Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File:                     kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier:          LajT2f5vSqqxbhvT2CV+xWG1dy0HmpVn5TCtq1nHXWg=
Subject key identifier:   2F:5F:FF:AA:D2:62:CD:79:78:53:3F:1F:DC:F7:9E:E7:71:2A:7D:62
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer:       /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial:       0199FC213943D94237FBF955CC9003B2CBA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number:          1673
Signing time:             Sun 19 Oct 2025 11:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 11:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 11:00:59 +0000
Files and hashes:         1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: amQj88mWDXn1tHVd6YdBapRqMXDw21b9vAqhvD1CEtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:39:43:d9:42:37:fb:f9:55:cc:90:03:b2:cb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
        Validity
            Not Before: Oct 19 11:00:59 2025 GMT
            Not After : Oct 20 11:00:59 2025 GMT
        Subject: CN=2f5fffaad262cd7978533f1fdcf79ee7712a7d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:18:0f:72:85:8b:1e:35:9b:de:17:63:90:
                    5a:88:73:2c:a1:19:fd:f7:30:5c:b1:f4:5b:99:18:
                    de:4b:58:16:4c:7a:7b:f2:d3:6e:0e:56:94:7b:25:
                    d9:69:93:8f:ea:ca:ca:35:3e:53:f8:0d:2a:ea:e4:
                    a1:f2:ff:84:75:73:e9:27:48:20:1a:0a:b8:3c:40:
                    db:af:c2:ca:3b:dc:12:63:d6:67:0e:05:d0:9b:14:
                    45:33:b4:ae:4c:d0:b3:9b:99:9b:f0:19:94:af:84:
                    5e:24:6f:a1:d0:d1:46:6b:e2:5a:1b:83:3c:05:5c:
                    90:5b:d9:1b:9f:39:1f:f2:96:db:58:1b:b2:bf:c5:
                    08:db:8c:60:4b:d9:51:92:89:b2:27:f3:dc:97:e7:
                    45:8d:48:de:65:b7:9d:4c:6e:d5:8c:4f:74:c7:1e:
                    0b:f2:e4:e6:f1:ab:4e:04:40:bb:cf:fa:a3:1c:b5:
                    6d:3f:5a:3c:4e:91:0f:58:03:d5:d5:47:88:25:3b:
                    28:21:15:67:6c:7c:24:4d:2a:36:44:01:52:55:fc:
                    35:aa:64:8c:7d:9f:5b:9b:dd:6d:4a:d1:9b:ad:05:
                    d3:3e:4a:ec:3d:e7:b3:d2:f1:f5:5d:38:3f:83:bb:
                    2d:a1:a3:0a:e2:5d:1e:34:d7:da:48:22:03:c3:47:
                    77:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5F:FF:AA:D2:62:CD:79:78:53:3F:1F:DC:F7:9E:E7:71:2A:7D:62
            X509v3 Authority Key Identifier:
                keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:a5:f5:08:5b:ef:c6:91:62:01:c8:70:05:8b:ad:98:4f:
         ae:70:18:8a:dd:d2:69:4c:1a:5c:9e:f9:44:06:7d:d0:2f:86:
         5d:d1:dc:72:1c:08:ef:68:fd:a5:80:aa:ab:af:47:8e:e1:5f:
         ee:19:62:99:df:24:8e:37:d8:0f:3e:f9:fc:65:fd:8f:ea:f1:
         74:0c:c0:aa:f5:8c:8f:a6:5a:b2:19:83:5c:47:1c:40:b2:9a:
         cb:b5:ef:98:f9:6c:9f:dc:a1:86:08:83:79:d1:7c:4e:be:e0:
         8d:23:c3:85:2b:57:65:62:13:4e:b2:97:14:b3:1e:44:3b:00:
         e3:42:4c:a9:51:2f:a2:9e:b9:bd:8c:e6:59:dd:8e:f6:9e:d6:
         1e:5d:5a:94:8c:16:c0:af:9d:3f:9c:fd:42:eb:e5:42:34:7f:
         60:b3:42:89:11:c4:ab:21:f1:5e:84:d3:be:3f:ae:db:96:f1:
         6c:64:3a:33:22:a9:51:64:46:89:56:31:a2:63:18:1b:6e:9d:
         cd:7d:44:0d:fa:6a:64:0c:48:71:c0:a2:fa:dc:cd:31:78:bd:
         bc:2a:4e:64:9e:fc:19:e9:e8:80:f6:a1:0a:1e:9f:92:78:d1:
         d3:c6:7e:a1:3c:31:65:7f:58:70:be:5a:d9:4d:a4:fa:2b:12:
         bd:7f:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:07 2025 by rpki-client