Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
File:                     mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json)
Hash identifier:          uHLWA6+/Dha7hCSvx/zuSswxMPLfhxImBX5036jNflw=
Subject key identifier:   58:A2:71:3E:CD:AC:8B:86:A5:11:CF:30:93:A3:8B:E1:42:AB:80:1F
Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
Certificate issuer:       /CN=9aa664662db37faf9cb53809f8189f64542a8f64
Certificate serial:       019A02FEB4892E7BC9B5EC5D651D22773D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 19:00:38 +0000
Manifest this update:     Mon 20 Oct 2025 19:00:38 +0000
Manifest next update:     Tue 21 Oct 2025 19:00:38 +0000
Files and hashes:         1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: mM9spU/GpgCsAHA3yidwkPujHLB0jVDYZ4RcvYKbqs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:fe:b4:89:2e:7b:c9:b5:ec:5d:65:1d:22:77:3d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64
        Validity
            Not Before: Oct 20 19:00:38 2025 GMT
            Not After : Oct 21 19:00:38 2025 GMT
        Subject: CN=58a2713ecdac8b86a511cf3093a38be142ab801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:74:e3:04:24:0e:86:06:dc:8b:8a:07:17:
                    80:fb:3c:4c:a4:8d:5b:a0:b0:92:fe:b8:15:7d:d8:
                    98:fd:5a:6c:9e:14:2b:4b:fc:fc:89:c9:e4:4c:6f:
                    d8:a8:8a:e6:20:f7:f8:de:c0:d8:8e:f3:fe:f2:6b:
                    94:bf:98:92:46:ef:db:f9:63:83:24:f7:77:3e:14:
                    30:eb:96:e9:47:88:79:e8:91:a6:65:16:35:f4:36:
                    f4:2e:7f:d3:ef:ee:06:59:fa:ad:3f:63:c6:f0:06:
                    e5:1d:fa:71:b4:71:f0:e6:c1:01:b0:74:48:46:bb:
                    c1:c1:72:c3:9d:cc:70:77:d2:ec:19:90:2d:8f:b4:
                    19:7e:83:a2:5b:1b:ff:90:2d:4c:e3:77:60:f2:b4:
                    5e:3f:c3:da:dc:16:3f:63:e5:29:08:a9:18:04:13:
                    58:cf:40:57:f4:07:3f:40:b5:d6:b5:b6:58:41:4a:
                    b8:48:39:c4:7e:27:bf:32:fb:94:83:54:f9:43:af:
                    ef:16:65:9b:0e:ef:b4:ec:59:22:1c:a8:af:1d:97:
                    00:e2:a3:d9:50:56:ab:9b:a0:fa:0e:e6:bd:07:5f:
                    18:c8:d5:4b:9b:24:2f:e2:a6:11:43:bb:b6:35:da:
                    14:59:d7:52:cb:eb:12:bb:55:ec:9f:b4:43:69:80:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:71:3E:CD:AC:8B:86:A5:11:CF:30:93:A3:8B:E1:42:AB:80:1F
            X509v3 Authority Key Identifier:
                keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:fd:8a:e5:3f:38:e3:1d:7f:f7:a6:09:93:6b:48:70:dd:
         75:91:0c:ec:08:a7:bd:cc:52:4c:dc:9d:11:05:46:16:7a:21:
         f1:80:c7:3e:89:72:85:a2:1a:cb:de:4d:34:5d:4c:1e:47:76:
         fd:c1:1b:03:9f:fc:7a:ce:f2:b3:e0:56:a5:6c:5c:3a:97:11:
         5d:6f:42:d4:f3:25:84:7b:7c:de:e3:16:a4:23:4c:99:cb:1f:
         e2:83:8a:8b:64:a3:bf:7c:9d:20:7a:5b:6b:2e:47:68:b2:c3:
         6d:77:4b:bd:18:d0:2c:ea:ff:67:67:8d:b6:53:d7:cc:e8:c5:
         cd:07:b2:86:89:cb:d5:9f:25:ed:17:43:2d:94:86:8c:41:e9:
         74:e2:03:b0:71:78:0c:4f:fc:e5:2f:35:fa:ea:24:6d:15:17:
         75:11:04:06:d5:29:0e:e5:b7:22:d8:4b:86:c9:ec:cf:02:f5:
         89:0d:db:94:81:7d:04:48:c5:4b:d4:ec:90:2b:51:16:d6:a9:
         01:77:ca:22:f0:33:13:81:b3:e3:3c:b5:fe:94:4e:e4:46:ae:
         38:f8:0c:9a:ba:01:f1:b9:cf:ed:b0:0d:8f:a1:41:c4:70:20:
         1c:27:12:51:6d:42:3a:35:a6:49:09:c4:f1:4a:c8:02:06:de:
         49:6b:98:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----