Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
File:                     MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json)
Hash identifier:          49eYvWWx7z5VJpphqhqiNtJLyKdFcZwd7V0mqIhvN0I=
Subject key identifier:   1B:7A:2A:4B:82:20:82:CE:58:7F:0D:45:EF:AE:35:15:05:BC:07:90
Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Certificate issuer:       /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Certificate serial:       0199FBEA808B1B1D27ABB4556A37FD76A561
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 10:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:13 +0000
Files and hashes:         1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: 4BoN18GB19gHKfq3WUPciqfxFyNKzk3lQR0kh4RKd8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:80:8b:1b:1d:27:ab:b4:55:6a:37:fd:76:a5:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
        Validity
            Not Before: Oct 19 10:01:13 2025 GMT
            Not After : Oct 20 10:01:13 2025 GMT
        Subject: CN=1b7a2a4b822082ce587f0d45efae351505bc0790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:da:dc:0b:a6:f6:58:d1:f4:2d:e5:1b:dc:
                    53:2d:0e:ae:34:4f:91:45:3e:6f:78:24:0e:cb:8a:
                    7d:f2:9b:95:71:7a:23:e5:ae:a4:2a:4e:8a:24:f1:
                    94:60:90:7c:ee:eb:07:45:9b:13:aa:9b:5e:db:73:
                    bc:77:ba:e1:33:cb:73:d3:43:97:80:ca:56:b6:dc:
                    c3:d5:07:cd:5e:64:6a:68:ea:67:87:7c:ce:11:eb:
                    62:de:33:6c:82:9c:bd:f1:45:8a:54:e7:12:50:76:
                    d5:f4:22:99:10:42:75:46:3c:01:0b:9a:fb:6b:b5:
                    f9:19:42:0b:9c:91:f0:9a:28:89:7f:31:94:06:67:
                    02:c6:b7:e5:a8:36:0a:40:d5:98:0e:05:ea:b2:28:
                    ee:e0:17:07:f2:63:0c:2a:26:8b:78:d1:7e:5c:d9:
                    de:f7:d8:60:90:dd:1c:cd:59:20:53:56:a2:ce:2d:
                    a6:8e:95:a8:d6:3a:76:0b:37:54:39:1e:7b:9a:5d:
                    64:56:59:7c:9d:24:2e:49:1e:a0:dc:df:6c:44:f6:
                    19:1e:e1:1a:f9:0b:f4:1d:3a:ea:28:ed:bd:28:90:
                    4d:01:60:61:c0:64:85:cd:88:86:d0:41:b7:0f:ed:
                    f4:d1:a4:38:a0:d4:de:d0:81:7d:ef:5f:67:26:6c:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:7A:2A:4B:82:20:82:CE:58:7F:0D:45:EF:AE:35:15:05:BC:07:90
            X509v3 Authority Key Identifier:
                keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:78:6b:bb:1d:12:f1:df:c2:a5:da:5f:94:e5:1e:4e:33:e5:
         2c:e6:77:8d:3a:b8:d6:ab:9b:b5:dd:19:b6:a5:33:54:8c:10:
         66:1a:f1:0e:f8:d7:76:93:13:e4:11:9a:28:12:e8:f8:a3:48:
         4a:09:2c:d3:28:39:e9:de:cc:76:a3:28:bc:ea:87:3d:a9:e7:
         35:65:7e:92:5f:78:17:39:a6:c0:f6:00:0e:1b:7e:38:50:84:
         8a:8d:43:8d:d4:c3:07:13:30:0a:33:ac:75:93:e5:9d:8c:2b:
         9f:fd:19:0f:71:d5:23:3f:d2:0f:09:c2:3a:20:15:c3:d4:e2:
         b9:4e:f4:fb:b2:7a:02:49:d9:a9:66:83:b0:b1:a5:a2:3b:fb:
         c7:13:e9:f4:17:0b:ad:9f:9f:82:0d:5f:08:0a:24:03:e8:00:
         e1:10:41:43:7f:84:c4:39:7c:f0:6a:76:24:70:5c:e4:0e:3f:
         70:17:91:9b:1c:57:1e:92:66:26:cc:d0:80:1f:2e:6f:63:f1:
         ee:41:9e:98:72:8e:ea:66:89:99:0a:03:0e:d8:49:7b:09:44:
         2c:51:02:79:95:4e:dd:45:92:96:0b:d2:34:6a:66:10:ef:03:
         d5:79:b2:0e:6a:6e:eb:8c:ce:de:b3:52:3c:19:99:2f:ac:b6:
         d2:f0:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:35 2025 by rpki-client