Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
File:                     6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft (raw, json)
Hash identifier:          Lwhnjkz3c6yVdNtro5ijewfosyqF6em4MNe/nHzDEgM=
Subject key identifier:   27:2E:E0:76:B2:C0:C1:E8:2F:08:A1:A5:F5:E6:F4:F9:52:3D:AF:92
Authority key identifier: E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44
Certificate issuer:       /CN=e9fd01e250b4230276b31e0b8328d87e6974e644
Certificate serial:       0199FCC659489059DA59CC9EABDE08FC47D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 14:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:21 +0000
Files and hashes:         1: 6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl (hash: Cl08zNWQfvXX2v0+at9o1eURcgs8s9f1poTMJUCtH+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:59:48:90:59:da:59:cc:9e:ab:de:08:fc:47:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9fd01e250b4230276b31e0b8328d87e6974e644
        Validity
            Not Before: Oct 19 14:01:21 2025 GMT
            Not After : Oct 20 14:01:21 2025 GMT
        Subject: CN=272ee076b2c0c1e82f08a1a5f5e6f4f9523daf92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9b:d5:87:f9:e0:41:3c:50:58:d4:46:b7:58:
                    fd:79:ef:88:99:c9:d3:8f:5f:b2:1c:3f:d4:94:da:
                    dd:c3:31:34:61:d2:03:69:6d:af:c1:df:d4:fd:11:
                    e2:73:95:44:d4:56:e0:41:6b:ab:19:e7:10:c4:4b:
                    9a:c4:52:4f:ca:3f:87:e1:bf:66:d0:96:99:ac:8d:
                    86:66:ef:e1:cb:6d:3e:55:01:40:b0:ce:f7:24:ca:
                    66:b7:10:bf:98:f5:6e:d3:31:bc:44:7f:cd:c1:57:
                    a0:e2:88:13:0b:54:9d:c2:71:c5:bf:40:7a:25:65:
                    f3:5c:2e:f3:99:31:5b:c8:10:bc:54:3c:fa:bf:91:
                    9b:d1:f9:b1:ee:78:0c:8d:59:fc:b7:3d:ed:e4:4c:
                    80:c6:5a:71:1c:cf:67:ea:b3:35:5f:ec:a5:f7:63:
                    4f:23:df:34:60:00:be:27:07:b1:00:c2:08:0c:f4:
                    61:23:2b:95:5f:40:8a:b6:62:58:15:64:55:aa:1b:
                    31:91:da:0e:14:ae:e3:d1:37:3d:33:6c:dc:db:82:
                    42:0b:fc:ad:bd:34:77:59:f1:3e:c4:01:4f:65:9b:
                    f9:ef:15:e1:d5:02:ed:37:d6:e6:b1:6f:ac:66:32:
                    dd:91:ee:d0:c6:45:c7:f1:20:97:67:3c:62:b1:fe:
                    4a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:2E:E0:76:B2:C0:C1:E8:2F:08:A1:A5:F5:E6:F4:F9:52:3D:AF:92
            X509v3 Authority Key Identifier:
                keyid:E9:FD:01:E2:50:B4:23:02:76:B3:1E:0B:83:28:D8:7E:69:74:E6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0B4lC0IwJ2sx4LgyjYfml05kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/31fb57-7ffd-49f8-9a77-ab475809d140/1/6f0B4lC0IwJ2sx4LgyjYfml05kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b8:47:9b:fa:cc:9b:48:2b:d4:c3:15:b3:f0:ed:2a:9b:ad:
         c9:45:d2:90:d0:88:9b:de:da:4a:87:1d:2d:b4:7b:29:c5:e8:
         1c:65:bd:6a:71:75:8b:b6:d3:d5:59:e0:67:14:91:15:39:38:
         ea:8c:22:2a:90:e6:ca:c3:12:44:b0:4d:15:b6:bd:5f:62:76:
         b0:8a:0b:1c:bf:b8:ed:1b:e1:59:73:e1:6e:d9:de:f5:88:ac:
         49:d1:b9:a0:cb:5a:5b:18:cb:e6:da:53:ed:68:6a:76:89:ab:
         3d:3b:ad:a3:2a:c0:ad:4e:0e:fd:e7:a0:bf:6f:36:e5:40:76:
         3d:50:1e:47:5d:e0:0c:9a:76:78:e4:ff:69:8c:eb:42:4c:33:
         8d:f5:e6:6e:bc:9b:c4:3c:af:2a:0a:2d:de:c9:1d:45:91:2c:
         33:da:89:b2:12:c1:59:d7:ca:3a:08:f6:c9:7b:aa:bc:62:bf:
         69:98:d6:e5:77:4c:da:f3:d4:ca:12:c9:0e:97:46:2f:5b:3f:
         0d:a5:87:18:ed:0f:9f:c9:c1:6d:fe:63:07:ac:28:35:17:d0:
         12:43:b6:a1:fe:13:bd:f1:a9:09:92:97:ad:c1:1c:3c:dc:3d:
         ec:ab:16:d9:ae:f2:44:5d:18:9b:3d:e2:a2:62:f2:2b:02:cf:
         23:e3:08:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:46 2025 by rpki-client