Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
File:                     AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft (raw, json)
Hash identifier:          WxKwnTuo/+Msk5srvoeHhOSw6UjhDv8ZUmYxhMz/lkQ=
Subject key identifier:   7E:2C:8B:25:5B:31:26:F0:7E:70:8D:C0:65:B2:BB:0E:CE:A4:05:1A
Authority key identifier: 00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E
Certificate issuer:       /CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
Certificate serial:       0199FDD8F8CC1EFB8A72A1A1C61CAF9ED4C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 19:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:18 +0000
Files and hashes:         1: AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl (hash: Nn2u3Tlkz/mjCUAQGbVKOwT/HwJaZOVVY4PbrhElT6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:f8:cc:1e:fb:8a:72:a1:a1:c6:1c:af:9e:d4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00926ca8c51fd1eeb27c2a784dbf20bd2a49919e
        Validity
            Not Before: Oct 19 19:01:18 2025 GMT
            Not After : Oct 20 19:01:18 2025 GMT
        Subject: CN=7e2c8b255b3126f07e708dc065b2bb0ecea4051a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a4:07:74:3a:4b:17:6d:fc:87:58:ce:17:e1:
                    e5:ce:42:f0:c0:34:26:8a:7c:e4:1c:25:f5:89:60:
                    22:99:72:b7:b9:53:30:cd:bd:d5:10:fa:ea:66:a3:
                    b0:55:56:74:c5:cc:90:a2:f5:37:99:df:22:4b:7b:
                    5d:d9:04:34:43:c1:6f:e4:ee:4f:8d:a1:4f:2c:69:
                    0a:bc:dc:d1:fd:7d:58:38:9a:d7:fd:4c:7e:74:50:
                    f2:a6:84:b6:ab:6c:9a:64:e7:7c:13:9e:dc:1c:f2:
                    90:44:98:f4:6f:f9:d6:fa:73:70:28:34:16:7b:b0:
                    9c:94:ed:a6:8f:3c:ff:68:cc:27:30:93:38:50:2c:
                    55:cf:df:11:4c:18:88:46:f2:16:0d:d2:ba:6d:47:
                    2d:d1:5d:a8:48:b1:13:a7:97:2d:e9:fb:c3:ea:fb:
                    04:c5:ff:c4:71:80:d0:9b:ae:da:b3:ff:bb:78:f4:
                    df:51:60:2d:5b:fb:13:c9:eb:9f:9a:bc:91:37:ef:
                    d1:ed:50:ec:46:d7:c7:96:05:f7:a6:78:fe:12:33:
                    dc:6e:bc:82:20:ba:22:aa:02:b9:0a:f0:e1:53:17:
                    da:4b:42:6f:b5:42:9f:0f:d5:01:bd:ad:8f:3a:f3:
                    41:3d:4b:1c:7e:3c:7e:33:5f:b8:da:60:bf:c2:1d:
                    22:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2C:8B:25:5B:31:26:F0:7E:70:8D:C0:65:B2:BB:0E:CE:A4:05:1A
            X509v3 Authority Key Identifier:
                keyid:00:92:6C:A8:C5:1F:D1:EE:B2:7C:2A:78:4D:BF:20:BD:2A:49:91:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/543643-b3ba-4ecd-abd4-c1955854900c/1/AJJsqMUf0e6yfCp4Tb8gvSpJkZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:10:77:0c:f0:14:c1:13:48:e8:cb:1f:de:06:7f:45:5e:
         52:f9:55:df:f3:e5:1c:6f:de:ef:b6:43:4a:9b:be:d0:60:eb:
         fd:3a:f5:3f:4b:15:a8:d2:66:0f:84:14:86:4f:13:48:b0:ce:
         7e:82:49:39:d8:4c:04:fc:a8:85:4f:89:f6:9f:eb:0d:f4:17:
         dd:a1:9c:7c:d9:7f:54:e8:c9:a6:ef:1f:c9:e9:db:e1:d0:ab:
         bd:e6:29:a6:b9:38:19:0d:30:ab:b9:e0:84:61:8f:84:d9:8e:
         ba:79:91:0e:c1:b6:35:01:1f:b2:9d:dd:47:99:ba:ef:1b:2a:
         45:a3:8a:98:ed:d7:15:ea:16:33:5a:89:c6:13:b9:86:38:6c:
         c5:74:8e:ba:79:93:be:3a:f0:f4:66:ef:8d:b8:14:94:be:43:
         e9:38:b2:1a:6a:c4:64:83:ac:a0:3f:ef:97:f1:4d:9c:68:85:
         e8:0c:c0:ed:8c:3d:be:fb:8a:2d:56:69:37:87:07:51:de:12:
         ec:d2:69:cf:2e:7e:db:57:af:3b:6e:57:66:33:26:37:50:23:
         d5:eb:0b:1d:ca:da:a5:bd:2c:51:f0:46:15:97:43:c6:a9:c6:
         33:b0:3c:b3:5c:11:23:7f:46:0d:b9:13:c4:0f:48:72:d4:02:
         17:39:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:39 2025 by rpki-client