Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
File:                     _5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft (raw, json)
Hash identifier:          E1HxZJ2oKOtzD5HJ/59V5QcIFOG9qXAK6HUKStM2mqw=
Subject key identifier:   05:1C:09:9F:CA:E7:B5:01:12:7C:64:72:12:23:4D:74:78:37:90:94
Authority key identifier: FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4
Certificate issuer:       /CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
Certificate serial:       0199FC58EED46D7771EA25620E587CED0258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 12:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:50 +0000
Files and hashes:         1: _5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl (hash: 55QJiaTkqVvwhyJFMHUFyxuEMhuKZtgvNndyz0BRuPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ee:d4:6d:77:71:ea:25:62:0e:58:7c:ed:02:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff97f1eca4c8c4f00c26553257dcd22be60932e4
        Validity
            Not Before: Oct 19 12:01:50 2025 GMT
            Not After : Oct 20 12:01:50 2025 GMT
        Subject: CN=051c099fcae7b501127c647212234d7478379094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:e0:34:18:21:f7:c1:6b:e5:b6:ba:aa:f7:
                    a3:dc:10:f3:21:f4:a3:93:1a:f1:e1:d5:1e:df:97:
                    49:57:8f:6e:fe:19:10:5e:25:64:61:23:8a:b2:ef:
                    3d:f1:6c:e8:e6:fe:e4:19:f9:a1:e7:51:1a:dc:e9:
                    e6:13:84:88:09:21:2a:6c:ce:80:72:79:31:7d:39:
                    f4:3c:95:78:b4:bb:0e:95:4d:37:18:51:37:21:fe:
                    f8:91:04:8d:31:b8:79:c8:2b:a2:59:5c:c5:07:94:
                    e8:91:1f:12:9a:74:c1:7d:47:64:3c:45:9c:c9:ec:
                    5d:f8:23:9a:08:ce:56:56:91:0d:9f:bc:b9:45:b6:
                    11:48:1d:24:08:fd:b1:33:d8:ed:d2:a4:db:e4:57:
                    98:c4:5e:66:86:b9:f7:47:ea:4a:17:70:15:d2:0d:
                    69:75:33:26:2a:9b:2c:ee:22:bf:38:55:6b:a8:92:
                    3a:41:52:1d:aa:6a:c0:bd:fb:9a:6b:ae:e7:91:7d:
                    8e:c9:c5:48:7f:fc:a2:bb:52:b7:a0:f1:c2:fa:3f:
                    47:18:f4:6e:6d:3d:44:5a:9d:14:c2:75:a5:44:bb:
                    da:5b:9a:21:32:31:96:ff:e4:39:d9:8c:72:12:aa:
                    12:00:ac:fc:b5:c2:10:f6:2f:f0:74:d2:47:5e:43:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:09:9F:CA:E7:B5:01:12:7C:64:72:12:23:4D:74:78:37:90:94
            X509v3 Authority Key Identifier:
                keyid:FF:97:F1:EC:A4:C8:C4:F0:0C:26:55:32:57:DC:D2:2B:E6:09:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e58386-bcf8-4826-95ec-f9c75ad3aed3/1/_5fx7KTIxPAMJlUyV9zSK-YJMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:0f:f5:02:b8:74:5b:b6:88:ab:39:78:a1:6f:40:b7:6e:
         87:81:5f:9f:ec:57:8a:03:81:e7:0d:3e:08:b0:39:a7:a4:c8:
         73:f2:e9:db:3a:76:88:50:a0:01:2a:32:91:53:d6:c4:8b:cd:
         cd:81:5e:f3:6d:85:f4:97:1e:6d:d2:b5:81:c4:ba:ea:ec:61:
         ca:b8:30:37:ba:ba:52:c6:8c:5a:c4:4a:2d:a5:79:ce:ac:e9:
         e1:e3:b3:c3:82:90:d8:78:39:5d:19:72:bd:be:41:c2:62:94:
         88:0d:86:6b:bb:00:1d:9a:1a:b3:1b:42:20:22:fa:a6:51:28:
         98:cb:a2:82:10:d0:18:63:80:ff:82:9c:52:56:7b:71:e3:07:
         30:77:a3:f6:b7:0a:81:f6:f1:8f:08:96:df:ba:2d:c9:9b:38:
         c6:a2:53:00:39:d0:c0:59:fc:86:45:c3:5b:37:e6:b9:98:b1:
         ba:c9:8a:c8:e1:72:56:62:99:63:aa:66:cd:d9:fc:0f:33:1c:
         58:11:ac:47:9a:0d:c4:ed:42:33:fb:ca:04:b6:eb:74:fb:19:
         f0:60:bd:e9:f5:d0:88:67:ea:7c:f0:59:1d:b9:a7:94:bb:1b:
         a5:78:11:2a:61:ac:5f:d3:ce:99:4b:ec:c6:87:dc:9b:89:a1:
         01:81:a3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:46 2025 by rpki-client