Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File:                     r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier:          bPwH6kEqr4YG7PhOnZ0Jg3Gq8JjDbJdYQBA3VnoudiM=
Subject key identifier:   AB:61:FF:14:03:D1:25:10:CE:15:28:49:EC:A4:43:D4:60:BF:CF:DA
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer:       /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial:       0199FD3446F8060ABCB1E6D1A28DA8306DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number:          0388
Signing time:             Sun 19 Oct 2025 16:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:25 +0000
Files and hashes:         1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: 9ZZ8UsbA0T/kkSzZfL8L/4lGEtiluqn9u6jSMwTswTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:46:f8:06:0a:bc:b1:e6:d1:a2:8d:a8:30:6d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
        Validity
            Not Before: Oct 19 16:01:25 2025 GMT
            Not After : Oct 20 16:01:25 2025 GMT
        Subject: CN=ab61ff1403d12510ce152849eca443d460bfcfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:08:5e:c3:77:69:ab:6b:6c:9c:ad:ed:ed:fd:
                    9b:95:bb:42:49:8b:17:73:75:40:a4:8e:9a:8c:95:
                    83:06:8c:91:6a:be:f8:86:82:2e:e9:d5:ee:f6:08:
                    ee:da:a2:b6:c2:47:25:94:18:e3:a0:5a:6b:28:93:
                    69:7a:54:a1:77:8d:d7:27:01:46:bb:71:77:e5:51:
                    4f:95:9e:ef:7a:d7:e9:a7:7a:b1:a1:a2:ac:fb:9d:
                    fe:dc:5f:c9:80:b4:96:f5:f0:48:1f:f8:59:42:27:
                    44:b4:81:3f:7b:e5:28:a2:e0:d9:fe:00:ad:fc:14:
                    27:1e:bb:95:c9:47:90:e5:e0:4f:21:5a:fa:e2:54:
                    cc:cc:9f:90:22:7a:af:51:55:9f:c1:7b:04:8f:67:
                    5a:60:51:b2:a9:54:cc:b4:8c:31:df:52:20:0b:70:
                    1c:f1:f0:1f:9e:98:b3:bc:05:7e:19:24:08:0f:a2:
                    38:d8:a2:4d:62:82:b4:d2:ce:fb:48:66:6b:b4:33:
                    f6:e4:23:31:f6:fc:87:5d:18:52:b9:52:9b:f7:c7:
                    8d:36:bc:f8:e6:6a:c9:e5:94:22:ce:8d:22:90:fb:
                    15:88:bb:10:68:16:a9:d7:c2:12:09:24:99:4d:b3:
                    bf:fa:5b:1c:12:a6:eb:46:c0:93:81:6f:7c:34:af:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:FF:14:03:D1:25:10:CE:15:28:49:EC:A4:43:D4:60:BF:CF:DA
            X509v3 Authority Key Identifier:
                keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:39:02:21:7b:ee:b4:87:24:c2:f3:1c:3a:3e:da:4c:1d:46:
         4d:0e:83:cb:d7:04:e6:65:c4:19:12:c9:e9:bd:64:a4:a4:3e:
         1d:9a:58:e6:38:aa:42:6e:00:c7:6f:8e:10:a5:86:91:24:58:
         eb:c3:32:21:8a:89:34:8b:39:d6:af:b7:d5:77:bb:21:ae:0f:
         ff:90:73:55:31:98:d9:35:f3:b2:d6:57:47:03:8f:72:c2:6d:
         28:28:f4:7b:75:94:54:9a:aa:bd:cc:be:78:24:e6:ff:88:79:
         15:f1:33:e7:58:e9:32:2a:7b:2a:de:08:e1:e3:59:24:41:b0:
         04:7b:cf:99:6f:a2:df:4d:e5:bb:49:9e:93:c7:5f:e2:c5:3f:
         83:45:cd:b2:bf:2e:8f:0b:11:a2:8f:76:6f:19:0a:fa:76:c9:
         14:16:2a:0f:61:32:b5:24:40:bc:af:22:9f:48:a1:af:48:33:
         0a:e0:53:3b:42:e4:c6:28:bd:1b:ec:0d:a7:48:99:a4:a3:82:
         f5:f4:ec:14:87:6e:a2:0c:42:d8:2c:ed:45:f0:95:bf:45:a3:
         ca:33:23:60:fd:f6:3b:4f:3f:c3:0f:65:42:f9:83:36:c5:91:
         07:0c:ec:62:ff:18:90:fc:5f:53:dd:af:64:5a:99:69:d7:70:
         a6:37:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:14 2025 by rpki-client