Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
File:                     l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft (raw, json)
Hash identifier:          AZFxozKOPh+vhYpJUS/TeeOrdypDxuOIhStIbpE1JRE=
Subject key identifier:   4F:E0:E3:61:B6:5E:D2:48:2B:7D:32:D3:01:0B:49:9F:44:4C:26:89
Authority key identifier: 97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67
Certificate issuer:       /CN=97e271a1d447e410630fac3a6406e04a83067c67
Certificate serial:       0199FDDA359F62D1951A21F222381EE4984F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
Manifest number:          06E7
Signing time:             Sun 19 Oct 2025 19:02:40 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:40 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:40 +0000
Files and hashes:         1: l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl (hash: v6CrFVxyDwfcFp2Lm/9ildIpimN2VSuAX4eXv1qEP+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:35:9f:62:d1:95:1a:21:f2:22:38:1e:e4:98:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97e271a1d447e410630fac3a6406e04a83067c67
        Validity
            Not Before: Oct 19 19:02:40 2025 GMT
            Not After : Oct 20 19:02:40 2025 GMT
        Subject: CN=4fe0e361b65ed2482b7d32d3010b499f444c2689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:02:43:39:9b:22:df:78:6b:2c:6a:cd:13:
                    be:ed:f3:52:f3:ff:9d:98:43:20:4a:23:dc:c1:1a:
                    60:75:8f:d4:7f:02:a1:fc:5f:63:2c:ab:73:e1:6c:
                    a4:5e:e0:64:80:ef:03:04:1c:07:50:29:63:42:05:
                    c9:b7:5a:f2:13:e9:bd:c6:d0:99:c9:de:b0:9d:72:
                    32:0f:b2:f5:8d:dc:69:e5:09:13:ee:ac:02:ec:b7:
                    59:54:80:aa:8f:f6:8b:e0:5e:04:2c:b6:d2:c2:e5:
                    e9:5f:88:29:21:f7:e4:38:10:b4:6e:12:2d:7a:5e:
                    30:09:02:a9:8a:49:9e:1d:22:29:f1:b6:4b:e9:8e:
                    be:47:b7:db:70:f5:ed:e4:e9:ca:5e:65:eb:93:aa:
                    54:67:4f:53:48:f1:55:60:da:0f:ad:ef:be:05:bf:
                    4d:a6:65:a7:0c:95:e4:5f:3d:d7:fd:e8:36:a3:da:
                    5d:fd:f5:d2:9b:f1:9a:d7:fd:d6:4a:8a:16:94:27:
                    01:88:c8:e7:bc:f1:d8:ba:70:45:0c:cc:2a:7d:f3:
                    5b:67:d8:db:4b:8d:ea:10:bb:d6:dc:90:c8:d5:e6:
                    81:44:db:28:f7:c8:92:d2:5c:e7:67:00:9f:cc:e5:
                    12:d2:fc:69:38:3a:ab:1f:37:3e:80:35:0b:2d:23:
                    73:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E0:E3:61:B6:5E:D2:48:2B:7D:32:D3:01:0B:49:9F:44:4C:26:89
            X509v3 Authority Key Identifier:
                keyid:97:E2:71:A1:D4:47:E4:10:63:0F:AC:3A:64:06:E0:4A:83:06:7C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l-JxodRH5BBjD6w6ZAbgSoMGfGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/b94967-dac2-4355-a4f1-5ff262ac87ba/1/l-JxodRH5BBjD6w6ZAbgSoMGfGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:42:3f:08:d1:4f:a8:5f:47:db:bd:e5:d2:14:a5:49:9c:25:
         ce:d8:03:5d:18:ef:39:c8:0b:c5:6b:44:e6:02:d2:0d:ef:c0:
         01:ef:7a:16:46:a3:5d:a6:c3:f8:67:92:18:9d:80:f1:8f:ea:
         fd:27:1f:f8:9e:e2:5f:fb:f2:14:bb:4f:9e:60:c3:34:19:14:
         2b:ca:ae:d1:de:ac:71:f0:54:06:db:e8:1a:67:7b:5c:04:18:
         00:13:90:77:24:97:b4:84:7f:07:19:84:f7:9d:8c:10:12:30:
         15:1d:11:cc:b4:27:e4:36:a0:f1:71:bd:c9:61:e8:b0:36:67:
         24:7e:20:f8:1e:fc:63:0a:49:cc:80:a4:be:46:4b:47:6b:35:
         82:64:f3:27:a6:c4:65:0c:75:5c:af:14:1f:92:a5:08:3a:cf:
         54:9f:2c:5f:7e:04:70:4e:3e:2c:07:d3:14:9f:ac:0c:a6:49:
         e6:c6:0e:7e:fb:e5:69:91:3f:9d:2f:56:ee:c8:00:a0:a4:3f:
         ff:99:2b:71:bf:1d:94:93:bd:63:29:cc:8e:3f:a6:97:3a:aa:
         3d:4c:71:e3:2d:00:0e:be:d4:97:c4:f7:4c:ad:b0:a6:2d:8a:
         0a:58:cc:66:19:6e:e2:94:fd:49:5d:ca:ce:17:e8:ca:2d:ed:
         9d:03:ae:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:30 2025 by rpki-client