Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
File:                     Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json)
Hash identifier:          F/SB9i7XIdvY0iDqIfy/uPDKzJ+O7ioUdbvBf8n4PME=
Subject key identifier:   F8:56:3C:A0:B8:9D:F8:92:B5:3B:B1:93:56:28:89:0F:28:98:0A:1F
Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A
Certificate issuer:       /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
Certificate serial:       0199FEB4B3B1830DBF59910D512149B9ED95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
Manifest number:          0EAD
Signing time:             Sun 19 Oct 2025 23:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:19 +0000
Files and hashes:         1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: +SKb9SftLVWo9ZMWQ4+POkeHQ92Prc03AeND2EoaWKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:b3:b1:83:0d:bf:59:91:0d:51:21:49:b9:ed:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a
        Validity
            Not Before: Oct 19 23:01:19 2025 GMT
            Not After : Oct 20 23:01:19 2025 GMT
        Subject: CN=f8563ca0b89df892b53bb1935628890f28980a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:1f:2c:bc:57:57:29:01:18:8f:f3:95:c5:
                    aa:af:ed:18:4b:c3:a7:3c:61:cd:7c:1b:9f:3f:04:
                    f5:52:3d:72:bd:c3:91:58:fc:06:e8:62:c8:73:d2:
                    81:5c:2e:a6:30:cd:d7:86:35:9b:84:60:05:49:a9:
                    b2:16:7d:bc:9b:5e:b8:42:66:bc:9c:3a:c7:37:96:
                    78:18:96:9e:e0:f6:ea:c0:7a:b1:97:f7:be:c2:1c:
                    31:82:13:8e:90:80:a9:83:b9:6a:eb:c7:ac:12:e0:
                    0c:97:2b:21:75:76:36:b1:70:4a:61:91:5b:5d:e6:
                    53:bc:dc:62:d7:09:4f:9b:df:69:26:d0:93:2b:37:
                    27:75:83:f5:99:f7:64:f2:c7:fe:c1:74:b3:46:2a:
                    1e:c2:ac:f8:74:ab:75:75:bd:cd:15:02:77:8b:a5:
                    0f:27:75:3a:d9:25:66:f9:25:84:d0:34:b9:e8:63:
                    81:c3:3a:86:10:ea:de:2d:7f:25:d0:42:68:97:78:
                    81:de:41:43:86:40:6b:5b:8d:52:60:c2:c4:e6:da:
                    69:79:89:12:d3:38:a8:dc:46:7c:68:0b:0f:d6:c3:
                    c2:64:d2:e4:4f:b1:0f:ef:7f:3a:e9:64:fb:7c:50:
                    2a:fc:c0:55:0c:a2:44:71:78:0f:f6:59:55:9c:90:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:3C:A0:B8:9D:F8:92:B5:3B:B1:93:56:28:89:0F:28:98:0A:1F
            X509v3 Authority Key Identifier:
                keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:f1:0d:d9:7b:47:51:3b:8a:5a:01:d0:57:78:bc:c2:23:
         ee:cf:20:37:d1:e0:ba:0d:98:55:bb:bb:47:9c:7b:b3:ff:28:
         fa:1e:57:6a:54:c0:2f:e4:4a:c0:95:8a:23:76:77:84:74:da:
         bb:7c:08:19:7e:c6:61:fe:30:a3:bd:3f:ba:f8:2f:f6:51:48:
         50:23:a5:56:82:0b:4d:b7:ad:13:39:08:e7:2c:3e:e7:54:bb:
         57:0b:01:3c:59:a3:ae:d2:40:e0:98:c4:6e:09:f9:5a:1e:3e:
         e0:8d:9f:d4:d7:d2:45:16:97:34:22:26:e5:c8:10:92:f3:a3:
         d3:b1:e0:36:56:f1:8b:d5:97:80:2a:51:c5:b8:81:9c:17:c9:
         ed:ba:5d:95:b3:4d:3c:46:59:4e:26:b2:33:f6:b2:84:68:21:
         82:3d:33:3e:d8:9b:3a:fe:3b:02:f7:b0:c4:b9:fc:f7:8c:77:
         96:39:b3:ef:1a:0c:ba:b5:f1:84:5b:67:b4:da:09:ff:e1:03:
         70:0a:47:2b:b8:f0:3f:f6:81:da:43:cb:86:0f:d0:36:bd:6a:
         62:55:ed:3b:de:43:c7:1f:15:78:22:50:01:9b:9a:93:4c:20:
         49:7f:11:2a:a1:9e:d2:81:b6:55:00:1e:37:a0:a5:f6:e5:36:
         e9:b1:c9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----