Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
File:                     RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json)
Hash identifier:          smD7FOsFvbzPCzRq08VQv3TRzcCoNjqo9VS8DKfkKyQ=
Subject key identifier:   38:79:15:84:3F:EB:68:CA:CD:AB:60:37:E5:67:11:43:AD:54:F1:E6
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Certificate issuer:       /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial:       0199FB0EF5236637B41F5D96D007CEA0C967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
Manifest number:          013C
Signing time:             Sun 19 Oct 2025 06:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:25 +0000
Files and hashes:         1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: /HD1xS+3iopNJ9odHF8h7pnz6eT/3li5J9u7OOluCo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:f5:23:66:37:b4:1f:5d:96:d0:07:ce:a0:c9:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
        Validity
            Not Before: Oct 19 06:01:25 2025 GMT
            Not After : Oct 20 06:01:25 2025 GMT
        Subject: CN=387915843feb68cacdab6037e5671143ad54f1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5b:b9:bb:80:e1:71:9f:b2:50:cd:6b:d4:2d:
                    1f:2a:e6:01:5b:3e:ab:cb:bb:7c:4e:c1:ab:00:47:
                    58:1f:30:04:7d:cf:98:b7:12:9c:f2:15:0e:e6:0b:
                    6f:96:9f:44:38:fb:24:da:8e:4c:64:ff:e6:85:b7:
                    16:52:c4:3e:ec:0d:9a:29:46:b8:2f:e6:16:e8:cf:
                    fc:8c:6e:be:33:81:37:e0:68:f0:7e:55:dc:cd:c2:
                    1a:ef:00:e6:30:e6:f1:36:9b:df:e6:4a:6d:4b:4a:
                    d6:e3:ff:f6:bc:05:21:e9:0d:c0:7b:9d:f4:2d:49:
                    36:ce:bd:6a:9e:1a:47:60:c6:eb:7a:20:f5:52:65:
                    cc:c2:da:37:06:db:a0:75:cb:97:4f:e8:47:09:56:
                    cb:78:ad:05:c6:75:ce:11:8f:f7:cd:00:6a:e3:4b:
                    ac:99:0a:9a:28:b3:8d:27:de:26:9b:dd:4f:b2:73:
                    ce:5e:b9:3c:63:01:f2:fa:a2:b3:0b:a2:be:ed:ed:
                    2b:2b:2c:d1:90:e8:11:73:d3:99:12:a0:e6:23:7a:
                    b2:85:a9:b5:4f:e3:50:f6:11:54:97:7e:7a:cb:21:
                    04:90:ad:04:b4:f0:f8:6d:e9:d6:2e:29:0a:4d:e8:
                    a6:91:29:a7:1a:94:8d:36:c9:1e:32:8a:de:a2:9d:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:15:84:3F:EB:68:CA:CD:AB:60:37:E5:67:11:43:AD:54:F1:E6
            X509v3 Authority Key Identifier:
                keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d5:24:d2:07:c4:50:a5:b5:cf:c2:f1:6f:9a:c4:5f:67:47:
         98:93:02:8c:dc:a0:a1:0e:3a:91:4c:0b:aa:77:b6:74:18:f2:
         50:e3:cc:db:c1:66:6d:2a:93:8f:6e:9c:85:92:17:92:81:cf:
         22:57:57:15:0b:0e:10:89:4a:c0:b6:50:ca:aa:a0:5a:3e:d3:
         f7:9e:a0:3c:20:d8:63:9d:6b:b3:71:3a:b8:7e:54:53:5d:85:
         62:8d:64:c8:7e:81:4b:e0:e7:65:86:18:98:85:dd:1d:98:98:
         b9:12:2b:a1:2b:cd:51:64:fe:27:98:3b:05:09:16:f2:b8:1c:
         ba:e7:d7:40:bd:e0:da:a3:dd:7e:4b:9c:71:08:0c:2e:1e:e8:
         57:f5:89:f4:82:ee:22:72:0d:0a:98:ab:3d:d5:9c:ec:a8:57:
         69:ed:7b:1d:6d:02:38:18:03:36:47:fa:f4:34:5e:9e:a6:b8:
         80:01:62:32:e4:7d:4d:d2:b3:d3:91:aa:c8:85:8e:5c:f6:ab:
         a3:6c:01:9e:e5:56:9b:e3:41:50:f8:f3:d5:95:a8:58:d9:c2:
         b5:2d:84:ee:f1:84:41:fe:65:e2:af:c7:61:af:d4:8f:d0:29:
         32:7d:87:df:25:75:e3:a4:62:ca:8a:e7:d1:95:e5:a7:61:09:
         ac:ef:be:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:05 2025 by rpki-client