Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
File:                     nUxyfODk4Wasa-ME__JRgW1RpEI.mft (raw, json)
Hash identifier:          7aoD1ypdaz/XulZQfjfhwSLfYYx7PAwaVYsgW4eRZfE=
Subject key identifier:   BC:8E:1D:69:F7:A7:7A:2E:80:1D:01:2A:55:9C:46:0A:C1:FE:FF:DD
Authority key identifier: 9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42
Certificate issuer:       /CN=9d4c727ce0e4e166ac6be304fff251816d51a442
Certificate serial:       0199FDD9B530CE30D48FEA8559D960063628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 19:02:07 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:07 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:07 +0000
Files and hashes:         1: nUxyfODk4Wasa-ME__JRgW1RpEI.crl (hash: 3HAYSD59hDMkw6+lEuyuORP1k7zfVI5UN20ajbtop8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:b5:30:ce:30:d4:8f:ea:85:59:d9:60:06:36:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d4c727ce0e4e166ac6be304fff251816d51a442
        Validity
            Not Before: Oct 19 19:02:07 2025 GMT
            Not After : Oct 20 19:02:07 2025 GMT
        Subject: CN=bc8e1d69f7a77a2e801d012a559c460ac1feffdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:80:56:75:7b:8a:fa:35:1f:c8:8b:cf:03:38:
                    6a:4b:83:9a:f3:c5:98:ee:77:ae:96:b1:1d:e0:de:
                    82:73:6d:25:cc:40:1c:f0:66:76:94:1a:1e:cc:00:
                    19:46:b2:6a:00:fc:ec:a8:db:15:ff:c8:9a:ae:b7:
                    42:a2:83:bc:14:cb:d3:b3:96:9d:49:00:6b:af:4d:
                    4e:dc:9c:46:bf:08:df:60:3a:9b:2c:d6:44:14:f8:
                    17:47:04:2e:cf:20:36:b4:db:86:9b:ad:4b:0b:9a:
                    5a:0e:fa:9e:a0:41:a5:5b:4f:c7:00:6c:28:1c:0b:
                    bb:d8:b2:94:02:f8:55:9c:50:8a:cd:ce:74:78:55:
                    a3:6a:f1:98:1e:c8:8b:2a:9a:a0:11:86:dc:7f:9d:
                    c7:e5:6e:1d:c4:31:0b:ef:17:e2:b8:c3:8f:b6:27:
                    e9:07:89:01:a0:bb:78:4c:39:e5:40:e5:c1:94:9d:
                    7e:85:c7:33:88:6d:95:d8:e8:a2:25:c7:2e:4d:9f:
                    f6:4b:c5:8a:5d:6e:a1:51:94:98:3e:62:b3:89:5d:
                    1b:48:d2:e1:48:17:f0:05:bf:30:a2:8c:9e:b1:9f:
                    f7:ea:08:eb:a1:ef:b2:08:f7:e4:03:bb:52:15:ab:
                    4d:3c:65:ad:20:a3:7a:9c:b0:3f:82:85:19:cd:a7:
                    6b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8E:1D:69:F7:A7:7A:2E:80:1D:01:2A:55:9C:46:0A:C1:FE:FF:DD
            X509v3 Authority Key Identifier:
                keyid:9D:4C:72:7C:E0:E4:E1:66:AC:6B:E3:04:FF:F2:51:81:6D:51:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nUxyfODk4Wasa-ME__JRgW1RpEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ee3fdd-ad81-49b2-b680-ab0933ac9af5/1/nUxyfODk4Wasa-ME__JRgW1RpEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:65:9d:dc:8f:fe:e1:38:82:60:4a:46:f3:75:f0:f7:35:c7:
         5e:ae:6c:7f:cc:91:3d:d5:cb:7e:41:ef:27:98:98:73:2e:3c:
         34:ae:ff:52:b3:fa:4a:f5:76:a9:56:e4:68:8a:ab:75:d7:a3:
         6b:64:ec:2a:b9:aa:59:60:64:54:1d:95:4d:54:3a:74:a3:b7:
         5b:79:5f:26:44:0f:ef:c7:7a:8c:06:ff:2f:f5:5d:45:90:4f:
         62:bb:fe:f9:f4:a2:48:2e:60:c9:bf:7e:60:cd:96:07:f4:d9:
         fd:2e:6d:7e:1d:72:9e:91:e6:17:e5:27:7c:bb:ce:ae:b4:a7:
         8a:3c:cd:b3:bf:a2:3d:e8:5a:70:c5:ce:92:5d:c0:21:08:0e:
         a7:61:0d:c2:16:c9:4a:83:d4:40:df:67:e4:12:3c:d4:c5:cb:
         18:b0:3d:d9:8e:60:5a:22:c8:66:5f:2d:b7:c8:55:2c:f0:3a:
         48:0e:78:a7:0f:75:f2:c5:c6:16:8f:78:65:96:ab:1a:6b:e7:
         59:34:6c:c0:9d:94:c4:14:1f:43:b6:81:bf:d3:07:e2:78:13:
         0c:b0:b2:c8:eb:8a:43:83:0e:fb:67:c5:7e:95:4e:ed:81:70:
         97:24:a2:91:4e:06:ce:63:04:ca:2e:6c:09:e3:19:3d:c4:91:
         b3:67:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----