Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
File:                     7uWTl_XWr-28jZFmr_67KAAJH5Q.mft (raw, json)
Hash identifier:          Jd4hR8pL8LZkvTKTOPdhf74sLiG3v+jtmBucWU4znZM=
Subject key identifier:   10:E9:C0:13:BA:67:4A:B4:A9:91:F3:38:B1:2C:76:AB:15:A0:2A:C4
Authority key identifier: EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94
Certificate issuer:       /CN=eee59397f5d6afedbc8d9166affebb2800091f94
Certificate serial:       0199FDD93D6F986B5B8013CD8AA557CEC844
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
Manifest number:          1111
Signing time:             Sun 19 Oct 2025 19:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:36 +0000
Files and hashes:         1: 7uWTl_XWr-28jZFmr_67KAAJH5Q.crl (hash: 7TwxSK5tQ1Z0ho9XtxtsnsGSpcIBPUkVe/kv73G13vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:3d:6f:98:6b:5b:80:13:cd:8a:a5:57:ce:c8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee59397f5d6afedbc8d9166affebb2800091f94
        Validity
            Not Before: Oct 19 19:01:36 2025 GMT
            Not After : Oct 20 19:01:36 2025 GMT
        Subject: CN=10e9c013ba674ab4a991f338b12c76ab15a02ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b1:e8:09:58:08:b0:da:e7:75:6c:c9:23:4d:
                    f6:22:d7:ef:a7:9d:fe:80:e7:36:25:3e:9e:d2:b1:
                    4d:1f:6e:b0:47:43:70:76:91:8e:dc:32:73:85:e9:
                    6b:b7:8d:ab:97:1b:d1:c0:e8:34:69:b1:c4:f5:3a:
                    89:50:1d:15:09:44:72:0e:fd:6e:46:5b:69:80:73:
                    fc:44:a0:7e:e2:e4:8d:85:d0:4c:34:a9:00:c8:7b:
                    ff:43:fd:20:5d:84:f3:8d:47:5d:47:b2:fe:03:42:
                    5c:d7:f1:bf:9c:1e:0f:87:e7:20:ba:a5:19:1d:fb:
                    9b:f8:b5:c2:58:c8:07:1f:8b:48:42:70:25:cb:74:
                    88:ec:49:55:b2:be:f7:74:d5:96:67:2a:c0:ff:49:
                    38:8b:40:73:5c:d4:aa:13:16:d5:c9:ba:e4:d7:e0:
                    57:3d:2c:2c:8b:ea:6e:55:8e:10:bf:81:11:90:ac:
                    ff:b4:bd:a0:87:ce:b6:b8:62:34:17:21:95:c8:df:
                    5c:67:30:40:bc:7e:00:e4:5e:84:69:0f:b2:5a:57:
                    d6:34:c5:b5:cc:dc:9a:9a:0d:3c:66:2f:88:06:a6:
                    1b:92:6b:3b:e5:8c:1a:22:fb:68:54:d8:29:c9:8e:
                    29:c9:70:d9:45:62:b4:77:a6:8e:09:0d:68:75:72:
                    61:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E9:C0:13:BA:67:4A:B4:A9:91:F3:38:B1:2C:76:AB:15:A0:2A:C4
            X509v3 Authority Key Identifier:
                keyid:EE:E5:93:97:F5:D6:AF:ED:BC:8D:91:66:AF:FE:BB:28:00:09:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uWTl_XWr-28jZFmr_67KAAJH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/24896d-e90d-4903-ae6e-e7df94e02234/1/7uWTl_XWr-28jZFmr_67KAAJH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:48:03:a5:ce:9f:c9:7a:e4:e6:ad:ac:0a:4a:54:5f:de:
         a9:5a:5f:44:30:1b:e7:ff:7b:55:f8:84:2e:0d:90:25:b4:5b:
         30:21:21:ae:80:9a:1f:6b:ce:a9:e3:58:42:da:d6:67:02:2c:
         a2:d1:9c:d7:34:04:44:20:2d:c4:e6:ac:d3:ff:36:da:b1:61:
         ba:c8:f1:a8:7f:04:fe:2d:15:3f:89:b8:6e:1a:63:08:5f:4b:
         4e:1d:98:fc:49:0d:55:cb:05:da:0e:92:17:7c:57:96:2c:32:
         cc:fa:35:63:11:68:f0:3a:e4:00:29:89:8e:59:8b:7a:ed:0d:
         6b:67:c1:30:45:b3:33:cb:6e:c3:05:29:54:f7:61:56:52:80:
         1d:96:1e:a1:b0:90:ce:d7:2c:18:c2:c8:42:1b:a1:1e:1e:9d:
         1e:85:73:4f:b4:8d:a8:c9:b6:00:41:61:9b:75:42:be:56:60:
         f5:9f:84:17:1f:3f:fb:99:4f:09:8b:94:f4:e3:67:b9:75:1b:
         e8:a0:62:db:ec:98:9a:b6:d2:ae:f8:89:f8:cc:18:6f:79:3d:
         59:8b:bf:15:08:cb:13:ef:85:d9:bc:98:9d:81:84:9e:e1:26:
         4e:14:b1:c3:13:1d:8d:88:91:1d:3b:5f:9e:70:12:e5:75:64:
         64:ea:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:37 2025 by rpki-client