Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
File:                     0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft (raw, json)
Hash identifier:          v/dj02623bLnRTOEPCVfgH3BJlGGZWP7AhnuoOKUs9c=
Subject key identifier:   81:7B:12:A8:77:A5:0D:E1:E7:A6:56:27:DE:EB:9B:D8:B2:82:1D:6D
Authority key identifier: D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC
Certificate issuer:       /CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
Certificate serial:       0199FC58D0DB38DD35B366CC7411C18FAF37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
Manifest number:          092C
Signing time:             Sun 19 Oct 2025 12:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:42 +0000
Files and hashes:         1: 0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl (hash: /FNmD2W0TsTKwVMvbn7O8bQMAmcZTX05HDt2REG04jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:d0:db:38:dd:35:b3:66:cc:74:11:c1:8f:af:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c773c20ac8e4093df62bbb872cafcdb68b55dc
        Validity
            Not Before: Oct 19 12:01:42 2025 GMT
            Not After : Oct 20 12:01:42 2025 GMT
        Subject: CN=817b12a877a50de1e7a65627deeb9bd8b2821d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:b0:5b:89:10:9b:92:22:3c:91:39:9f:c8:
                    b4:4f:9d:5d:64:56:4e:97:bc:06:ca:0c:e2:df:49:
                    fa:a1:2a:fc:b0:bf:f6:53:ad:51:f0:4a:3b:6d:9f:
                    13:8a:c0:4a:42:70:e7:22:dc:72:6d:91:c7:36:54:
                    99:c8:08:0b:73:b8:6d:b4:fd:95:07:79:7a:0b:8f:
                    1b:03:af:06:d8:5d:e6:9f:d5:64:6b:68:80:74:f6:
                    e9:d9:0a:72:ef:b7:7f:bc:67:1f:86:09:d0:a1:92:
                    b1:9d:dd:cd:cb:aa:d6:f2:43:31:50:76:48:75:3a:
                    91:46:59:7e:ae:8a:29:d3:a4:ff:3e:2b:61:83:e8:
                    14:e8:78:09:00:8b:5f:c4:75:6b:fe:46:05:e6:98:
                    c1:90:dd:e8:c4:e0:1f:a5:3a:bb:31:a4:f1:bd:74:
                    44:c8:c3:82:ae:52:14:c7:d2:69:17:48:86:8d:e0:
                    aa:db:28:9d:fc:98:db:8f:c4:6a:46:0a:a1:ce:83:
                    d1:9f:71:64:27:00:13:83:d0:e1:3d:e4:76:48:4f:
                    62:8b:73:ee:11:fd:e6:c3:08:90:66:4b:94:99:5a:
                    88:33:1c:f0:d6:b4:71:56:cc:60:4b:77:8c:48:0e:
                    a4:3d:ab:d6:b7:67:0b:8d:c0:83:df:75:e3:74:30:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7B:12:A8:77:A5:0D:E1:E7:A6:56:27:DE:EB:9B:D8:B2:82:1D:6D
            X509v3 Authority Key Identifier:
                keyid:D1:C7:73:C2:0A:C8:E4:09:3D:F6:2B:BB:87:2C:AF:CD:B6:8B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cdzwgrI5Ak99iu7hyyvzbaLVdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/ee3822-abea-48d9-93a9-8856c65fe182/1/0cdzwgrI5Ak99iu7hyyvzbaLVdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:32:ec:15:ac:f1:12:2c:92:90:2e:62:06:54:c5:04:bd:
         98:af:fd:d5:d1:42:d4:b5:d3:42:3e:ce:e3:9d:5b:95:f0:50:
         88:8c:9f:e6:01:71:9b:4a:e1:3b:ab:3f:b2:22:a4:a9:0a:72:
         ca:bb:c1:cd:b3:34:6e:91:02:5c:0d:88:65:04:be:9b:75:9f:
         b8:75:30:86:91:d2:2a:d6:07:be:31:64:ad:6e:ee:4f:47:97:
         cc:72:54:a9:96:5e:54:2a:cc:35:02:f3:8e:97:fe:f9:49:e8:
         59:68:d6:2a:69:94:eb:01:0a:62:42:52:c9:a1:a1:ed:51:d9:
         d7:f2:6f:65:d5:7b:72:3c:ce:d7:33:6e:6c:61:73:24:ba:dc:
         e9:96:ee:82:6d:06:71:b9:50:bf:09:1f:13:39:a9:c1:97:7d:
         4f:ba:b6:d5:82:4d:63:b0:9e:48:a3:d5:a4:e1:80:1b:5d:0a:
         74:e7:5c:31:b3:9f:c6:c6:af:cd:49:fc:db:85:9f:3e:e4:86:
         a5:ee:3a:fb:72:78:73:ef:a6:9e:01:36:00:6f:a8:51:2f:c8:
         7e:14:b3:72:c8:59:cd:65:44:4d:4d:a3:b1:93:84:4c:f9:e1:
         5e:be:cf:e0:5d:ef:b3:ce:c8:aa:df:77:0b:2b:20:ae:8d:ce:
         5f:cc:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:17 2025 by rpki-client