Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
File:                     zltHouqq5MEDTJEAPnz-PTjR5VU.mft (raw, json)
Hash identifier:          qtzQlUSlqmxNWnOdTh0VRnY5JxGGYr0ztaEwkPJ6rq8=
Subject key identifier:   1B:98:B6:5C:47:A9:05:0D:46:1C:DC:16:F7:3F:FD:9F:32:96:4B:DB
Authority key identifier: CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55
Certificate issuer:       /CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
Certificate serial:       0199FC8F7D0AED70E59EAF45F444202F102D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
Manifest number:          0821
Signing time:             Sun 19 Oct 2025 13:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:26 +0000
Files and hashes:         1: zltHouqq5MEDTJEAPnz-PTjR5VU.crl (hash: IaCE3NLtiqhocNSDzQ+vnmJX6D7enK+zw363axDiFxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:7d:0a:ed:70:e5:9e:af:45:f4:44:20:2f:10:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce5b47a2eaaae4c1034c91003e7cfe3d38d1e555
        Validity
            Not Before: Oct 19 13:01:26 2025 GMT
            Not After : Oct 20 13:01:26 2025 GMT
        Subject: CN=1b98b65c47a9050d461cdc16f73ffd9f32964bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:0f:eb:c4:af:7e:f7:54:fd:06:5a:b7:51:
                    fd:7e:55:75:bc:c9:2b:df:f4:f4:ad:87:0d:79:19:
                    fc:f2:df:82:c6:5d:1b:90:61:9b:52:73:ce:5c:4f:
                    67:dc:3d:84:c2:2f:e1:45:28:bd:43:bc:93:f1:28:
                    a2:32:0e:c6:9f:0f:7f:cd:58:00:8f:f9:d4:23:ed:
                    09:1b:d7:2d:2a:00:46:48:29:c5:6d:31:f6:45:9b:
                    62:04:94:7f:f0:0b:5d:16:7a:2d:67:78:31:16:23:
                    30:2b:55:d9:f7:25:1d:d9:86:dd:d9:f0:91:0a:84:
                    78:de:b6:ec:bb:57:2a:3e:53:ea:04:5d:6c:89:f5:
                    38:d6:d8:04:2d:a3:0c:1f:d9:6e:85:3a:99:11:54:
                    3f:d7:48:bb:40:d0:3c:42:0c:1c:c6:9c:f8:ca:59:
                    dc:98:68:1a:0f:0c:80:0d:d9:d5:6f:a5:92:1b:aa:
                    e3:53:5c:c3:9a:7b:86:05:d2:d9:66:89:c5:5c:fb:
                    84:e3:d7:b3:19:6b:1f:02:15:bd:9c:ff:af:b6:84:
                    f6:5c:43:6d:45:3c:a4:13:5e:39:db:db:ba:1e:76:
                    9c:0d:af:42:56:f4:c0:0c:01:b9:b9:a2:01:76:64:
                    43:b1:79:cc:26:cc:b4:46:c8:01:b0:20:06:80:df:
                    8b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:98:B6:5C:47:A9:05:0D:46:1C:DC:16:F7:3F:FD:9F:32:96:4B:DB
            X509v3 Authority Key Identifier:
                keyid:CE:5B:47:A2:EA:AA:E4:C1:03:4C:91:00:3E:7C:FE:3D:38:D1:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zltHouqq5MEDTJEAPnz-PTjR5VU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/31f25f-eed5-47ad-92d4-e27360796e18/1/zltHouqq5MEDTJEAPnz-PTjR5VU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f7:d0:58:8d:34:ff:ef:e2:20:05:ec:52:dc:ee:83:bb:e2:
         46:98:1f:95:c3:6d:af:9f:be:c1:9f:68:15:d4:cc:71:28:eb:
         6b:ca:83:a8:a5:8a:fa:d5:02:e9:8b:9f:e0:f4:02:8c:80:b9:
         18:2c:03:71:20:1e:43:a4:18:02:a9:78:e1:dd:c8:01:78:fc:
         f8:60:92:4b:76:49:da:7b:03:6c:7d:f2:32:41:b9:cb:45:e1:
         ea:71:9a:d5:da:59:10:96:37:9f:f0:a2:a6:8f:0b:59:27:b5:
         37:ea:f0:cb:d0:bf:0f:4c:85:0e:13:18:3b:25:d2:4a:e7:32:
         d8:ed:b8:de:f7:af:7d:e3:bd:45:df:83:5d:cf:21:38:9f:c5:
         f9:2a:03:ec:f8:f6:9d:46:af:26:7e:02:a5:8b:e0:4c:f0:ca:
         d7:77:e3:c4:70:16:52:38:0b:39:0d:1f:53:11:c5:74:00:8b:
         1e:04:82:26:86:da:83:c0:0e:f3:78:be:b5:8d:bd:ad:15:5d:
         96:7f:84:bc:b4:49:13:99:94:b7:f6:10:89:9c:95:f9:89:b5:
         50:21:09:c3:8a:cc:72:6b:94:6a:b4:62:87:2d:09:1e:dd:04:
         4e:c3:f6:fc:b3:4f:8c:2f:69:f9:f2:c7:1c:97:54:0e:12:ec:
         31:a4:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:21 2025 by rpki-client