c6:e6:f5:ae:
                    71:35:71:d0:c2:8f:70:18:02:07:28:aa:cb:cb:ae:
                    82:4b:02:b0:e8:33:ed:8e:e7:24:91:63:52:eb:ea:
                    13:ef:0c:0f:dd:30:b3:8d:5c:f3:46:b8:de:29:5f:
                    8f:43:46:67:26:98:e3:b7:6d:2f:5f:fe:f0:fb:1e:
                    20:ec:d9:2d:ad:66:02:98:79:d2:7c:20:d0:91:70:
                    34:87:69:55:cb:ee:67:22:a6:b8:2e:2f:5d:97:14:
                    12:f4:d9:14:71:3a:5d:7d:2c:5c:22:f1:73:fa:49:
                    ad:b6:64:d9:b3:39:41:51:e8:bd:75:35:25:1c:09:
                    cb:9f:46:bb:97:5f:9e:23:f6:33:de:92:5e:de:93:
                    df:9d:07:9d:29:83:08:0d:06:81:ca:35:0a:03:ce:
                    12:1b:42:0c:6b:ca:91:40:32:ce:63:0b:76:e8:25:
                    71:79:09:b3:63:91:83:31:56:c5:28:28:40:3d:39:
                    e3:79:4a:78:2e:44:ae:cb:cf:32:f7:75:a5:ca:bc:
                    39:e7:57:d6:a3:bf:b6:d5:cc:8a:47:8b:b9:fc:a2:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0A:E3:DF:69:79:44:5D:19:9C:7E:9E:EE:42:10:43:2E:BB:22:57
            X509v3 Authority Key Identifier:
                keyid:3E:5F:7A:06:23:17:6F:6C:7F:C6:65:4C:01:3B:F3:99:CA:90:C5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pl96BiMXb2x_xmVMATvzmcqQxXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b7068f-6dc9-46ad-943b-2ff6b5e304bd/1/Pl96BiMXb2x_xmVMATvzmcqQxXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:37:4b:ea:82:4e:93:9c:8b:ba:92:9f:a7:2d:4a:ce:27:75:
         fa:7f:92:2e:29:cb:a0:9a:9d:35:ae:19:4b:91:cb:57:eb:da:
         9b:61:38:1f:50:0b:c6:a1:1e:67:6e:b0:6c:1c:2c:4f:d5:a1:
         56:d4:ce:ac:c2:a6:00:1b:e3:54:b8:49:82:b6:0c:b2:08:f3:
         4d:dd:3d:58:d2:77:0c:4f:48:c1:d1:75:89:3b:6e:cb:6e:67:
         d8:1a:a6:95:61:d9:ea:98:46:04:73:36:37:a0:e7:db:58:48:
         91:63:5b:2b:ea:9f:20:95:dc:31:3d:89:10:a1:8c:94:2d:4d:
         49:69:7f:1b:5e:3a:b6:19:89:1d:b5:82:4f:ca:47:0f:c8:51:
         1c:1d:e7:c4:c6:b3:34:92:45:4a:84:7e:a7:94:c6:7f:b8:15:
         25:f4:fe:00:5d:da:02:59:64:1a:86:b7:79:64:06:36:08:be:
         1e:2f:ed:3d:ae:62:9f:89:78:9b:e6:e1:79:53:26:87:8f:9a:
         d1:cf:3b:82:bd:ec:17:a4:c8:7c:76:08:38:a8:25:10:92:3e:
         cc:80:d0:22:87:c2:88:51:fe:d8:cf:7f:4e:84:e5:7c:84:55:
         15:18:62:84:c9:84:b0:67:63:fd:99:d1:97:eb:ad:fe:7b:ea:
         11:79:8b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:39 2025 by rpki-client