Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
File:                     luqmiIUr9hQfUxdoBoMLTRbHZq8.mft (raw, json)
Hash identifier:          VRTaGld92VbZsuLrwAPmLmwsPg4W6/OuFV85oorv5u0=
Subject key identifier:   4D:C4:7C:73:27:70:DD:F6:4B:35:4A:1F:97:FD:85:D5:C1:1F:32:B0
Authority key identifier: 96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF
Certificate issuer:       /CN=96eaa688852bf6141f53176806830b4d16c766af
Certificate serial:       0199FC2151D55A24FC6226700DA6887626BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
Manifest number:          97
Signing time:             Sun 19 Oct 2025 11:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:05 +0000
Files and hashes:         1: luqmiIUr9hQfUxdoBoMLTRbHZq8.crl (hash: I4YhJqbsBBDdYLgfa6qK/EPMfVJ8CCZd5WissSgSKlU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:51:d5:5a:24:fc:62:26:70:0d:a6:88:76:26:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96eaa688852bf6141f53176806830b4d16c766af
        Validity
            Not Before: Oct 19 11:01:05 2025 GMT
            Not After : Oct 20 11:01:05 2025 GMT
        Subject: CN=4dc47c732770ddf64b354a1f97fd85d5c11f32b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:26:f9:8b:03:61:dc:42:cb:ed:e3:ae:54:29:
                    ec:37:31:1e:ce:03:d0:5c:f8:70:ef:a6:5b:a2:74:
                    25:dc:8c:8e:bf:2a:1c:85:7c:b2:59:b5:fd:8f:d7:
                    39:29:ad:2c:7e:ac:80:99:6b:2d:69:26:84:11:e1:
                    a3:78:73:b8:9a:8d:d9:20:14:4e:76:e1:ac:88:5a:
                    f7:a0:63:8f:96:b1:39:fc:f4:ef:16:8b:6e:67:f9:
                    a2:d8:c0:34:ff:b1:b0:20:cf:2b:b2:ea:7d:40:c3:
                    14:3e:d7:51:e8:dd:40:84:0b:b0:80:eb:68:82:3e:
                    24:07:28:87:99:ce:f5:5d:17:8f:bc:20:9a:7b:a0:
                    8a:34:ac:5c:7e:18:e7:08:37:0b:45:c8:02:19:42:
                    16:41:ae:9f:93:25:51:63:c8:8e:8e:21:e2:e8:54:
                    80:14:22:88:bd:5a:ef:55:2c:7d:8a:0a:1c:5b:01:
                    fd:de:01:9d:df:64:03:78:c4:9c:56:fb:53:3c:96:
                    d2:34:24:8a:27:28:87:e0:27:47:4b:b6:c0:19:1e:
                    5d:d3:12:21:8e:c0:34:49:e7:84:06:b7:47:eb:82:
                    c6:af:ad:c5:97:6d:ab:46:2d:e6:f5:aa:28:f7:4e:
                    c2:82:a8:f6:6d:fa:aa:a4:b7:d5:09:83:a1:e0:73:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:7C:73:27:70:DD:F6:4B:35:4A:1F:97:FD:85:D5:C1:1F:32:B0
            X509v3 Authority Key Identifier:
                keyid:96:EA:A6:88:85:2B:F6:14:1F:53:17:68:06:83:0B:4D:16:C7:66:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqmiIUr9hQfUxdoBoMLTRbHZq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d26727-b512-4d37-b03d-4c4f70433741/1/luqmiIUr9hQfUxdoBoMLTRbHZq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:19:c5:c1:86:6d:64:c4:9c:a8:92:89:43:35:ee:df:9c:5b:
         45:1f:57:59:8e:04:a8:ac:89:4c:b7:23:6c:7e:d8:5f:f6:ba:
         1e:74:38:0f:c9:ad:cb:44:40:19:fd:41:f7:f6:a6:e2:1e:b5:
         a1:26:d6:b4:31:60:b2:39:fb:55:1f:48:20:0f:4b:02:35:c9:
         f5:6a:38:71:5f:80:e1:42:4c:f2:a4:bf:75:aa:e0:95:7c:16:
         7c:70:ac:20:d9:e5:b9:ae:80:c8:f1:be:c4:c2:7e:ba:6a:61:
         08:b2:aa:a6:c0:bf:8a:da:35:d2:01:e9:38:0d:b1:f2:37:d7:
         a6:c7:7b:26:59:47:fd:b9:c5:17:24:18:50:5a:57:ae:51:b7:
         5b:5f:76:b4:80:9b:4f:5d:1e:01:be:d4:9d:38:fc:2d:a0:a8:
         13:56:57:82:38:85:a8:dd:77:a6:00:27:32:74:01:27:3a:70:
         6d:32:57:f7:1c:35:b3:39:27:d0:82:d9:1f:f0:44:dc:70:be:
         7f:a6:a6:7a:d6:ce:a5:8a:b4:15:b0:bb:e2:6a:36:d4:dd:2f:
         64:66:3b:2f:e2:53:c7:a4:24:8d:63:f2:96:5c:6d:7b:c4:80:
         53:01:39:17:81:08:0b:a5:99:40:65:5b:91:b6:97:a1:d9:ba:
         68:45:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:01 2025 by rpki-client