Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
File:                     rTaQk6MtG34Ou-MkRRxY10iuzUI.mft (raw, json)
Hash identifier:          r+8kbV+0L27+Znfe/GDAFxgmjBlZUeX8x3YoPtO4jfY=
Subject key identifier:   C9:A1:1E:A6:4A:BA:1A:3A:C8:E1:98:9F:5A:D4:EF:4F:01:AC:40:E6
Authority key identifier: AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42
Certificate issuer:       /CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
Certificate serial:       0199FCC6160A9AEC6AA824EE39E8F64FA4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
Manifest number:          05F8
Signing time:             Sun 19 Oct 2025 14:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:04 +0000
Files and hashes:         1: rTaQk6MtG34Ou-MkRRxY10iuzUI.crl (hash: 0vv1wjJSOsOqTWv/nZX/AcZU5tDJ5nriQo5UiWueWRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:16:0a:9a:ec:6a:a8:24:ee:39:e8:f6:4f:a4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad369093a32d1b7e0ebbe324451c58d748aecd42
        Validity
            Not Before: Oct 19 14:01:04 2025 GMT
            Not After : Oct 20 14:01:04 2025 GMT
        Subject: CN=c9a11ea64aba1a3ac8e1989f5ad4ef4f01ac40e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:a4:68:e1:5a:9b:ee:8e:4e:9d:99:5a:09:
                    9e:a6:c1:5d:63:9a:b8:e7:f0:e9:cd:05:4e:34:12:
                    d2:88:83:cf:66:07:eb:56:25:70:2e:e6:b5:27:e5:
                    7b:15:e8:42:fa:d5:10:fb:c2:a9:d7:37:47:5e:78:
                    31:76:01:94:d1:6f:e1:73:8b:f9:9e:14:95:5c:c5:
                    5d:c8:f5:68:eb:d6:6a:23:1c:c4:d4:62:4e:bd:7a:
                    be:a1:c0:9b:ee:8c:c3:29:fb:e0:fd:77:4a:22:5d:
                    61:65:37:42:6d:30:bc:45:a9:9a:43:4a:7d:9b:40:
                    c1:fb:be:a0:4c:25:08:4f:ca:ab:ec:4f:86:56:b9:
                    aa:a8:f2:35:cf:6c:9a:6a:d2:f6:75:9e:3c:b7:cf:
                    3f:30:97:95:9f:4a:db:7f:c5:93:2a:86:2a:c9:96:
                    a9:72:5e:1c:04:f9:82:e7:f2:fb:af:f5:5d:8e:f8:
                    f2:a5:a3:1c:aa:8a:de:11:03:b9:63:2f:b6:f5:ee:
                    76:04:46:1e:b7:4e:6d:09:72:41:cf:82:52:78:c2:
                    c5:f9:da:cb:49:59:4b:17:39:90:8b:d0:74:c1:41:
                    43:93:1d:de:13:ec:01:70:4a:32:e4:8c:31:c4:9e:
                    cf:a0:e4:02:93:84:e1:24:f9:53:59:2d:c6:fb:44:
                    0f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:1E:A6:4A:BA:1A:3A:C8:E1:98:9F:5A:D4:EF:4F:01:AC:40:E6
            X509v3 Authority Key Identifier:
                keyid:AD:36:90:93:A3:2D:1B:7E:0E:BB:E3:24:45:1C:58:D7:48:AE:CD:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTaQk6MtG34Ou-MkRRxY10iuzUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3b222e-a4b3-4fbe-839f-363a558e19be/1/rTaQk6MtG34Ou-MkRRxY10iuzUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:42:53:ec:52:21:72:80:94:9b:8d:04:d6:fa:c3:5f:4b:08:
         61:e1:30:c5:20:84:ba:d9:5d:79:8d:fc:10:6d:6f:0a:d7:0d:
         ce:e4:96:d3:00:db:f2:eb:a1:04:90:d6:e8:31:44:1d:5f:9d:
         bf:07:17:7c:b5:f2:9e:65:e3:6c:45:5c:b1:e4:b9:40:0f:ed:
         a6:e3:b5:ad:89:cd:0d:d8:eb:56:2b:09:68:cd:b8:d0:23:54:
         4c:aa:fb:42:73:91:b6:4e:aa:4c:58:7b:b6:b4:3d:38:69:17:
         d4:89:33:12:67:72:70:f9:41:7e:07:b9:b3:c3:c4:27:7d:18:
         9a:24:30:90:a4:38:4f:54:0a:f9:c5:9c:0a:fa:75:e0:12:dd:
         28:53:56:85:18:a2:58:63:3a:56:03:6e:f3:1a:c5:f2:30:f1:
         de:32:11:1e:af:ad:c3:af:e7:d8:ae:0c:f6:6f:3a:69:49:35:
         dd:5a:00:bd:5c:56:2b:9f:e2:e9:5e:6d:e9:7c:72:a4:0e:4b:
         69:8f:eb:12:ce:52:e1:83:35:21:3e:23:a2:00:6c:a2:94:c9:
         91:51:c8:17:81:09:68:2e:c1:50:a6:7f:61:da:c4:9e:93:db:
         a6:31:32:13:6f:f8:da:9a:29:e5:0d:b2:23:c0:73:86:80:3f:
         98:aa:e3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:10 2025 by rpki-client