Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
File:                     7cFfZVhGJAinV1N2WyxxplTxZ24.mft (raw, json)
Hash identifier:          D3kRm8wx3lCBb7/YaE53kBssgv6tmasmovluUIk3rwk=
Subject key identifier:   36:5E:84:A3:02:77:04:26:58:B8:C6:5B:B0:E8:82:4C:66:4A:5C:08
Authority key identifier: ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E
Certificate issuer:       /CN=edc15f6558462408a75753765b2c71a654f1676e
Certificate serial:       0199FD34067BC089E85328D1948C29E01B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
Manifest number:          1421
Signing time:             Sun 19 Oct 2025 16:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:09 +0000
Files and hashes:         1: 7cFfZVhGJAinV1N2WyxxplTxZ24.crl (hash: fnIe0mwGUwcmZ2ClpPFFfa3xNp9p/WMGvoyNyLnpqAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:06:7b:c0:89:e8:53:28:d1:94:8c:29:e0:1b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edc15f6558462408a75753765b2c71a654f1676e
        Validity
            Not Before: Oct 19 16:01:09 2025 GMT
            Not After : Oct 20 16:01:09 2025 GMT
        Subject: CN=365e84a30277042658b8c65bb0e8824c664a5c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:16:f2:53:2f:7a:13:6f:4f:97:00:05:8c:ba:
                    80:8a:26:e6:52:96:a2:7a:05:40:43:65:97:c4:1b:
                    e1:92:46:01:a6:62:23:35:0f:1a:bd:46:06:56:0d:
                    01:6b:99:ed:14:c9:46:a3:b6:ae:17:08:7c:81:c1:
                    c7:16:97:f9:4d:6b:e2:a6:83:bb:57:a6:4c:be:12:
                    6f:53:31:02:29:9b:6f:15:e6:c7:2e:8d:d9:0d:1f:
                    38:a4:6b:7e:9d:80:8c:f5:4b:36:b2:cb:be:38:b1:
                    59:e9:b2:82:7f:1d:3d:71:04:cb:f0:85:2c:35:2b:
                    9c:fc:10:9f:9b:01:0c:d1:22:08:53:4d:99:a9:33:
                    86:da:cf:4c:f5:f4:db:72:a8:86:9d:ab:f7:e7:55:
                    c9:72:2c:94:de:0c:58:3b:27:2c:ba:50:a8:bc:16:
                    d3:f3:40:03:ca:9b:ac:f3:1c:67:1f:7a:43:07:fd:
                    d9:f8:5f:1f:ca:01:ec:74:56:e4:bf:84:81:39:5c:
                    eb:80:11:f1:b0:85:3c:06:2d:35:8a:8b:91:e3:c9:
                    51:0f:cf:36:e7:b5:9a:e8:5d:14:d1:53:b9:35:a7:
                    ea:58:c1:a3:59:d1:6e:ee:ba:cd:e8:71:61:08:5d:
                    fb:25:b7:a7:c9:96:a3:6b:2e:50:e4:86:c0:1d:c1:
                    95:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5E:84:A3:02:77:04:26:58:B8:C6:5B:B0:E8:82:4C:66:4A:5C:08
            X509v3 Authority Key Identifier:
                keyid:ED:C1:5F:65:58:46:24:08:A7:57:53:76:5B:2C:71:A6:54:F1:67:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cFfZVhGJAinV1N2WyxxplTxZ24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e89e19-465f-41f2-a4c7-dd431bcce3dd/1/7cFfZVhGJAinV1N2WyxxplTxZ24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:61:1f:7d:a2:57:e3:4c:90:54:2a:e4:f5:4b:1b:26:af:c9:
         b4:57:da:b2:0b:ba:2c:0e:1b:eb:ff:11:ad:a3:26:4f:db:2e:
         a2:07:15:b2:e1:00:57:a8:75:2d:eb:30:de:63:30:77:43:ef:
         9d:91:db:29:a6:99:7a:45:46:be:bb:b9:d9:62:a1:0a:fc:e7:
         57:01:43:44:91:d5:58:8d:fd:da:38:12:f3:b0:ac:62:c2:fd:
         e8:ea:db:9c:66:cc:b6:5c:25:4c:a9:03:5a:5e:5c:cd:af:a9:
         72:1d:49:4e:e1:4f:55:27:8f:3f:a3:00:c3:08:8d:d5:a3:82:
         97:b1:b6:49:e8:f5:b2:81:e2:7f:3a:a5:75:a0:38:7f:18:d3:
         f7:b0:09:03:cc:a5:12:d4:89:1f:2a:f0:e2:76:5a:91:82:34:
         46:a4:90:d9:6a:77:31:0f:75:8f:bc:49:db:69:1c:c5:a2:95:
         f3:a3:6e:e4:37:d4:d3:c8:06:89:ef:92:d2:cc:41:0c:bb:2b:
         96:7b:a5:2f:f8:48:20:9a:89:bb:a4:d6:fe:0b:57:d4:5b:f4:
         a4:9d:13:ef:44:3a:8f:7f:be:83:dd:97:77:97:3a:a0:76:16:
         b9:45:b4:d5:06:e1:83:81:ff:28:b4:00:44:10:f4:d6:c1:40:
         26:db:45:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:03 2025 by rpki-client