Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
File:                     xC-2EFO6LavFFxWw9TzXtrlFTQw.mft (raw, json)
Hash identifier:          M7wc115MTG1qPqAF1MEgPdRDvrtZC7TIP/UzOuu2OaY=
Subject key identifier:   2C:68:31:8B:32:E3:30:6A:42:1E:D1:6B:55:CA:FE:D8:F5:2B:12:FD
Authority key identifier: C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C
Certificate issuer:       /CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
Certificate serial:       0199FAD7B6EAB83F7CACD0BECEF3D6EB47F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
Manifest number:          11E2
Signing time:             Sun 19 Oct 2025 05:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:05 +0000
Files and hashes:         1: xC-2EFO6LavFFxWw9TzXtrlFTQw.crl (hash: GHsfPWYapJK2evtoj8sMEbTUk1uYYGtZ03Cbe1R61RM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b6:ea:b8:3f:7c:ac:d0:be:ce:f3:d6:eb:47:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42fb61053ba2dabc51715b0f53cd7b6b9454d0c
        Validity
            Not Before: Oct 19 05:01:05 2025 GMT
            Not After : Oct 20 05:01:05 2025 GMT
        Subject: CN=2c68318b32e3306a421ed16b55cafed8f52b12fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:65:de:5c:2e:91:69:c1:cc:46:57:08:40:
                    0b:9e:55:73:f7:09:02:3c:a3:d5:ad:f3:c2:ba:6d:
                    99:52:cf:fd:4e:6e:74:d4:79:ec:07:30:3b:6c:89:
                    af:b0:aa:3b:90:cc:df:32:47:99:31:38:a1:71:bd:
                    be:4a:d5:9d:fe:e2:39:40:95:ae:fe:5f:ca:af:4b:
                    74:73:18:af:54:72:01:cb:18:5f:5f:c5:b3:06:8f:
                    97:52:fb:5d:a5:07:68:ff:ea:6c:ea:2e:c4:bd:58:
                    af:39:88:8c:48:96:2f:3d:e0:52:86:8a:13:fa:d1:
                    85:fc:76:5c:f1:1a:a3:47:74:d3:ec:c6:ed:fa:4e:
                    3b:a9:e8:d4:2c:a5:c8:52:d8:ca:ee:e9:bf:38:64:
                    eb:67:77:0e:16:a5:ac:2a:c6:14:2c:31:3d:07:15:
                    95:dd:5f:71:f5:5c:f1:34:77:95:5e:8b:04:84:08:
                    16:16:45:c9:b2:80:6c:ee:e8:e0:8c:ce:51:8b:c2:
                    5e:25:19:4c:57:5a:06:2a:fc:39:43:21:9c:56:ab:
                    98:14:e9:be:7d:15:1d:2e:45:29:3b:6b:ad:4a:5f:
                    e7:31:e4:42:09:f3:f0:5e:4a:ea:eb:37:aa:96:04:
                    ba:e5:a0:ae:83:9c:88:ba:ff:3a:b5:5f:6b:4a:a0:
                    29:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:68:31:8B:32:E3:30:6A:42:1E:D1:6B:55:CA:FE:D8:F5:2B:12:FD
            X509v3 Authority Key Identifier:
                keyid:C4:2F:B6:10:53:BA:2D:AB:C5:17:15:B0:F5:3C:D7:B6:B9:45:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-2EFO6LavFFxWw9TzXtrlFTQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/f7636a-5e0c-40b0-b0b2-8f11f6275aaf/1/xC-2EFO6LavFFxWw9TzXtrlFTQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:60:8a:81:e3:d8:d9:70:02:91:29:c0:11:72:da:2f:12:
         d2:d8:07:9f:84:8c:9f:68:79:8e:af:af:bc:7b:9d:8f:04:2c:
         7d:f2:77:07:63:5b:a0:0e:00:93:f5:c5:f7:cf:4c:9b:c8:34:
         20:f3:e1:d6:95:b3:fe:9b:0c:63:17:77:7e:a3:72:1b:d8:a4:
         d2:95:2f:c7:41:b4:b0:b4:21:6f:8d:af:d5:de:b1:e3:44:52:
         80:4c:f3:4a:f8:90:61:89:83:81:80:80:42:64:73:6f:59:e9:
         ca:99:fa:4d:0c:49:97:82:ce:d9:29:42:62:0f:72:1d:d2:85:
         95:2e:66:08:d8:ed:34:7b:0e:a8:98:e1:36:97:b1:d7:55:03:
         8a:77:9f:01:79:84:c8:b8:7b:78:aa:cd:6e:d4:05:61:4c:b9:
         33:0e:b2:a2:4e:0a:b2:a2:96:ea:3a:01:0f:23:d7:2f:22:b9:
         7a:12:72:79:d8:5d:39:d5:26:5f:35:67:66:24:70:c3:6d:7a:
         aa:c2:5d:86:71:22:12:7c:55:d2:71:fa:ce:5a:a5:93:0d:bb:
         4d:99:dc:64:98:8d:98:f0:4a:14:39:19:49:3d:62:84:98:98:
         30:c1:eb:ba:10:ce:64:98:66:35:ce:6b:ce:28:8f:70:86:4c:
         f6:9c:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:58 2025 by rpki-client