Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
File:                     xnp-TG1V61E8VFdgqP9lba3wuNc.mft (raw, json)
Hash identifier:          o6fbmM5K0zyGSPbK5qC3z+Z/BGnMeBHekam8ZUo4qPE=
Subject key identifier:   4E:00:41:05:31:11:DB:81:81:46:EE:BC:FB:E9:9F:5C:E3:6C:83:A5
Authority key identifier: C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7
Certificate issuer:       /CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
Certificate serial:       019A0035B79D44293A07D0EC599F7127C7BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
Manifest number:          02AE
Signing time:             Mon 20 Oct 2025 06:01:51 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:51 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:51 +0000
Files and hashes:         1: xnp-TG1V61E8VFdgqP9lba3wuNc.crl (hash: 16yYr19RAsvtU4N9B1r4Lfe18rNw4tET1KwM3bjGgP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:b7:9d:44:29:3a:07:d0:ec:59:9f:71:27:c7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c67a7e4c6d55eb513c545760a8ff656dadf0b8d7
        Validity
            Not Before: Oct 20 06:01:51 2025 GMT
            Not After : Oct 21 06:01:51 2025 GMT
        Subject: CN=4e0041053111db818146eebcfbe99f5ce36c83a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:60:07:9b:0c:de:78:b7:7e:fd:91:4f:03:
                    7a:75:fe:76:fa:89:a8:11:44:92:1b:27:09:23:18:
                    e0:d4:a4:e8:e2:4b:92:c8:b3:5b:8d:28:3a:5e:4e:
                    2c:93:28:36:28:39:3c:40:53:bf:78:a3:0e:0f:8b:
                    d6:5b:9d:f1:6d:cc:ab:e5:6f:e0:ed:ba:0e:29:4f:
                    59:4a:ec:f3:c4:40:64:1d:61:b4:ca:b0:37:2d:f2:
                    71:04:bf:83:25:fb:be:3d:39:f1:dc:9f:cd:51:55:
                    4b:3d:38:fb:49:a0:9e:79:d1:ed:fe:41:45:d2:8c:
                    0c:41:05:42:b0:51:07:1c:60:8a:af:7a:8a:c3:d7:
                    7f:13:7e:ff:7d:96:3d:c9:11:36:3b:6c:db:29:30:
                    52:3d:d4:b9:dd:f4:1d:e6:b7:50:b9:c2:68:45:99:
                    b3:68:da:2c:cd:a0:e9:bc:16:c3:2c:a2:1e:b2:8f:
                    78:d4:21:b4:84:59:d6:af:3a:f1:02:ed:3f:be:cf:
                    c7:7d:03:a2:58:71:3f:e3:4d:c2:33:8e:09:4d:8a:
                    e0:eb:48:16:0a:6e:f0:ab:de:f1:d6:18:8b:ab:7d:
                    54:15:80:fc:0d:8d:52:60:a1:90:82:d6:56:9d:47:
                    3b:63:8d:e8:23:1a:ca:2a:07:16:45:d4:6f:83:66:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:00:41:05:31:11:DB:81:81:46:EE:BC:FB:E9:9F:5C:E3:6C:83:A5
            X509v3 Authority Key Identifier:
                keyid:C6:7A:7E:4C:6D:55:EB:51:3C:54:57:60:A8:FF:65:6D:AD:F0:B8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnp-TG1V61E8VFdgqP9lba3wuNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/08cdb7-416e-43a6-a276-a0389602472f/1/xnp-TG1V61E8VFdgqP9lba3wuNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:17:53:70:c3:09:23:80:9d:cd:17:94:ec:93:5b:3f:69:a8:
         50:0f:ee:6d:b4:c7:71:e1:73:1b:72:49:89:95:9e:f5:96:ab:
         c5:00:df:31:83:b7:71:5a:4d:07:11:1c:65:60:4e:26:40:31:
         f6:95:de:67:c3:ee:ad:e6:d8:aa:b8:60:d9:31:45:fa:88:e9:
         6c:7b:b1:0a:31:3a:51:89:cc:fa:38:6b:c3:83:b4:3a:d6:55:
         0a:1b:01:df:5b:ec:c1:21:19:40:a3:76:95:50:7c:27:08:bd:
         4e:5b:85:e4:68:6a:cb:70:01:95:b8:03:58:62:44:00:7d:22:
         c1:7c:58:d6:32:bb:64:54:aa:bc:ed:c4:20:54:35:2e:5d:39:
         b2:62:33:e1:55:9f:68:9b:7c:7e:37:71:70:95:72:84:de:6c:
         0e:78:d0:48:1b:97:a0:40:74:58:36:0c:e1:28:5a:fd:0f:2f:
         26:af:f7:6a:1f:2c:4a:e3:ca:a6:8a:6d:8c:2c:99:8a:d0:38:
         7f:3d:e2:df:f3:8a:5f:4f:41:81:69:a6:cf:38:fd:79:d4:80:
         6f:ca:24:36:39:16:8c:7d:09:48:80:3e:32:7c:3b:e0:b0:13:
         8c:37:02:bc:1e:c3:4b:d7:f5:b0:2f:90:9e:b8:3d:b3:d9:79:
         9a:f4:15:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:21 2025 by rpki-client