Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File:                     4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier:          Z87hG37XffLmDKcQWUXipYa7paAcgOog8wGOPIfCTMg=
Subject key identifier:   69:84:75:6C:7C:74:E2:C6:04:6D:68:B2:22:B7:B1:E5:B0:B7:E5:30
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer:       /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial:       0199FC8F6F5A9DCE907329C06AB429470FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number:          0181
Signing time:             Sun 19 Oct 2025 13:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:22 +0000
Files and hashes:         1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: HjjsXeuK6OxSk9OJ05dqxyPvTl3gnMcuBoACSnr9PLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:6f:5a:9d:ce:90:73:29:c0:6a:b4:29:47:0f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
        Validity
            Not Before: Oct 19 13:01:22 2025 GMT
            Not After : Oct 20 13:01:22 2025 GMT
        Subject: CN=6984756c7c74e2c6046d68b222b7b1e5b0b7e530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:64:2a:bd:af:a8:7c:ff:a4:c1:98:86:4a:ed:
                    3c:52:a5:2f:a2:f7:57:e6:55:df:34:5e:34:e8:41:
                    c2:39:f2:be:9a:7b:98:7c:0b:cf:a6:3b:c1:99:9c:
                    a9:07:39:db:28:93:a3:28:37:20:9d:47:05:54:05:
                    09:0c:69:ee:01:d9:23:3a:b8:42:f4:90:a4:af:99:
                    c7:9e:20:8d:90:62:f3:52:02:78:dd:8a:d9:f6:e9:
                    d6:6a:01:7f:de:63:46:c3:c8:03:93:25:23:48:bd:
                    8b:90:9d:7c:7a:d1:5a:56:3b:9e:e6:e2:98:cf:c8:
                    28:c0:de:bf:f2:51:02:33:29:8f:fe:16:a7:01:08:
                    9e:75:84:23:e5:00:34:e7:d1:15:38:96:9e:3c:35:
                    52:53:16:2d:52:37:84:38:05:a3:a8:85:8e:3d:f8:
                    2a:0e:a0:bc:f9:db:fd:60:c3:9f:f3:81:0d:cc:65:
                    2e:55:89:8f:2f:85:78:ea:92:53:a8:f2:52:0a:e4:
                    61:36:45:b0:b0:c6:bd:a5:da:6d:84:91:40:56:f5:
                    bd:1c:87:2c:78:d8:3f:c1:de:70:1e:d8:ce:a0:9d:
                    8b:32:41:0c:93:53:08:4b:b7:7d:e4:a7:7a:3b:fe:
                    b3:dc:62:34:c1:52:6c:8b:99:d8:08:6f:76:94:0d:
                    27:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:84:75:6C:7C:74:E2:C6:04:6D:68:B2:22:B7:B1:E5:B0:B7:E5:30
            X509v3 Authority Key Identifier:
                keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f8:b2:3e:02:e0:1e:bb:3b:79:89:3a:fd:14:b4:30:6d:e0:
         a9:11:3e:5d:fc:8b:ea:4b:75:32:a5:70:d6:0f:4d:5a:65:85:
         58:28:4e:97:5e:9c:51:82:98:86:7f:8c:88:e7:d7:66:8b:65:
         a0:4a:84:dd:34:5a:4a:8d:f6:71:75:cd:8a:e6:d5:d3:4f:f3:
         78:ce:5c:a5:53:3e:55:37:d0:ab:f9:9a:6d:d8:b5:32:12:89:
         9d:a7:70:73:cf:1b:e5:66:4d:28:e6:1c:22:7f:1c:40:83:c4:
         a5:84:22:88:eb:52:52:72:a1:33:78:d4:d2:11:d6:a5:1b:c3:
         7f:27:5e:67:cb:44:bc:90:f4:64:13:ef:ee:5c:58:07:af:6c:
         d4:6d:89:57:e8:18:41:8c:71:44:0f:23:3b:b1:21:42:21:d3:
         77:e7:78:0b:ba:5f:74:a9:f3:38:f0:77:9f:f6:14:eb:7f:66:
         2b:4d:2a:47:eb:6a:8a:a5:ad:88:17:c7:21:7d:90:05:9f:34:
         86:3d:00:8c:83:24:cc:0f:39:01:0c:7a:53:e3:98:1e:d8:85:
         ea:bc:31:b7:4f:1d:bc:07:9e:3e:7a:5f:d6:70:8d:ab:62:ae:
         b1:37:98:8b:a3:91:73:13:18:bc:e9:ea:e9:12:8e:b3:f6:54:
         6d:70:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:33 2025 by rpki-client