Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File:                     11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier:          Ew2SLZSz+uT3AgPLVMzIxniAcczHd85YnfK81+y1otQ=
Subject key identifier:   10:51:65:B4:F1:30:43:CB:3A:3D:BE:F6:FA:2E:0D:F9:E2:52:AD:81
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer:       /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial:       0199FBEB5667AC93276A9A87064BA78540C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 10:02:08 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:08 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:08 +0000
Files and hashes:         1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: YJ4wuDTxQG7/vZnP2rc9Xf1/zyldKZdeAu+T4MSuu18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:56:67:ac:93:27:6a:9a:87:06:4b:a7:85:40:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
        Validity
            Not Before: Oct 19 10:02:08 2025 GMT
            Not After : Oct 20 10:02:08 2025 GMT
        Subject: CN=105165b4f13043cb3a3dbef6fa2e0df9e252ad81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:a9:e0:8c:75:42:e9:88:ee:1d:59:b9:a5:
                    be:33:2e:ad:42:38:12:08:77:26:ac:b4:db:be:d9:
                    19:57:a5:2a:af:92:87:0b:b3:32:98:1c:e9:4b:35:
                    46:f0:30:58:3f:c9:1a:a6:27:ec:dc:68:2e:13:bf:
                    06:ef:3a:0c:5f:57:95:6a:bd:5b:e5:2d:f3:ef:80:
                    3f:c2:24:26:0d:40:5e:12:ec:bf:e9:48:fe:02:ce:
                    2f:11:ea:31:1d:f4:f7:fb:b8:e1:2a:77:2f:e2:ed:
                    37:01:0d:53:8f:2d:75:86:da:94:c1:9f:0a:66:a4:
                    af:dd:f6:05:e8:47:96:2a:ef:ee:3c:ba:59:98:8b:
                    0b:1a:18:a0:41:11:b8:ec:d9:6b:03:54:9f:8a:34:
                    b9:64:83:e7:28:8a:80:70:4e:b6:78:ad:3b:78:5a:
                    e8:af:e7:d3:e6:7b:d9:5e:d2:ca:51:53:72:a4:b4:
                    81:96:8f:ec:a8:55:2c:f0:55:95:35:60:9a:a9:b8:
                    b5:6b:8d:96:cb:bd:a6:44:70:24:7b:3e:9f:86:e2:
                    1b:2f:a9:3f:dc:17:b2:c7:4a:6d:60:aa:e3:82:a5:
                    d4:70:02:5e:52:77:e3:cf:8f:e5:22:e5:af:68:1d:
                    05:fc:e6:33:32:e5:a5:5a:67:63:5f:50:31:36:f9:
                    51:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:51:65:B4:F1:30:43:CB:3A:3D:BE:F6:FA:2E:0D:F9:E2:52:AD:81
            X509v3 Authority Key Identifier:
                keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c4:02:9c:ef:4b:5b:2e:73:b9:84:3e:7f:a1:18:67:4d:d3:
         7a:f7:83:bf:f8:84:82:04:f1:31:51:86:ce:fb:27:a6:2b:30:
         9a:44:e5:29:7c:76:8d:d4:38:20:3a:94:03:26:af:e4:9e:b8:
         24:49:40:16:35:a5:46:56:20:88:06:ea:4f:14:7c:ce:ae:bd:
         03:6c:fa:0c:21:aa:fe:00:ab:f8:1a:06:c7:00:76:71:23:f2:
         53:78:df:67:35:13:c3:76:f5:f8:02:db:99:6b:35:72:b0:d3:
         ad:29:8c:e8:6a:7a:0d:55:fe:05:5a:61:81:35:aa:75:0c:44:
         d0:79:b5:c8:91:84:f9:b7:b4:88:1f:9e:1f:13:b5:06:9a:01:
         89:78:f1:00:61:0d:93:ae:35:55:cf:c4:09:50:a7:4a:5a:73:
         da:d1:3f:e6:a2:03:b1:eb:05:44:b2:6d:d2:fc:47:45:06:97:
         c8:c9:7e:bb:27:8c:c5:5d:56:29:c2:29:87:06:b4:61:b2:4d:
         0a:71:3d:b0:18:cf:77:cc:f4:ef:2f:53:34:3b:21:7a:9c:fb:
         49:d5:f4:24:3f:61:ff:e8:72:b5:2b:48:42:61:e1:0c:3b:ad:
         79:8c:af:13:5f:97:5f:4c:03:d4:54:ae:2c:d8:09:f7:5e:b2:
         d9:ea:af:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:32 2025 by rpki-client