Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File:                     E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier:          SvZAqd+a9Apxu1epwa836MIGuNX9155FHMyHfT1bNxc=
Subject key identifier:   74:A5:2C:87:8A:A8:BE:03:8A:4B:6A:61:6A:01:22:D2:FF:21:74:37
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer:       /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial:       0199FEB47AFDC3F5F1CF9138CE94A5BBDAB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 23:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:04 +0000
Files and hashes:         1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: LuX7Zvi+0pW0Urf30/3SVT2Qa2HStaOHoFCKS45y1sY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:7a:fd:c3:f5:f1:cf:91:38:ce:94:a5:bb:da:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
        Validity
            Not Before: Oct 19 23:01:04 2025 GMT
            Not After : Oct 20 23:01:04 2025 GMT
        Subject: CN=74a52c878aa8be038a4b6a616a0122d2ff217437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:53:8e:c2:21:8f:78:e5:8b:9e:3c:ca:34:
                    ca:06:af:cf:0e:d3:5f:96:b2:44:ae:55:66:4a:96:
                    10:d5:9a:72:1c:ce:d7:1a:38:12:71:d0:40:7f:11:
                    91:e3:0c:fe:54:f9:40:4c:20:45:98:fb:8b:00:f2:
                    56:a0:00:0c:db:b5:95:11:04:4e:51:a3:6f:7a:82:
                    16:bf:6b:ac:5f:12:5b:85:c9:ee:cd:01:aa:76:4c:
                    26:c5:ba:59:e5:e1:2b:42:34:8a:ba:e5:4b:c7:3e:
                    ac:10:85:c9:d5:e1:be:f0:ae:12:9a:11:af:5a:e9:
                    cb:f3:91:6e:fd:d3:a1:6f:80:cf:dd:14:a3:f7:eb:
                    a1:03:30:93:41:fc:3e:dc:23:ed:4a:77:ef:73:fd:
                    4e:b6:89:cb:8d:b6:24:df:76:bb:c7:f4:13:b1:ea:
                    05:d6:34:58:30:fa:7a:ed:f1:c0:f3:7d:6c:8f:f4:
                    87:1d:0c:c3:66:b8:57:27:c0:50:fc:92:e4:ce:42:
                    7f:e0:12:ce:79:8c:51:b0:f9:c4:09:b8:0e:bb:e4:
                    f6:59:0d:0d:f2:ba:cf:04:9f:a7:59:29:8e:42:f1:
                    f2:6a:cb:68:b2:65:5f:3d:6a:b2:e0:c0:8b:dc:b9:
                    83:f2:4b:bf:df:22:ee:a2:f7:9d:0d:31:a9:67:ea:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A5:2C:87:8A:A8:BE:03:8A:4B:6A:61:6A:01:22:D2:FF:21:74:37
            X509v3 Authority Key Identifier:
                keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5d:c6:1c:b5:08:ea:40:1b:81:eb:a3:69:c0:6f:f4:3a:48:
         f8:d3:e2:08:7a:fd:df:86:61:38:3d:82:d7:87:e3:09:a3:ef:
         14:23:dd:81:c7:be:ac:79:14:4b:36:cc:60:3d:88:90:a8:71:
         b4:94:e2:c5:63:0f:07:0c:6d:9c:de:8c:c4:35:ac:4a:03:ac:
         1b:dc:2e:72:3e:ed:70:7b:54:1e:5b:83:64:83:b0:3f:a4:10:
         ca:f8:cf:1a:20:bf:c1:a4:8d:16:0d:97:86:2b:84:8e:fd:26:
         06:70:61:ce:e9:da:e0:98:2f:3a:3c:38:df:79:8d:09:3a:12:
         7a:f1:fd:b6:c9:10:7b:38:95:08:4f:b7:73:ed:f6:c3:28:9a:
         ed:0c:fd:3a:48:03:60:13:e5:12:8a:c2:1a:8e:19:a7:c8:28:
         1c:2b:7d:88:a6:fc:0c:61:77:7f:46:54:eb:57:cf:7f:12:fc:
         03:af:8f:11:a9:d9:df:9d:5e:aa:01:6e:17:70:19:cd:b4:cd:
         45:e2:da:20:d3:90:f0:f7:a8:20:a0:19:c5:1f:ff:cb:d3:c4:
         57:03:7e:21:91:ed:e4:4e:7f:07:f5:5a:44:74:2d:d4:22:0a:
         2c:e9:da:16:0f:ec:4c:21:18:db:5e:d4:a0:b4:a0:fc:30:62:
         f2:78:69:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tHr9w/Xxz5E4zpSlu9q5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjdhNTkyMWE0ZjE0OGM3OGFhNmMyMWY4NGYyY2ZjOGQ4
OGU5YzkwHhcNMjUxMDE5MjMwMTA0WhcNMjUxMDIwMjMwMTA0WjAzMTEwLwYDVQQD
Eyg3NGE1MmM4NzhhYThiZTAzOGE0YjZhNjE2YTAxMjJkMmZmMjE3NDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2FTjsIhj3jli548yjTKBq/PDtNf
lrJErlVmSpYQ1ZpyHM7XGjgScdBAfxGR4wz+VPlATCBFmPuLAPJWoAAM27WVEQRO
UaNveoIWv2usXxJbhcnuzQGqdkwmxbpZ5eErQjSKuuVLxz6sEIXJ1eG+8K4SmhGv
WunL85Fu/dOhb4DP3RSj9+uhAzCTQfw+3CPtSnfvc/1OtonLjbYk33a7x/QTseoF
1jRYMPp67fHA831sj/SHHQzDZrhXJ8BQ/JLkzkJ/4BLOeYxRsPnECbgOu+T2WQ0N
8rrPBJ+nWSmOQvHyastosmVfPWqy4MCL3LmD8ku/3yLuovedDTGpZ+p2CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSlLIeKqL4DiktqYWoBItL/IXQ3MB8GA1UdIwQY
MBaAFBNnpZIaTxSMeKpsIfhPLPyNiOnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQt
NGY1ZWIyYzg4YzI4LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9kYjc1NWEtMWRiOS00YTY5LWE5YmQtNGY1ZWIyYzg4YzI4
LzEvRTJlbGtocFBGSXg0cW13aC1FOHNfSTJJNmNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATV3GHLUI
6kAbgeujacBv9DpI+NPiCHr934ZhOD2C14fjCaPvFCPdgce+rHkUSzbMYD2IkKhx
tJTixWMPBwxtnN6MxDWsSgOsG9wucj7tcHtUHluDZIOwP6QQyvjPGiC/waSNFg2X
hiuEjv0mBnBhzuna4JgvOjw433mNCToSevH9tskQeziVCE+3c+32wyia7Qz9OkgD
YBPlEorCGo4Zp8goHCt9iKb8DGF3f0ZU61fPfxL8A6+PEanZ351eqgFuF3AZzbTN
ReLaINOQ8PeoIKAZxR//y9PEVwN+IZHt5E5/B/VaRHQt1CIKLOnaFg/sTCEY217U
oLSg/DBi8nhpKg==
-----END CERTIFICATE-----