Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File:                     zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier:          Pjf8+jMKu6BO6UyNhQmCgiZVJolA1X6DFoCeRB47c58=
Subject key identifier:   8C:08:00:F6:90:46:20:A8:AF:E0:C1:EC:F5:76:4E:12:3C:92:03:5D
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer:       /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial:       0199FD345C74852D87EC32E1A06D3F2C3230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number:          15FC
Signing time:             Sun 19 Oct 2025 16:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:31 +0000
Files and hashes:         1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: FhWAr/NmbcxV0lSfM1CXBdtoE8zHLmqzEpEGHfP4y7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:5c:74:85:2d:87:ec:32:e1:a0:6d:3f:2c:32:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
        Validity
            Not Before: Oct 19 16:01:31 2025 GMT
            Not After : Oct 20 16:01:31 2025 GMT
        Subject: CN=8c0800f6904620a8afe0c1ecf5764e123c92035d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ac:41:f4:b2:26:de:44:11:e0:d4:a6:b5:98:
                    6c:c2:ed:7a:cb:4e:e6:93:a5:b7:ea:16:8a:b7:60:
                    fc:9e:3f:ad:ab:cb:af:46:e1:96:ec:fb:de:5b:a9:
                    f3:c3:ce:66:90:4a:59:21:ca:4f:ca:76:1d:b5:80:
                    ed:96:1d:ab:09:8b:8a:35:6b:8d:40:56:8b:4c:21:
                    0b:f9:cc:a5:08:75:a3:9d:92:c2:d5:d6:3c:71:45:
                    50:ba:9b:39:7b:f8:ad:4d:6b:16:85:10:9c:0d:c8:
                    cb:db:d7:5f:d1:2b:25:44:ab:4f:7d:ac:d6:02:83:
                    5a:9d:fd:d7:e3:88:5f:ec:e9:d7:90:f3:0f:c2:90:
                    dc:8f:51:0e:a9:40:31:de:03:c6:5a:ec:61:74:b2:
                    46:85:57:64:47:2d:c3:81:ad:d0:44:14:fe:15:d0:
                    65:7a:28:1b:dc:1e:ff:f3:02:78:52:85:fb:5f:f9:
                    d9:cd:2e:38:f7:11:fb:de:a5:f0:43:1d:de:c0:43:
                    d6:1d:2d:da:f9:2c:04:a5:80:fc:13:51:c3:8c:1f:
                    88:3a:62:8e:27:d3:1a:b3:17:97:b9:42:35:ec:ca:
                    5d:3a:7f:66:25:5f:47:3f:6f:af:04:35:d5:79:22:
                    2a:7b:c8:6e:71:4b:f4:65:b9:4b:c4:bf:21:61:7d:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:08:00:F6:90:46:20:A8:AF:E0:C1:EC:F5:76:4E:12:3C:92:03:5D
            X509v3 Authority Key Identifier:
                keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:51:54:18:48:a3:28:5e:02:dd:9d:14:e6:bc:da:90:68:21:
         6f:08:82:0e:62:0d:06:68:83:25:d2:c1:4e:03:01:8d:e9:9b:
         e1:b8:12:8a:4e:b2:46:81:c5:9f:1d:bf:89:ff:87:9e:1f:fe:
         65:b8:74:47:16:fc:c1:55:c0:78:32:79:b3:44:79:03:5c:18:
         20:90:32:3b:ba:83:2b:38:a3:85:88:d7:eb:06:14:26:c4:e2:
         72:af:da:36:9a:bb:8a:8f:f9:c4:7b:aa:7e:e8:b6:f2:c0:55:
         af:8e:f5:86:66:d6:b8:10:6c:05:96:ca:5e:d5:17:56:9e:b8:
         34:bd:e2:2f:ea:1c:40:44:07:55:2a:e4:d6:60:3b:eb:d7:4c:
         a3:aa:56:6d:14:c9:aa:fa:a2:e6:09:f9:a8:3d:85:c5:df:32:
         48:f4:8c:f8:93:28:b2:3d:a7:83:f1:fd:23:72:69:d0:73:a1:
         03:2b:46:2b:09:1f:12:57:14:d5:87:3b:df:92:d9:0f:47:37:
         e9:b2:ef:13:18:61:1f:72:80:aa:94:03:90:4a:7b:d3:44:d9:
         28:97:2f:66:21:85:a4:ca:de:a7:93:19:38:c0:92:a1:82:5d:
         30:ef:94:98:72:a1:72:2a:2e:30:50:b7:32:41:bc:33:06:aa:
         1f:aa:dc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:55 2025 by rpki-client