Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
File:                     txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json)
Hash identifier:          /CAYyp/r2QP3IiVBzWYosb0z4gCpbbP5BgKyzzoYVuk=
Subject key identifier:   53:0F:48:B9:F7:53:F7:03:B5:02:9B:CD:0B:67:30:27:DB:81:0A:DB
Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
Certificate issuer:       /CN=b718859d412f9b5872a58977320d2d083bd7a04b
Certificate serial:       0199FBEB481E2CBF7B2A1397C81D89F2FF93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
Manifest number:          10CB
Signing time:             Sun 19 Oct 2025 10:02:04 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:04 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:04 +0000
Files and hashes:         1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: HAgcn+8UqAVj7iK7bO6DNhpgC9EJGbzvcgLZN4P2XRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:48:1e:2c:bf:7b:2a:13:97:c8:1d:89:f2:ff:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b
        Validity
            Not Before: Oct 19 10:02:04 2025 GMT
            Not After : Oct 20 10:02:04 2025 GMT
        Subject: CN=530f48b9f753f703b5029bcd0b673027db810adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:69:0a:8c:67:98:f3:d3:68:f0:16:81:7a:
                    5c:b0:c1:d7:bc:3f:92:8c:d0:1b:ad:f5:fe:96:a0:
                    b2:d0:35:20:11:c3:52:9b:e5:ad:a6:be:b6:a1:74:
                    ee:37:ea:58:ac:2d:c5:0b:8a:36:cb:e9:04:ec:c9:
                    8a:17:c0:e7:af:5a:dc:9a:1e:a7:4c:b8:72:8a:91:
                    02:0b:6d:da:5f:d2:c3:00:0d:56:58:ac:08:f7:86:
                    ca:67:9c:df:23:d3:b8:67:ce:57:ec:eb:6c:85:c9:
                    38:02:e6:00:61:a0:c5:7e:b7:ef:62:29:26:cf:f7:
                    00:61:21:9e:0e:cc:df:5f:19:a1:e0:58:41:37:a9:
                    2f:be:cd:c1:56:23:68:bf:67:c8:f5:0b:c9:90:78:
                    6b:3f:26:3a:c7:50:0f:52:a4:57:0a:41:fb:4c:fe:
                    7c:60:08:d2:88:52:d3:e7:ad:1d:3b:d9:56:4b:14:
                    3d:5e:24:89:11:14:83:d1:77:fc:79:70:d4:31:14:
                    36:37:ed:61:1a:15:e6:b9:84:9e:b7:1a:20:ef:1f:
                    a5:2d:9a:ee:f5:a0:86:7e:d4:8f:90:bc:8a:76:d0:
                    84:64:02:e8:d4:d8:66:99:0f:7a:9b:6f:6a:7a:98:
                    e6:b2:a4:e5:1a:f4:67:eb:75:68:42:4e:46:b6:4b:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:48:B9:F7:53:F7:03:B5:02:9B:CD:0B:67:30:27:DB:81:0A:DB
            X509v3 Authority Key Identifier:
                keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:df:97:52:46:19:bd:f0:ae:a4:25:39:bf:84:be:ce:32:65:
         fe:71:4c:3d:8f:07:06:27:fa:de:9c:e6:92:4c:1a:de:88:1b:
         87:08:17:6a:6d:5e:55:1e:a4:18:af:43:11:90:2b:b5:09:23:
         33:ac:5a:ad:47:21:ee:e7:60:1e:36:03:ad:9d:12:9a:e5:aa:
         05:66:c3:8b:5a:f7:32:71:e6:4c:2a:67:32:96:a0:83:7b:09:
         ba:43:36:eb:18:b2:ab:f9:a6:39:96:58:ac:b8:47:19:d4:c8:
         f0:76:83:a0:ff:0f:5c:da:b0:5f:95:14:a3:97:cd:e8:c7:3b:
         22:3b:3f:70:2a:a8:e7:78:11:06:3b:c2:f2:a0:05:38:1e:e5:
         3b:2b:95:01:41:f7:ae:4b:36:c7:c3:66:ee:6a:05:9f:5f:72:
         0b:9a:7f:23:99:5b:6c:d6:16:58:ba:63:76:3c:49:9a:9f:91:
         38:22:d1:6d:97:9a:74:4e:53:a1:66:38:11:8a:cd:55:8f:97:
         22:e3:5c:06:0f:51:b0:33:d6:42:2b:fa:74:11:0e:80:a7:8d:
         0a:33:65:9c:f9:61:b3:cc:3c:7b:60:7a:11:fd:23:07:62:a5:
         99:30:cf:c6:0a:7c:f5:47:e2:0f:c3:2b:99:da:97:d6:7f:44:
         a0:82:63:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:48 2025 by rpki-client