Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File:                     1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier:          M3p8F5xUpkOFPPhGJZzyFEDGOQttGqjCtZELOmQt3yY=
Subject key identifier:   49:63:52:27:3C:87:39:6B:A8:EF:5E:70:79:EE:FF:57:F4:0F:89:1D
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer:       /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial:       0199FE0FDF286D9C12626667B620A510E0B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number:          01F5
Signing time:             Sun 19 Oct 2025 20:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:16 +0000
Files and hashes:         1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: xnb9EKDrDqcQ0C9QtkwCbpy8QiTU2BXaaTm65W/9Ous=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:df:28:6d:9c:12:62:66:67:b6:20:a5:10:e0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
        Validity
            Not Before: Oct 19 20:01:16 2025 GMT
            Not After : Oct 20 20:01:16 2025 GMT
        Subject: CN=496352273c87396ba8ef5e7079eeff57f40f891d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:a0:38:92:a9:2c:4e:46:29:04:bf:c2:0f:
                    5b:a0:f1:76:59:da:24:98:65:b7:19:41:22:57:1c:
                    2b:11:5d:87:7f:e7:d9:1c:fa:96:d2:d0:24:82:36:
                    4b:00:8b:d1:4c:15:87:90:e8:c6:f1:77:92:bf:5c:
                    40:64:2a:39:c4:cf:fe:33:71:ff:f2:f4:2e:8d:3d:
                    d8:b6:71:dc:f8:ae:fb:be:2e:63:81:38:db:88:e4:
                    45:86:d8:8d:23:c2:cd:29:2e:f5:82:83:f6:53:6d:
                    02:bb:bb:f1:49:60:5e:d8:6f:24:26:30:24:2c:28:
                    3e:f6:a3:56:0a:ce:f5:70:27:a2:88:c5:fb:02:28:
                    3f:e2:a0:d9:91:9f:cf:7d:1e:7c:64:d5:d5:c4:de:
                    6b:13:86:3b:59:e4:5f:18:3f:f8:92:ef:74:ec:00:
                    00:11:80:9c:4d:e4:55:27:c9:a7:f8:37:14:e3:8b:
                    11:af:a2:aa:74:f4:2f:81:72:d5:50:04:02:1c:83:
                    b4:07:76:de:21:e5:d4:45:ac:ce:9a:9b:20:09:db:
                    2a:d4:f3:81:97:fe:b1:1e:29:25:65:b5:32:50:73:
                    ed:4e:af:f9:36:28:df:32:1a:8e:9a:73:f3:43:24:
                    5c:60:98:41:5c:b8:96:69:9c:1c:2e:dc:40:d0:62:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:63:52:27:3C:87:39:6B:A8:EF:5E:70:79:EE:FF:57:F4:0F:89:1D
            X509v3 Authority Key Identifier:
                keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:1b:b7:37:ee:30:5b:4e:77:63:bc:c0:1c:97:a9:49:e0:53:
         28:4c:56:bd:0f:14:38:85:3d:1c:32:20:00:b2:ce:d7:4f:8f:
         71:85:15:6e:84:8d:2a:ea:2a:35:59:e9:a6:61:40:50:c9:f1:
         4e:b7:16:ca:25:bf:e8:ab:85:70:88:65:75:f0:af:f9:7e:8a:
         32:fd:a2:e4:b0:fc:83:f2:83:8e:e6:59:17:ba:2b:4e:95:1e:
         7e:53:e8:73:9e:3b:e8:ae:e5:1c:cb:f0:5d:e4:b0:da:55:d2:
         a5:45:83:09:03:bb:e8:a2:1b:50:a8:12:3e:75:8e:07:8a:70:
         93:7a:7f:b7:9e:48:82:2b:cd:61:fd:3b:93:a0:56:3e:b9:3c:
         87:a3:e6:de:c7:e0:08:46:7e:87:a2:a5:6a:f7:43:b2:6a:64:
         c9:60:f1:4d:dc:dc:01:da:3e:da:65:f6:b7:2a:e3:bc:52:cb:
         8f:bb:d0:ca:f4:73:a2:6e:bc:3b:1f:f8:e9:28:2d:1e:48:e4:
         7b:f3:13:3a:a1:f8:8d:fa:99:22:46:b7:65:cc:79:5b:ec:d2:
         ec:be:a5:66:4a:f1:c3:77:40:7e:f1:a1:c0:ee:15:10:a8:2e:
         fa:ea:d0:2b:00:82:6b:1b:fb:c9:58:9a:7c:9e:70:a0:bf:5e:
         8f:ca:b9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:54 2025 by rpki-client