Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File:                     kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier:          QEt/pDH/JIOdfVTr9+HdwT46VLMVbuA5kRxRE9ObRZA=
Subject key identifier:   A8:F9:14:F2:6F:9D:21:9E:BB:D5:41:04:71:4E:78:54:53:70:ED:E6
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer:       /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial:       0199FC8F698AA63F041DA4D4FC771C5043E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number:          16DD
Signing time:             Sun 19 Oct 2025 13:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:21 +0000
Files and hashes:         1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: R9xnxkXN2PTT3VmRYTcfdt4tp2eHk2hYwF57dF8ic9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:69:8a:a6:3f:04:1d:a4:d4:fc:77:1c:50:43:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
        Validity
            Not Before: Oct 19 13:01:21 2025 GMT
            Not After : Oct 20 13:01:21 2025 GMT
        Subject: CN=a8f914f26f9d219ebbd54104714e78545370ede6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:5b:65:1f:66:05:a9:36:7d:4b:50:f4:07:
                    aa:94:5a:4c:40:5b:8c:b0:4c:ee:92:81:34:1d:aa:
                    e6:34:fd:99:b8:e3:1d:f3:b6:8d:01:09:11:e8:51:
                    6e:72:bc:20:b3:ca:16:af:3c:6e:db:18:fd:8c:e7:
                    67:f8:b8:8a:60:d8:cb:5b:ab:50:53:54:65:9d:f7:
                    47:c8:a8:c2:58:bc:c0:9f:6c:e2:ac:a9:16:f9:b7:
                    41:42:e5:a1:bd:14:f3:bd:9d:06:4d:ff:5b:1d:a3:
                    87:31:02:12:c7:f7:28:9d:b8:d5:4d:13:d7:61:55:
                    03:b2:5d:9f:2f:2d:d9:3c:4d:10:48:f9:bb:99:04:
                    e6:08:e0:c4:d2:4a:1f:ec:c9:b7:d7:5b:de:62:c7:
                    91:8b:8d:b1:a7:88:42:e3:33:37:9a:4d:e1:7d:0b:
                    df:a0:d4:43:c3:a8:62:45:5f:b6:46:f6:fb:1f:b2:
                    12:e7:ff:54:94:30:46:03:24:6d:88:94:25:1f:5b:
                    11:61:41:4e:b4:58:e2:16:38:37:7d:11:0a:90:28:
                    5e:9d:4b:72:03:4a:39:5e:09:7e:b7:42:2d:41:df:
                    b7:be:e8:3c:6f:d2:6d:4c:1d:7e:3d:c0:4a:03:e4:
                    8a:15:67:00:4a:de:e2:1b:62:ed:c0:b7:39:0b:3b:
                    59:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F9:14:F2:6F:9D:21:9E:BB:D5:41:04:71:4E:78:54:53:70:ED:E6
            X509v3 Authority Key Identifier:
                keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f0:b4:9d:ca:6c:f8:5b:bd:94:22:e8:8a:d7:76:88:d0:59:
         77:b3:e4:ea:85:d0:ea:ba:10:26:23:f9:8e:9d:92:ba:00:4a:
         63:18:e7:68:ab:71:7c:73:8e:30:0f:70:21:64:94:0f:27:e7:
         4a:1e:6b:d9:b1:38:4d:c3:bb:b5:77:c1:9d:91:0d:8f:b2:c0:
         bf:55:63:ca:4f:6b:40:87:0e:06:93:3e:3b:ef:07:d1:13:f2:
         f6:71:b4:77:f7:00:46:d5:de:dd:82:4d:9c:7b:7f:51:98:65:
         9a:39:c6:65:93:7d:30:b4:5e:8f:c6:5e:e1:ba:c9:0d:17:92:
         37:db:fe:d6:a0:07:ca:14:9d:cb:b1:bb:4e:20:6b:a1:77:1d:
         7d:28:86:ed:32:49:fe:4c:90:02:c1:37:6b:42:ec:39:6e:da:
         0d:47:d2:19:65:0f:56:f9:8e:28:f2:49:39:f6:e5:af:64:37:
         8c:67:38:41:e9:12:45:06:48:55:c5:9b:58:ad:f9:28:89:16:
         1c:15:19:67:a6:51:5e:55:30:d1:b2:e3:fb:9c:82:55:a9:aa:
         2d:2a:93:0a:d9:5f:b1:8e:25:cd:15:a3:14:df:ea:d6:6a:eb:
         ee:54:d0:8a:5f:bf:d7:6a:c3:97:c7:74:49:00:c7:ce:4e:94:
         ea:c4:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:27 2025 by rpki-client