Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File:                     Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier:          13dpI1SSMVy27eylz4g0oiLFc5+Lh1AaCNoRS5uXf2Q=
Subject key identifier:   D1:61:F3:52:FF:97:3E:FE:36:EE:09:19:EE:AB:B7:87:AC:9D:D1:89
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer:       /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial:       0199FE46FEC06613857CC11F05473B66C90B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 21:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:29 +0000
Files and hashes:         1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: m92BC7IzeLSVOqhHYFkZb3adK9ylrHeWHZrLeoSCgjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:fe:c0:66:13:85:7c:c1:1f:05:47:3b:66:c9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
        Validity
            Not Before: Oct 19 21:01:29 2025 GMT
            Not After : Oct 20 21:01:29 2025 GMT
        Subject: CN=d161f352ff973efe36ee0919eeabb787ac9dd189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:6e:96:eb:34:4d:75:56:f2:55:64:de:a9:
                    3b:7c:c0:e2:83:a1:30:1e:96:9e:2d:0d:3a:3f:e7:
                    1a:b9:5c:68:09:23:70:7f:4f:6a:14:dc:fd:dd:b2:
                    03:86:07:94:7d:b9:eb:28:db:0b:02:db:5c:ea:84:
                    15:b6:dc:e4:7a:8e:7b:f7:6e:ca:92:33:17:0e:bc:
                    9d:fd:e1:0b:94:5e:d3:c7:8a:e0:c6:83:4c:1b:04:
                    81:f5:bd:09:4d:26:3b:c7:db:5f:98:e3:72:da:2e:
                    03:8a:6f:a9:77:98:62:58:a0:77:c5:b1:5a:3f:a7:
                    c4:66:ae:3c:b9:24:af:33:b7:8c:eb:c0:76:c0:da:
                    27:55:1f:30:48:16:22:3e:6e:92:2b:4b:84:f0:56:
                    03:e0:fb:20:47:f0:1a:fd:d8:a6:2d:66:95:2f:ec:
                    97:1c:27:27:bc:f2:db:b4:94:de:6c:79:7d:3a:58:
                    90:d7:4d:b0:01:00:7a:ad:0c:43:2e:37:21:c4:30:
                    49:32:5a:e9:65:56:e6:08:dd:81:32:e8:00:b9:20:
                    0d:ea:a2:50:53:cd:30:98:34:96:3d:a5:b0:4b:71:
                    39:54:37:37:07:17:49:8f:be:5d:07:6d:b8:29:63:
                    6e:5c:ff:f9:a9:ef:63:94:c7:19:fa:78:74:80:32:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:61:F3:52:FF:97:3E:FE:36:EE:09:19:EE:AB:B7:87:AC:9D:D1:89
            X509v3 Authority Key Identifier:
                keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4d:58:a0:c5:47:28:cd:06:4b:df:16:f3:7d:47:e6:68:2e:
         31:a1:bf:2f:f1:69:66:d4:a2:98:17:2a:39:7d:2f:7c:1b:eb:
         15:83:70:8d:a0:e9:6b:da:24:ca:3b:4a:ae:6f:3c:3e:fb:28:
         0d:98:d3:7b:59:a0:3d:0f:c5:77:6e:0b:a5:69:e0:b3:7c:98:
         07:11:de:b5:03:75:cb:21:d8:67:d8:c6:01:15:a2:3b:17:23:
         ed:94:26:67:4a:10:57:5a:e9:4f:44:e7:b5:23:b1:a2:54:5d:
         32:0f:54:61:73:71:28:98:61:97:eb:fd:dd:0f:51:ad:57:c3:
         1a:30:5a:08:fe:ff:94:14:c3:6e:bb:bc:1d:2d:39:84:6b:73:
         61:f3:27:c3:d6:07:9c:df:d7:1f:a0:7b:7d:d2:4b:6f:b9:8a:
         4c:29:4a:5b:d7:cc:9f:3d:02:4e:1d:0f:9a:4c:03:45:b2:7b:
         f9:95:6f:93:30:35:ff:a4:77:d4:f2:16:65:7b:de:e2:25:77:
         c1:57:2e:d3:31:12:7e:31:c9:c5:20:8f:1a:dc:1e:b7:89:de:
         e7:12:b2:10:df:ac:55:59:72:a0:9f:2c:15:c1:9f:4e:80:8d:
         1f:bc:44:a2:a7:b1:a7:af:d0:83:bf:55:65:2e:2b:72:b5:b1:
         c7:2f:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:15:51 2025 by rpki-client