Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
File:                     P2LKnF7__TIKvS2Px-j4Nee70es.mft (raw, json)
Hash identifier:          5zCLegQORr2B8ZrwRT/SSq7qMkaWmBlCy0Wyj6NiFj0=
Subject key identifier:   76:F9:97:39:6F:95:1A:6A:AE:DC:34:F3:30:AF:94:9B:49:E5:12:0C
Authority key identifier: 3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB
Certificate issuer:       /CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
Certificate serial:       0199FBEB47A2BC64FCBEA1E9CE0D76A64BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
Manifest number:          0ADB
Signing time:             Sun 19 Oct 2025 10:02:04 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:04 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:04 +0000
Files and hashes:         1: P2LKnF7__TIKvS2Px-j4Nee70es.crl (hash: 9Fe65dY9QpPBUYS/u4dl9kuJG6Q0kt0xBAIeNPch3MU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:47:a2:bc:64:fc:be:a1:e9:ce:0d:76:a6:4b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f62ca9c5efffd320abd2d8fc7e8f835e7bbd1eb
        Validity
            Not Before: Oct 19 10:02:04 2025 GMT
            Not After : Oct 20 10:02:04 2025 GMT
        Subject: CN=76f997396f951a6aaedc34f330af949b49e5120c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:89:a3:c0:09:28:9b:22:41:3d:b7:c6:c0:
                    4e:6c:29:c7:86:e2:dc:2a:f8:87:6d:25:f6:f0:26:
                    45:bd:7f:c1:56:74:9e:0e:a2:93:7d:3e:9a:61:8f:
                    af:09:48:fa:0e:55:70:f1:1a:b5:0f:09:61:0a:f1:
                    5f:89:29:f1:4b:63:52:22:54:d0:4b:10:65:e4:00:
                    65:19:6f:c3:6d:00:99:72:7d:24:af:53:2d:9c:1a:
                    5d:6a:06:06:fa:62:9e:18:7f:82:04:b3:bc:20:be:
                    9d:9c:5a:b9:85:c7:16:2f:e1:fd:16:d1:df:2f:fd:
                    06:df:df:46:59:2e:64:ae:d7:d3:79:3c:22:b1:a2:
                    cf:7d:92:4a:40:c5:95:1b:b1:43:b4:b1:3a:0d:e9:
                    77:a2:8e:3e:80:ee:fe:19:50:2f:75:0f:d6:f5:7e:
                    c5:d8:01:9c:53:25:57:96:f2:e6:80:8e:55:53:2b:
                    19:3b:e8:2d:36:c0:08:8a:de:c9:16:2f:f6:a3:5a:
                    3e:a1:8e:fe:1c:12:6c:44:fe:f1:64:b0:c5:01:68:
                    0c:30:aa:ba:50:1d:d7:c5:df:71:e5:26:d7:36:2e:
                    29:70:7a:84:2a:ad:64:af:05:42:3e:5f:96:af:53:
                    12:c9:29:93:8c:7d:6f:8f:81:4b:b9:27:ab:ce:ed:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F9:97:39:6F:95:1A:6A:AE:DC:34:F3:30:AF:94:9B:49:E5:12:0C
            X509v3 Authority Key Identifier:
                keyid:3F:62:CA:9C:5E:FF:FD:32:0A:BD:2D:8F:C7:E8:F8:35:E7:BB:D1:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2LKnF7__TIKvS2Px-j4Nee70es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a361cb-f8be-4b50-9869-009080e8dff5/1/P2LKnF7__TIKvS2Px-j4Nee70es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:74:70:55:ab:68:3b:5c:79:f4:47:59:a9:90:d8:5a:58:f1:
         fd:a1:3b:17:63:f8:d2:57:3b:a9:d2:fd:d0:c6:11:c9:53:5d:
         e1:dc:dd:b0:92:e4:83:e0:c6:8c:a9:5b:ae:3d:a2:d7:03:76:
         ce:df:4e:0c:e8:3d:07:96:a1:20:81:9d:88:10:68:03:a0:96:
         20:98:af:6b:1d:74:ab:9e:de:a0:f6:d5:a6:fb:45:32:1e:0d:
         fd:f0:37:3d:fb:82:c1:d0:c0:8b:b2:d7:5a:bf:14:7a:a9:6d:
         db:37:6e:5a:f6:2a:f5:78:34:4d:33:35:2f:9f:b6:63:8a:b6:
         e5:1d:c6:2c:b7:57:d5:54:b4:13:bf:aa:bc:7a:fb:54:f5:61:
         d9:1e:59:21:8c:15:e0:a9:cf:a5:26:c7:69:da:14:a8:12:14:
         db:a0:3e:03:95:5a:99:49:6c:eb:e2:bb:2b:06:58:b6:53:d1:
         96:b9:a1:c7:01:ed:5a:3c:df:93:8a:e6:6e:a7:69:e4:d8:c6:
         6d:72:56:5b:d0:31:48:45:03:26:69:d5:91:49:a3:f6:aa:27:
         fb:d5:6b:86:e5:fc:e6:44:c5:e3:bc:b8:f5:70:bd:09:43:9d:
         f4:db:33:aa:8b:50:7c:57:5c:f7:fc:3e:2f:4b:b6:c7:af:ab:
         0a:3c:17:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:19 2025 by rpki-client