Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
File:                     kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft (raw, json)
Hash identifier:          VWLgGX0mHBAf17ma35pC/8qFsZLiam+LQwkyQ+2fxs4=
Subject key identifier:   D2:E8:EF:E0:DE:DB:ED:28:09:23:DF:75:7E:1B:1B:AF:DD:EA:83:BD
Authority key identifier: 91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63
Certificate issuer:       /CN=9143c5f48c77a79c985f5e5362e082ad54e23063
Certificate serial:       0199FDD90A54AC03F4D783DB6D8A49777F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
Manifest number:          0DC8
Signing time:             Sun 19 Oct 2025 19:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:23 +0000
Files and hashes:         1: kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl (hash: 55mJGGj+fs+NZtyT9JcWAJ/TIK75LPjRNk/54NTnzcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:0a:54:ac:03:f4:d7:83:db:6d:8a:49:77:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9143c5f48c77a79c985f5e5362e082ad54e23063
        Validity
            Not Before: Oct 19 19:01:23 2025 GMT
            Not After : Oct 20 19:01:23 2025 GMT
        Subject: CN=d2e8efe0dedbed280923df757e1b1bafddea83bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:84:1b:78:f8:9b:a8:2a:43:6d:76:b5:c6:e5:
                    79:54:d0:5d:58:87:ed:cf:7a:a7:1a:7f:16:55:d2:
                    f8:12:5c:d3:be:60:52:40:18:0a:d5:60:0a:c5:e7:
                    85:95:dd:33:b0:d6:20:a8:44:2e:19:60:72:b8:ba:
                    52:a6:af:99:e6:80:d1:65:0e:76:fc:82:b7:ae:33:
                    42:8c:1f:db:b8:e1:45:1d:9c:0f:b2:8b:5a:f5:04:
                    9e:c4:e9:7c:15:27:8a:85:48:bb:13:de:5d:fc:a0:
                    fa:90:fa:24:1e:8b:dc:d2:ec:5c:6c:47:9e:5e:4f:
                    4f:04:b6:77:11:9e:d3:38:14:20:a4:a1:f0:1f:f3:
                    c2:a6:b3:e9:20:87:60:f7:71:dd:e1:2a:7d:52:e0:
                    a4:9e:68:e0:ff:37:59:91:de:c0:d7:c2:68:8c:b6:
                    34:2e:6b:61:d6:03:f8:3c:dc:7d:da:c8:f3:2b:61:
                    c3:29:c8:8f:e1:aa:fd:40:96:f2:43:70:2a:56:f7:
                    08:94:a6:f1:57:b3:13:0c:c7:99:d9:07:3f:cd:85:
                    ea:be:23:ba:b5:1a:a0:32:c2:40:3d:e2:f9:36:55:
                    18:09:7d:da:fa:04:bb:63:23:51:1a:85:76:91:2e:
                    f2:81:dc:f1:23:15:89:60:55:54:de:c9:03:2f:1d:
                    51:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E8:EF:E0:DE:DB:ED:28:09:23:DF:75:7E:1B:1B:AF:DD:EA:83:BD
            X509v3 Authority Key Identifier:
                keyid:91:43:C5:F4:8C:77:A7:9C:98:5F:5E:53:62:E0:82:AD:54:E2:30:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUPF9Ix3p5yYX15TYuCCrVTiMGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ebc804-e3c6-40e6-bfbe-bdf364ba77cd/1/kUPF9Ix3p5yYX15TYuCCrVTiMGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:6e:d6:e2:24:64:fd:de:92:56:76:3f:85:99:58:f7:0a:
         42:a3:95:56:c7:b7:e5:70:1e:89:3c:ea:6e:56:12:80:ea:c5:
         ae:2e:06:73:6e:95:76:b4:ac:5c:62:a1:37:da:ad:d6:9b:3f:
         1d:e8:3a:39:e2:5c:1e:9e:dd:6e:91:94:da:5c:b8:de:ae:c5:
         b0:c7:7f:58:37:b7:2f:f1:b6:0e:47:42:d9:cf:80:8f:b2:eb:
         6d:22:60:22:22:b3:55:d7:c3:85:e5:10:f8:6e:d9:89:16:79:
         3c:b4:7f:ac:c3:03:89:ac:5d:ca:b0:af:fe:5d:7f:d5:bd:63:
         cb:51:ce:ce:c3:64:51:98:51:5c:ce:d2:1e:2e:90:cc:d3:4a:
         e1:91:f2:70:c7:8c:25:c5:4f:05:03:3f:d3:67:34:1a:8c:3c:
         d7:3a:13:69:64:c9:d9:9f:8d:4e:ca:76:d9:44:17:0e:92:75:
         5c:0f:e9:4b:ba:3d:d2:97:95:46:ee:3e:06:9f:ae:a2:d2:64:
         f1:d5:bf:52:3f:e0:3c:96:15:c9:8c:44:c6:aa:55:9a:42:52:
         48:6b:f9:f6:c9:d2:79:cf:2a:b3:61:f7:87:9d:b9:c4:80:9a:
         30:ab:e7:37:d7:26:3f:41:8f:9a:dc:af:e7:8d:aa:5e:57:f3:
         47:cc:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:07 2025 by rpki-client