Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
File:                     2c-g5Eir4w0msGZanClNKcl7fr8.mft (raw, json)
Hash identifier:          CUgyvDp4rmnrwOs3kV7Qco4pDctgw1XKC9Rs8l58fTg=
Subject key identifier:   1B:2F:23:8C:3B:FA:1F:96:EF:67:F5:DE:D1:6E:75:39:0F:CA:58:F0
Authority key identifier: D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF
Certificate issuer:       /CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
Certificate serial:       0199FB45B9CB3DAFAA29EDBB0585B1AA6AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 07:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:14 +0000
Files and hashes:         1: 2c-g5Eir4w0msGZanClNKcl7fr8.crl (hash: x6rc1F3bgqzEbdWGO7E0TQGqGWa9hJ6XH/Iw20y7vbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:b9:cb:3d:af:aa:29:ed:bb:05:85:b1:aa:6a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9cfa0e448abe30d26b0665a9c294d29c97b7ebf
        Validity
            Not Before: Oct 19 07:01:14 2025 GMT
            Not After : Oct 20 07:01:14 2025 GMT
        Subject: CN=1b2f238c3bfa1f96ef67f5ded16e75390fca58f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:9a:47:da:4f:8f:7c:a4:57:29:3d:d6:27:
                    a7:9c:e9:fb:7f:91:09:84:f3:ab:85:ed:de:79:9c:
                    6b:8e:b5:f2:58:5a:c9:f1:de:77:48:84:a7:bb:99:
                    8c:f2:c2:7d:42:d1:55:d3:11:58:e7:4c:c4:f1:7d:
                    ea:29:c7:dc:60:e5:cf:fd:9e:9c:75:0b:71:4d:d4:
                    6e:6d:e4:5e:16:a0:d4:71:a4:9a:1a:8c:6c:a6:c8:
                    76:4a:2b:de:79:7f:2e:f9:3e:f9:05:03:e1:1a:ce:
                    d8:34:69:bf:48:03:cc:55:be:7c:61:12:8d:8f:21:
                    25:6e:f5:6b:e4:e3:e4:a0:89:eb:3b:2d:70:a4:58:
                    ee:c0:e6:00:63:3c:4d:c3:a3:3a:6c:4f:5b:cf:c1:
                    aa:f1:9d:7e:21:69:83:f9:ac:84:40:1b:bf:e7:c4:
                    95:f9:c7:18:f0:91:2d:ec:96:9d:88:e7:a0:aa:ec:
                    da:9b:d1:7f:23:04:c7:24:70:e3:77:d5:7d:86:3f:
                    79:35:9b:07:3c:40:10:d6:84:5c:41:30:21:2e:a4:
                    2d:80:8c:82:1c:05:0c:ae:2c:d4:04:7a:ac:08:60:
                    1c:52:4b:94:bc:9b:75:c4:6e:b6:00:96:85:e2:98:
                    49:9a:63:6f:4b:82:46:dc:b4:f2:52:ab:33:fc:19:
                    05:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2F:23:8C:3B:FA:1F:96:EF:67:F5:DE:D1:6E:75:39:0F:CA:58:F0
            X509v3 Authority Key Identifier:
                keyid:D9:CF:A0:E4:48:AB:E3:0D:26:B0:66:5A:9C:29:4D:29:C9:7B:7E:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c-g5Eir4w0msGZanClNKcl7fr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a01705-7a06-4b04-8642-5dfdd259dd1b/1/2c-g5Eir4w0msGZanClNKcl7fr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:9e:aa:cc:a4:03:3e:43:cc:c7:d4:e2:58:0c:70:2d:40:96:
         19:16:1b:a5:72:2f:aa:e6:66:e7:85:e7:ac:b0:f1:b9:dc:f2:
         a7:eb:56:1f:bf:69:3f:cc:32:11:62:01:22:21:7f:33:19:f6:
         e8:e7:f9:bb:1a:c0:32:cc:e1:e7:6a:e4:b6:62:57:0a:61:3d:
         7c:76:e4:8c:0e:b3:92:e2:f8:db:56:06:b9:21:b2:b0:16:cf:
         cf:9e:16:bb:14:ea:32:b7:c9:4d:1a:19:5c:de:51:02:7b:ec:
         9c:88:67:cc:4f:36:d0:36:e3:c4:56:b3:a9:26:69:5f:29:e4:
         3d:15:cb:5f:0a:f8:d2:56:68:44:b0:55:6e:24:82:ad:30:6b:
         33:e0:e3:2f:f6:e6:61:df:2a:55:2b:30:9a:5c:e7:69:bc:bd:
         a8:2f:68:93:c2:4e:a7:da:ce:33:fe:65:2b:fd:19:88:ab:31:
         84:b6:6d:6f:da:94:87:95:bd:6a:33:15:93:83:c9:5b:d7:3c:
         92:2e:71:e2:13:66:e2:e3:49:89:3e:6c:4e:36:02:ab:2c:4a:
         b7:dd:7b:7b:bf:d8:cd:56:37:2d:57:cc:6b:7b:fd:c7:fc:b5:
         4e:67:ab:5c:88:97:fc:1b:ba:22:37:bf:ab:4c:10:68:60:16:
         a3:4f:42:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:08 2025 by rpki-client