Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
File:                     7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft (raw, json)
Hash identifier:          ftq9iCI0FIgl4EPH3olfcOR3U9mv1DxavCd8gMySZ2g=
Subject key identifier:   44:9A:86:F7:AA:6B:41:1A:2C:39:B7:F0:CF:90:D9:21:4A:7E:67:A7
Authority key identifier: EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE
Certificate issuer:       /CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
Certificate serial:       0199FDD9F1749C027998DB7C8BF916901615
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 19:02:22 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:22 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:22 +0000
Files and hashes:         1: 7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl (hash: pX1Yp6uHlVThk6RUGfyjaEkVeWFy6LtJ0e7BSndZlUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:f1:74:9c:02:79:98:db:7c:8b:f9:16:90:16:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee4d3037960ed19c079e3e21e1fea6750c0c45be
        Validity
            Not Before: Oct 19 19:02:22 2025 GMT
            Not After : Oct 20 19:02:22 2025 GMT
        Subject: CN=449a86f7aa6b411a2c39b7f0cf90d9214a7e67a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:07:27:37:02:fe:d8:f9:2d:65:d8:7a:4e:ab:
                    1a:6c:09:b5:aa:2a:f0:15:99:59:68:6e:ee:89:27:
                    2b:bb:ad:db:e2:c8:c9:73:ba:81:96:75:6f:43:c0:
                    43:19:55:fa:bc:37:6e:72:ef:72:66:39:e0:ce:6b:
                    b1:82:11:94:25:11:08:bf:bc:6d:de:b3:12:c7:41:
                    85:48:b9:d8:7f:d3:1f:fa:c9:ba:6d:82:5b:fd:c2:
                    c5:21:bb:87:35:5e:a4:60:75:a9:8b:08:7a:59:7c:
                    ff:b1:e1:61:f6:4d:22:64:fa:d0:51:ce:b7:9b:9e:
                    b8:d3:fd:6e:72:a3:7a:2c:8d:bf:10:f6:7b:73:5f:
                    48:8f:49:ce:66:4c:87:28:d8:f7:f5:14:9c:0f:c5:
                    fd:79:28:d0:56:5f:13:ec:e3:b8:18:67:66:ba:14:
                    7e:a3:03:dc:07:9a:40:15:02:41:80:8f:c9:50:54:
                    d0:78:00:81:c3:1a:5d:1d:40:75:e5:24:ec:e7:0c:
                    b2:df:16:1f:d7:a4:23:b2:06:46:2c:bc:1b:99:85:
                    46:b6:c9:f3:55:aa:bc:cc:27:1f:56:0d:bc:4c:bd:
                    ab:9a:ab:60:ef:ff:33:dd:d1:ae:4b:17:93:8d:80:
                    58:5d:e9:03:c6:b2:6e:5e:55:ad:72:c9:f8:ea:c7:
                    a0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9A:86:F7:AA:6B:41:1A:2C:39:B7:F0:CF:90:D9:21:4A:7E:67:A7
            X509v3 Authority Key Identifier:
                keyid:EE:4D:30:37:96:0E:D1:9C:07:9E:3E:21:E1:FE:A6:75:0C:0C:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/166ece-0624-4070-88d0-1ad23d105ac9/1/7k0wN5YO0ZwHnj4h4f6mdQwMRb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:3a:32:e5:c1:7e:cb:59:e6:83:8f:ee:29:f5:17:f7:be:
         61:67:1c:21:89:6b:74:fe:54:76:0e:20:af:ef:4b:1f:7c:e8:
         55:a0:df:55:fe:21:31:65:1d:86:85:d4:86:5a:e3:cf:64:46:
         f4:35:f8:4c:63:44:cd:b2:09:d3:31:03:3d:4c:7c:69:03:39:
         ae:0c:6f:16:bb:5b:bf:02:f2:c5:f1:9b:a7:b1:42:28:3d:45:
         2a:2c:33:11:73:aa:0f:24:5d:5c:99:d7:7a:b7:5c:f9:13:b7:
         c0:61:8f:45:55:17:02:37:26:d5:e2:a1:bd:59:48:4b:9a:a5:
         a6:55:a5:66:b9:44:47:fd:92:86:2c:31:52:c7:cc:5b:83:5c:
         d4:81:3c:75:ab:7b:ef:0d:61:58:70:48:7c:4d:ba:04:53:ca:
         8e:e7:b5:00:10:19:42:5b:28:8e:7c:07:b8:51:c2:48:6a:aa:
         ce:9f:74:77:55:d9:ed:79:74:61:88:6b:c6:0f:72:05:9f:d5:
         28:1a:f0:15:b5:c9:09:e8:d4:32:f0:5c:7a:29:45:7d:67:db:
         d8:9e:da:3f:ec:84:a7:f2:a4:73:7f:2b:fb:f5:94:bb:a0:d8:
         92:da:31:8c:e0:08:15:64:65:d8:c8:d0:b0:49:e6:db:cd:9b:
         d4:15:dd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:09 2025 by rpki-client