Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
File:                     x0oNp1cJLW7M99lO3idYdToc14Q.mft (raw, json)
Hash identifier:          M/ZdV7kNFxGXEz8ELzR1oV42bbmVg3ic+Bgn7fCtk6I=
Subject key identifier:   ED:46:F5:20:ED:05:19:3E:9E:70:BF:4F:9B:B8:34:D4:39:3A:1D:53
Authority key identifier: C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84
Certificate issuer:       /CN=c74a0da757092d6eccf7d94ede2758753a1cd784
Certificate serial:       019A00352AC5BA9F8B8C4E3986066FBA4460
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
Manifest number:          15DC
Signing time:             Mon 20 Oct 2025 06:01:15 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:15 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:15 +0000
Files and hashes:         1: x0oNp1cJLW7M99lO3idYdToc14Q.crl (hash: wY67CrUDsOaUOYD4Zis4f0Lw+AiqOzAZK5QhcqEM2pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:2a:c5:ba:9f:8b:8c:4e:39:86:06:6f:ba:44:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74a0da757092d6eccf7d94ede2758753a1cd784
        Validity
            Not Before: Oct 20 06:01:15 2025 GMT
            Not After : Oct 21 06:01:15 2025 GMT
        Subject: CN=ed46f520ed05193e9e70bf4f9bb834d4393a1d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9a:87:0f:e9:a7:bb:9f:76:72:e2:d7:4b:8b:
                    be:60:61:1d:dc:5c:4c:ac:67:29:70:72:5a:34:16:
                    5e:60:f0:cf:36:f4:bc:e0:a0:12:1b:81:5d:5b:26:
                    e9:0b:d7:c6:67:f2:54:20:e8:bb:f0:d0:09:3c:3f:
                    00:e0:b1:29:6c:2d:85:e6:67:c3:8e:76:1b:27:a0:
                    a7:5f:a0:eb:fb:7c:45:81:0f:87:a2:db:90:70:14:
                    66:67:bc:75:09:dd:5a:e4:d1:f0:e1:f7:09:44:b6:
                    f8:33:a9:39:ec:83:58:21:8f:87:ce:72:30:aa:91:
                    34:2a:5d:4b:1f:a1:0e:5f:20:9a:dc:3f:81:03:32:
                    b8:c4:93:5d:2b:50:9b:36:ba:b9:ee:54:64:01:8d:
                    df:33:10:34:98:4d:55:17:53:5c:f9:15:04:65:8b:
                    e1:98:0e:6c:d4:a3:c2:f1:75:83:2b:bb:f3:96:b4:
                    4f:e6:d0:39:6f:15:a9:a8:7b:7f:f3:31:70:2d:35:
                    ed:d3:38:50:a6:f5:41:0e:9b:51:67:82:13:03:8f:
                    47:48:ff:53:c1:12:09:09:11:c4:a4:c4:4d:9a:d9:
                    bc:84:1c:d6:cc:5d:12:c0:21:06:d9:ab:25:23:96:
                    3c:2a:93:b5:25:fa:9a:ba:32:58:67:83:1b:bf:17:
                    bf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:F5:20:ED:05:19:3E:9E:70:BF:4F:9B:B8:34:D4:39:3A:1D:53
            X509v3 Authority Key Identifier:
                keyid:C7:4A:0D:A7:57:09:2D:6E:CC:F7:D9:4E:DE:27:58:75:3A:1C:D7:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0oNp1cJLW7M99lO3idYdToc14Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26abf3-5b31-4181-a3f7-e7acb5b44eee/1/x0oNp1cJLW7M99lO3idYdToc14Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:62:f3:41:5c:81:6c:71:56:6d:31:c8:82:ce:1f:9f:a9:65:
         cf:b4:8f:4f:c9:c6:30:0d:ab:c1:02:31:65:85:68:51:78:04:
         b9:f8:18:94:b1:17:34:59:bc:3b:53:7b:d7:dc:05:6f:f1:f0:
         89:55:b0:c1:b5:cd:65:f6:97:a8:9b:be:06:ef:e6:8c:bb:99:
         4e:64:a0:99:6c:1e:56:db:ec:d2:fc:ec:80:ca:7e:b4:69:d1:
         9b:df:49:b7:20:b7:26:87:98:97:8c:b1:f7:7a:80:87:49:85:
         93:a9:f0:00:27:8a:c2:6e:4e:40:d3:43:53:e7:e8:1c:8b:28:
         2d:f1:77:4d:5a:65:a5:e7:9c:d4:c9:ad:e6:ef:b8:93:5d:18:
         f5:99:6e:1c:f1:93:ca:ba:63:5c:79:49:6a:ff:c4:cc:1c:3b:
         5a:5e:59:df:19:d0:85:92:23:9e:04:5e:7b:3b:9a:8c:51:0a:
         b2:fc:4c:1f:5c:8c:f0:d9:e8:80:50:23:0d:48:67:92:3f:37:
         63:54:e6:6e:e9:5b:0c:9c:ee:92:89:55:a6:3f:05:c6:28:64:
         12:b8:85:2d:51:ae:15:be:5f:38:62:52:e4:5e:ef:a1:65:6a:
         7f:d0:a3:a1:e1:e9:b7:00:86:4b:91:ef:70:b5:a0:d8:8b:1e:
         2b:02:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:56:42 2025 by rpki-client