Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File:                     96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier:          5YcI2O8PTptmvSGCVYstU5ZIODxEZ9Ki0lMv2MUDd+0=
Subject key identifier:   AC:CD:48:CF:08:C8:FD:3A:52:4D:A8:9B:95:08:90:86:2A:41:1B:87
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer:       /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial:       0199FC8F7FCC759B3AB03EA93D165CCF8BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number:          091B
Signing time:             Sun 19 Oct 2025 13:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:26 +0000
Files and hashes:         1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: UXSGhtxobl7CZNy7UMccjmBYKAiZfZAQpbHjvC9S/+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:7f:cc:75:9b:3a:b0:3e:a9:3d:16:5c:cf:8b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
        Validity
            Not Before: Oct 19 13:01:26 2025 GMT
            Not After : Oct 20 13:01:26 2025 GMT
        Subject: CN=accd48cf08c8fd3a524da89b950890862a411b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ce:b8:27:81:47:5a:a5:0c:56:0f:bb:10:b2:
                    e1:1e:fd:14:35:41:19:00:d9:7e:1f:c2:c3:39:f0:
                    cd:fd:63:8a:70:20:e5:e4:95:3d:9b:38:06:d4:d7:
                    35:1f:57:42:1e:6a:64:49:d7:1a:01:74:cc:1d:dd:
                    74:3a:a6:6c:6d:8b:d8:95:52:cf:9a:1b:57:de:84:
                    77:f9:0f:e6:e6:86:ac:d5:68:fc:87:46:2b:53:7e:
                    5b:07:a0:02:49:73:be:51:72:4f:e0:c0:ad:19:47:
                    21:c7:db:e0:e4:c3:c7:d8:56:ca:27:13:ef:75:bf:
                    7c:3d:91:37:91:ab:f8:23:7f:f4:30:2a:74:d7:73:
                    02:23:91:3f:33:75:7a:71:2e:12:27:15:91:0e:be:
                    96:5b:c5:db:4c:29:89:45:bc:a5:91:16:72:04:02:
                    80:ef:11:ae:4b:62:74:f0:62:52:42:23:a9:75:c5:
                    ff:8c:54:8b:4d:40:69:ea:da:36:63:6b:cd:8d:ff:
                    32:98:f4:fb:98:39:3c:09:56:10:5a:45:8b:8b:7f:
                    6d:83:97:9f:6f:46:7a:69:e3:b8:90:4e:d7:22:fe:
                    cf:16:85:75:f5:a5:cd:fa:a0:4b:73:2b:a4:e8:fe:
                    d9:42:f6:1f:b7:47:f6:68:ca:e6:67:f3:f7:9c:8e:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CD:48:CF:08:C8:FD:3A:52:4D:A8:9B:95:08:90:86:2A:41:1B:87
            X509v3 Authority Key Identifier:
                keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:5e:f4:b7:b7:da:06:59:6b:ed:76:dd:68:b4:58:3a:73:
         d5:4b:b6:69:4f:dd:e0:27:80:d7:d4:08:27:5a:44:0a:3f:35:
         82:2e:c6:08:8e:a0:dc:a7:b9:71:fb:f4:2d:e9:17:58:90:44:
         8c:1c:e3:c5:f5:61:2a:4f:7d:53:f2:c7:0f:3f:d0:93:7c:c8:
         e9:9d:05:8c:5f:5e:70:ac:92:84:be:bc:04:dd:fc:ec:c3:bc:
         ae:15:fb:b9:16:e7:14:7e:df:fd:29:73:ad:bc:95:26:68:65:
         f6:8b:5a:f6:43:db:59:d4:7e:ff:15:f8:bd:3c:66:12:33:70:
         7c:03:c1:0b:f5:77:eb:69:46:f5:3f:16:65:f5:42:b7:89:32:
         92:4c:2b:a7:a6:08:6d:df:11:e3:28:a1:07:7c:be:74:d8:b0:
         64:f9:ce:21:34:a1:a7:2a:96:ea:c8:80:fa:b1:1a:4e:27:9e:
         2f:e7:29:2e:a8:19:dc:cf:69:30:98:93:f6:a6:57:30:c2:db:
         9c:8e:0e:67:a6:eb:de:89:81:16:c3:09:4a:c7:fc:2a:e0:68:
         e3:ce:f5:88:cc:03:cc:0f:ab:d6:64:90:41:93:5a:b6:68:07:
         9d:79:28:f3:b7:50:14:80:1a:85:c9:14:f7:01:0b:ab:95:bd:
         d2:aa:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:57 2025 by rpki-client