Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File:                     rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier:          lFozrPGPQiK7fOFxCMj9XDREc+6OP/B4pUShq7JXcns=
Subject key identifier:   BE:33:F7:46:28:E7:AD:42:FD:4E:8E:75:ED:6F:BD:9B:FC:07:6A:9A
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer:       /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial:       0199FB7CC39E8D159AA82E918813C8255397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number:          05A9
Signing time:             Sun 19 Oct 2025 08:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:21 +0000
Files and hashes:         1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: SRaRcFAq6R+3B5n2v2M16/Te2EZcOpxVNr5cIQ6ECg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:c3:9e:8d:15:9a:a8:2e:91:88:13:c8:25:53:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
        Validity
            Not Before: Oct 19 08:01:21 2025 GMT
            Not After : Oct 20 08:01:21 2025 GMT
        Subject: CN=be33f74628e7ad42fd4e8e75ed6fbd9bfc076a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:fa:15:1a:75:e3:31:a1:8d:12:68:37:d8:
                    46:db:56:b2:56:c8:66:6b:4c:1b:8c:6c:49:03:54:
                    f2:a0:ca:26:11:c2:1e:b5:51:ab:c4:82:a8:7d:5f:
                    06:d6:7b:61:12:a0:fc:cc:d5:b5:9a:01:82:7e:7c:
                    62:19:a9:ac:9d:d6:69:5f:6a:3f:ee:ec:35:4e:74:
                    17:06:7b:dc:39:d3:a6:78:21:07:c3:4f:00:65:c0:
                    b4:fa:52:bd:e0:10:74:c8:45:7e:e6:e7:cc:9e:32:
                    4b:9a:a8:09:8f:8e:a0:2f:ce:cf:e9:d3:1a:dd:bb:
                    5b:ad:ab:35:45:1a:41:c9:ed:9d:f6:40:5a:15:d4:
                    a8:11:5a:61:67:b9:31:9c:e6:63:23:6b:be:d8:23:
                    8c:14:a1:7a:86:bb:ff:bd:cc:eb:c6:a7:a0:56:15:
                    97:57:55:b7:27:0f:4d:73:ec:26:99:f0:4d:2f:81:
                    10:da:af:2d:49:f8:7f:72:aa:a7:16:56:84:f7:e6:
                    37:a3:af:43:c1:cf:fa:33:2d:80:ad:a1:4a:0f:f6:
                    31:94:74:45:b5:33:47:52:75:4e:e9:e1:d7:9d:22:
                    51:83:86:a3:37:4c:d4:b6:1c:81:ae:38:41:44:1a:
                    82:6e:55:1c:94:ff:60:3c:67:27:76:6b:ac:c6:0c:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:33:F7:46:28:E7:AD:42:FD:4E:8E:75:ED:6F:BD:9B:FC:07:6A:9A
            X509v3 Authority Key Identifier:
                keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:75:a1:bb:e2:53:66:b7:f3:51:29:48:cf:e0:f0:1f:4b:
         15:e1:c5:92:a1:b3:50:97:ad:d4:3b:9f:fc:a6:28:fe:9c:67:
         ec:b6:6f:2e:96:7c:b8:f3:1d:2b:d4:44:5f:4e:9c:19:f9:52:
         0f:b6:8f:d2:12:2d:4a:c3:cc:8a:25:35:2a:87:c1:ee:35:4a:
         13:7e:b0:42:0e:a6:e3:67:12:82:97:57:bc:8f:fd:0c:2b:70:
         eb:86:d2:ca:2d:ac:92:e6:0c:2d:be:21:28:fc:67:e7:3b:63:
         13:7d:2d:dc:70:6f:a0:1e:bd:f4:c1:40:1c:0b:70:3d:69:27:
         33:6c:96:04:48:e1:2d:f5:d4:e5:ee:bf:db:98:d8:80:dd:58:
         bc:04:ae:2c:4d:2a:f9:df:75:39:df:42:53:4b:5b:27:83:a5:
         3f:e3:b0:2d:59:99:7f:6f:1f:28:fe:26:db:5e:e5:73:13:09:
         31:ab:48:6c:6d:c6:87:7d:16:16:c0:62:f4:b9:45:5c:99:72:
         9a:c0:41:36:ac:ba:05:d9:2a:2f:66:9d:77:27:4d:f0:c8:68:
         25:fa:c3:9e:d5:98:54:c9:1e:56:20:dc:68:12:e8:c3:be:bc:
         93:fd:ae:81:91:d1:5a:ab:98:a9:e1:2c:1f:f6:e6:78:76:78:
         0b:16:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:16 2025 by rpki-client