Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
File:                     pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft (raw, json)
Hash identifier:          rlA7d12hpufTH+R2NhaPCct4aavMN1iKZlToiDe2ssY=
Subject key identifier:   05:62:9F:03:18:7F:02:B2:7F:B8:0C:66:3D:48:76:F8:9E:85:23:7E
Authority key identifier: A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93
Certificate issuer:       /CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
Certificate serial:       0199FDD8D81D0E9543922E5EA8B75CE1C453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 19:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:10 +0000
Files and hashes:         1: pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl (hash: ppHxE2ZT3ddD3bZxNbtp92/TtSHJIb6mW8vvgOGmZx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:d8:1d:0e:95:43:92:2e:5e:a8:b7:5c:e1:c4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51e2dbbf019d8d3747e5730392554df11f6ed93
        Validity
            Not Before: Oct 19 19:01:10 2025 GMT
            Not After : Oct 20 19:01:10 2025 GMT
        Subject: CN=05629f03187f02b27fb80c663d4876f89e85237e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:4a:4f:a9:fe:55:71:ab:b5:c5:44:ad:5e:
                    ed:62:cd:31:96:93:b7:bc:f2:7b:2c:5b:17:d3:f8:
                    fa:53:e7:03:af:46:1b:9e:bf:84:67:04:cf:18:80:
                    dd:43:18:8d:ec:56:5b:c3:57:99:bf:41:7e:6b:27:
                    f8:45:41:b6:cc:f5:32:5d:68:0b:31:76:0e:a2:9b:
                    75:d9:13:13:4c:17:fe:0a:c6:5d:09:11:35:b4:3b:
                    5d:5e:41:5a:13:57:43:f0:50:3a:6d:8c:b6:aa:20:
                    07:24:bc:ef:9d:e9:6c:1b:58:70:95:bd:61:1e:b6:
                    33:e4:eb:62:7e:11:14:1e:34:54:3d:f7:c0:c8:d3:
                    14:91:d3:73:4c:be:c7:e1:47:07:ba:14:c7:de:1b:
                    c7:4d:dc:6e:f5:30:8f:ee:c2:18:55:03:40:fb:17:
                    64:5e:64:e3:f4:56:d7:eb:f0:63:ce:a0:1d:f5:66:
                    7c:1f:d8:0e:e5:bd:84:e2:bb:01:8a:29:8e:7b:8b:
                    fe:4a:d8:5d:6a:52:a3:cc:90:46:89:dd:7b:be:ea:
                    ae:6c:8b:38:1b:15:d4:35:38:1e:d0:bc:7c:fd:fe:
                    40:64:1d:f3:54:19:c2:a9:a1:de:7f:ce:ef:17:c3:
                    1f:a8:60:db:dd:20:3c:74:0f:10:f6:8f:fb:47:9f:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:62:9F:03:18:7F:02:B2:7F:B8:0C:66:3D:48:76:F8:9E:85:23:7E
            X509v3 Authority Key Identifier:
                keyid:A5:1E:2D:BB:F0:19:D8:D3:74:7E:57:30:39:25:54:DF:11:F6:ED:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR4tu_AZ2NN0flcwOSVU3xH27ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b5fc04-ff86-4ced-91c2-0e386a3dbe6a/1/pR4tu_AZ2NN0flcwOSVU3xH27ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ec:e5:b1:cf:b8:9d:39:58:7a:ec:1b:89:73:ff:60:1d:ce:
         02:33:30:6e:53:01:f0:1a:c3:41:00:8e:9c:57:7c:95:67:02:
         22:90:f5:4d:ae:d7:aa:8a:84:d3:36:12:b9:7d:90:6c:a7:3c:
         54:40:b9:d2:d2:48:f2:0a:05:91:de:6b:a8:42:2b:76:a8:a8:
         a4:a2:3f:89:fc:6f:23:b2:f6:8d:a0:a4:20:09:c8:88:c5:9f:
         7f:21:00:61:44:81:1f:97:70:bb:a3:26:aa:ea:ac:da:9b:05:
         ce:84:5a:e5:f3:7c:56:b4:73:7b:11:5f:0a:73:f6:e4:c2:bf:
         d6:e0:a9:67:6b:4c:47:7c:90:f5:a7:a1:8f:80:14:7f:a3:8a:
         39:44:54:1c:df:f7:07:55:57:4d:b8:fc:e2:c5:03:75:75:6d:
         d0:1d:3e:90:5b:c1:24:e2:09:0b:7e:e9:d9:bb:ac:79:bb:d6:
         31:d0:b1:73:ac:d4:79:b9:70:38:43:0d:76:80:10:6a:6a:0f:
         fa:8e:cc:21:4e:23:d0:c5:90:c3:2e:cc:44:fc:9e:eb:50:ba:
         9a:4b:85:d9:1a:b2:35:8a:dd:da:69:b1:de:bf:4b:c4:a4:dc:
         1b:31:a1:a7:35:f4:db:41:ba:ea:0a:c5:15:2b:22:be:ad:bb:
         e6:c3:2b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:27 2025 by rpki-client