Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
File:                     XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft (raw, json)
Hash identifier:          kkQUHb6BzengS5OLId2hYY/XDHgTFceG/YDJPSRNctE=
Subject key identifier:   87:C3:B8:FA:3E:F8:62:51:99:95:8A:EA:32:23:C1:A8:73:E3:67:D0
Authority key identifier: 5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33
Certificate issuer:       /CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
Certificate serial:       019A00356A3A4F2971FC55984556CC31006C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
Manifest number:          11A9
Signing time:             Mon 20 Oct 2025 06:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:31 +0000
Files and hashes:         1: XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl (hash: fU1tOkOBWrrw7XqLw0/JzXhRcaNaAtFqTE/T0Vtw5Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:6a:3a:4f:29:71:fc:55:98:45:56:cc:31:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cfc0f9bf7a44ab3567bacf929ee4c9c05753033
        Validity
            Not Before: Oct 20 06:01:31 2025 GMT
            Not After : Oct 21 06:01:31 2025 GMT
        Subject: CN=87c3b8fa3ef8625199958aea3223c1a873e367d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:55:ab:9f:fc:2c:ee:22:d2:ae:ff:32:1c:
                    fc:04:89:ae:ff:d5:32:34:68:9a:16:97:27:54:0b:
                    7e:15:0d:51:9e:fd:8c:59:55:b7:d5:5b:49:3c:e1:
                    32:6b:72:3e:3c:bc:97:13:14:bd:12:5b:b5:57:32:
                    ed:92:6f:ff:7e:2b:7d:44:a5:c0:cf:2d:d5:64:8c:
                    b1:d8:cc:df:99:2f:f0:f2:1a:08:13:9f:e7:97:f5:
                    97:80:5c:6c:7d:01:35:d4:dd:ea:f9:b5:95:34:1c:
                    66:cd:99:13:55:d4:5d:6f:3e:0b:69:66:08:ea:27:
                    18:f4:40:57:a5:19:bb:83:22:71:52:6b:e8:c0:a0:
                    59:ae:cf:de:18:94:1e:4a:97:a0:92:f4:33:76:82:
                    4d:27:9c:40:68:62:c9:e3:89:65:3c:af:07:4c:75:
                    1b:49:94:c6:d8:a6:9c:dc:d0:5c:b1:d0:79:56:96:
                    9c:bb:91:dc:d1:cc:b8:0c:f4:c4:42:81:3c:7d:7a:
                    f2:0b:47:3e:8b:30:13:54:6a:5a:b9:45:91:41:a7:
                    6d:19:79:53:d0:60:ac:0d:6b:9e:e0:32:cc:bb:38:
                    87:c1:b7:e0:c6:10:45:59:21:90:b6:f4:66:bb:74:
                    e6:20:a7:66:e0:23:7b:43:87:be:6b:ee:f2:79:d6:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C3:B8:FA:3E:F8:62:51:99:95:8A:EA:32:23:C1:A8:73:E3:67:D0
            X509v3 Authority Key Identifier:
                keyid:5C:FC:0F:9B:F7:A4:4A:B3:56:7B:AC:F9:29:EE:4C:9C:05:75:30:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/e2fa5c-8847-44e4-a95d-61e8dc1f1459/1/XPwPm_ekSrNWe6z5Ke5MnAV1MDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:4a:63:89:94:40:e1:8e:b5:50:de:f0:cb:a5:ce:ef:d4:32:
         13:14:8a:6f:f7:fd:36:78:0e:ee:ca:a6:e5:2f:2a:72:8a:fe:
         a0:1b:ae:6d:5b:f3:ac:25:13:54:0d:0d:9e:a4:30:9d:cd:52:
         83:fc:1e:c9:06:f8:63:4f:9b:0a:e9:cb:27:84:ce:30:60:e0:
         83:fe:1c:9a:90:4a:d3:e8:a0:75:e5:45:f3:63:23:96:06:93:
         35:88:07:06:d9:58:57:1b:4f:0a:32:a7:44:de:c8:4f:3f:26:
         79:9b:61:bc:98:0f:43:62:44:a2:6f:c1:0a:dd:d3:9f:50:26:
         91:1d:25:d1:01:eb:0e:84:cf:15:a1:c8:3f:53:fb:72:42:be:
         7d:b7:b4:76:83:47:e3:dc:e9:80:75:9b:a4:1b:2b:cd:b0:cf:
         a5:f2:15:c9:1b:9c:0e:73:e4:93:1b:13:72:5d:e2:be:97:d2:
         37:11:b0:81:a6:b9:d5:59:da:6b:de:64:35:67:af:93:0f:9d:
         a6:9a:fe:ca:6d:1b:20:2c:9e:ba:9b:1d:11:57:5d:c8:0c:32:
         cb:77:6f:17:f6:15:c7:e9:69:df:3e:da:4a:ab:8d:75:36:60:
         8d:58:20:17:b0:b8:28:21:e4:18:98:b3:b2:95:12:d6:1d:11:
         d2:b1:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:06 2025 by rpki-client