Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
File:                     1e6pLEJFQFBGvpuMpsDCDmorFA0.mft (raw, json)
Hash identifier:          9SvDyNuJXP07e/IhtbQgfWuOxt+yhF7qth3Z93h7+xY=
Subject key identifier:   45:8A:54:A9:0C:F9:CC:86:27:D6:93:67:63:08:B8:D7:68:69:7F:3B
Authority key identifier: D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D
Certificate issuer:       /CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
Certificate serial:       0199FAD81DC510D9E2AC49B2E6A17D776917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
Manifest number:          04CC
Signing time:             Sun 19 Oct 2025 05:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:31 +0000
Files and hashes:         1: 1e6pLEJFQFBGvpuMpsDCDmorFA0.crl (hash: NYOIxb6oOYSfejc6XjUN2xuiQAlRmeFaD218kysGKFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:1d:c5:10:d9:e2:ac:49:b2:e6:a1:7d:77:69:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5eea92c4245405046be9b8ca6c0c20e6a2b140d
        Validity
            Not Before: Oct 19 05:01:31 2025 GMT
            Not After : Oct 20 05:01:31 2025 GMT
        Subject: CN=458a54a90cf9cc8627d693676308b8d768697f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:3a:49:29:d2:1b:3f:df:89:de:74:0e:eb:
                    f1:84:5b:b6:f3:f5:bd:a2:f8:c0:12:82:6a:7a:5d:
                    9a:92:0e:b0:42:5d:de:43:b8:54:2b:fb:8c:2d:8f:
                    ba:6f:c3:3e:a9:8e:fa:54:af:36:c4:c2:65:41:44:
                    34:19:77:d8:d1:73:d8:55:3f:f4:25:bb:c7:ea:b6:
                    40:78:98:30:21:0d:70:64:57:c7:3c:aa:3f:9a:b2:
                    55:07:a1:79:36:05:5f:91:38:06:0a:bc:a7:a7:15:
                    5e:64:85:de:5b:ac:24:e6:6a:db:0f:c6:50:76:92:
                    a7:57:0c:90:21:63:2f:71:4c:d8:a3:86:a0:92:87:
                    15:a6:16:01:5b:13:f8:1d:56:a1:3a:9f:e9:e2:58:
                    05:e0:bf:07:14:ce:59:16:9c:b8:a8:5a:bb:44:b7:
                    28:a3:cf:4b:bf:5a:7c:48:dc:5f:e0:a8:92:f8:89:
                    20:95:ac:7d:a7:8a:fc:86:34:cf:7a:de:fa:0f:e2:
                    48:c5:48:fa:c1:1b:32:56:ce:46:e4:63:e6:90:e4:
                    76:37:6e:60:de:44:e9:ef:9a:44:d8:d2:2a:f9:25:
                    67:b4:87:96:17:99:88:a4:85:26:62:aa:25:0a:2a:
                    ca:b1:35:ce:6e:86:f1:66:77:1a:8e:7e:58:b4:15:
                    c6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8A:54:A9:0C:F9:CC:86:27:D6:93:67:63:08:B8:D7:68:69:7F:3B
            X509v3 Authority Key Identifier:
                keyid:D5:EE:A9:2C:42:45:40:50:46:BE:9B:8C:A6:C0:C2:0E:6A:2B:14:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e6pLEJFQFBGvpuMpsDCDmorFA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e11303-e8dc-4d8d-807f-535523bd3ffb/1/1e6pLEJFQFBGvpuMpsDCDmorFA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:52:c4:59:11:13:8d:6a:7d:78:07:37:56:43:30:73:ec:
         f6:7f:f2:cb:2a:bc:cf:aa:72:28:59:69:49:56:74:8a:40:6a:
         91:95:44:40:4d:f0:76:15:9b:de:1a:f3:cb:8f:5f:9d:12:d1:
         e5:55:a7:98:20:fa:12:fb:6a:1a:e0:5f:ad:5d:2d:e9:98:b8:
         15:26:b7:9d:63:cf:02:ec:c7:f8:c1:93:ca:97:dc:48:54:60:
         59:cc:4e:d3:02:6c:12:f6:be:b3:dd:bf:fb:48:0e:2b:b0:62:
         50:fb:f0:74:a6:42:8a:32:60:ea:66:9c:76:dc:83:4b:95:15:
         96:f9:74:c2:73:5b:74:e4:2e:ab:6f:46:b7:f1:ba:12:63:06:
         f5:8e:20:59:36:25:c8:6a:76:50:e2:9c:ca:cf:94:23:ef:b8:
         a8:3e:de:9a:74:53:f6:e8:bd:37:2f:3b:4e:7f:2d:71:08:4f:
         81:cc:f6:81:4c:b2:b2:ea:83:0e:fc:72:cd:37:75:a1:d3:97:
         cd:1b:ef:3a:06:c1:78:f9:cf:90:3f:7b:3f:2e:7e:fe:54:b9:
         c9:c9:83:aa:8e:84:24:69:74:82:e6:7c:ed:8f:fb:3f:0e:b1:
         92:fa:fe:39:8e:60:5d:37:c8:99:67:7d:ad:53:bb:60:1f:27:
         a5:d7:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:28 2025 by rpki-client