Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
File:                     AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft (raw, json)
Hash identifier:          GUQccH57tIr+GAqcmxxrZZ6Yz+uQoeOqtIqZBqChFZE=
Subject key identifier:   80:18:B6:97:A6:B1:68:37:9D:16:3A:7B:39:88:05:45:1B:74:59:4A
Authority key identifier: 01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04
Certificate issuer:       /CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
Certificate serial:       0199FBEB5CE710BA3CD12644C778A46BCB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
Manifest number:          0BB8
Signing time:             Sun 19 Oct 2025 10:02:09 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:09 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:09 +0000
Files and hashes:         1: AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl (hash: z95vH1o9efTwxdimPp+IKjJeprcpKee9Q/ZaiGE2ckI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:5c:e7:10:ba:3c:d1:26:44:c7:78:a4:6b:cb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=013f6db0fd57d19f9ee15242a2e4167efb522d04
        Validity
            Not Before: Oct 19 10:02:09 2025 GMT
            Not After : Oct 20 10:02:09 2025 GMT
        Subject: CN=8018b697a6b168379d163a7b398805451b74594a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:64:41:a5:a3:bd:d2:35:6d:d3:77:cf:8a:
                    83:5e:e5:7a:e4:82:cd:d3:36:ae:a1:50:ec:c1:6d:
                    f1:e0:ae:35:61:81:b0:82:01:fd:57:28:b8:64:b8:
                    94:1b:ba:ba:c3:8e:92:29:2e:35:78:17:b5:53:1b:
                    e5:41:40:c9:80:e2:52:49:39:c9:d9:7e:0f:16:f4:
                    31:a4:4d:11:74:cc:cc:0b:bf:ce:e1:01:64:b0:3e:
                    8e:33:63:0a:f2:c4:9f:5a:d3:1c:7c:2b:ae:83:95:
                    7d:5c:07:15:a4:11:ea:45:64:47:f1:7d:a9:1c:09:
                    1f:a5:12:7f:7c:14:54:0e:7a:3b:8a:08:8b:77:ab:
                    cb:8c:f5:09:fe:79:24:28:f3:3a:50:cf:a8:09:f4:
                    42:73:64:a9:f1:74:6e:16:a4:80:4b:b1:43:11:15:
                    6d:99:65:dc:a7:a2:28:d2:86:42:92:b1:94:2a:70:
                    c6:5e:59:ae:3e:d0:3b:c3:74:86:fc:c1:8e:6d:00:
                    35:fd:1c:f6:58:3d:73:f6:e5:4e:1c:b0:dc:9f:08:
                    9c:85:1f:bd:12:23:3a:90:27:7f:fb:07:af:9f:24:
                    56:7a:19:3c:ac:7b:ef:fe:32:fb:1e:27:0e:9d:57:
                    be:89:1c:67:42:ac:f2:5f:8d:1c:4e:8d:55:3e:79:
                    23:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:18:B6:97:A6:B1:68:37:9D:16:3A:7B:39:88:05:45:1B:74:59:4A
            X509v3 Authority Key Identifier:
                keyid:01:3F:6D:B0:FD:57:D1:9F:9E:E1:52:42:A2:E4:16:7E:FB:52:2D:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f63307-4a0f-4053-8fc3-f535578984c2/1/AT9tsP1X0Z-e4VJCouQWfvtSLQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:92:b1:57:09:a2:ca:61:aa:b5:8b:2c:2a:5c:94:d6:9f:c4:
         ba:1c:52:5d:6d:43:ef:4f:c8:f1:7a:6b:4c:43:9e:89:40:e8:
         54:a3:87:a5:14:97:cc:79:23:d0:b7:f1:ef:92:a6:5b:ca:7c:
         26:64:01:cd:4f:b9:ce:b0:eb:e5:ed:64:1c:cf:a9:e5:71:4e:
         15:f7:34:de:74:63:a1:31:b1:df:bb:ab:2c:66:7f:9f:f3:bc:
         ec:16:c1:fd:7d:80:fb:0b:11:1b:9d:0a:40:4f:a3:c1:4b:0c:
         91:0d:c4:85:88:bb:18:60:3f:88:27:5b:a5:ef:8f:4e:24:3e:
         31:11:19:67:b9:29:83:c7:c3:e8:f7:66:6d:8e:d8:a2:41:b8:
         60:d6:32:47:7d:68:39:fd:76:4d:cd:17:ba:fe:6f:2f:7e:45:
         cf:f7:7d:92:17:2f:c9:49:b2:cc:c8:a1:b2:43:8a:bf:d2:16:
         70:7b:4e:d8:7f:19:7b:28:62:f6:1c:e8:e8:e3:94:c3:4a:7f:
         ec:fc:4f:83:bb:86:86:bd:c4:aa:9b:71:f5:a6:63:02:d6:38:
         72:4b:a3:92:b4:99:4b:9b:73:3b:de:01:29:48:50:4c:4b:fe:
         43:c0:76:7d:1c:c6:d4:53:dc:dc:cf:a9:b0:1f:64:6d:40:26:
         0e:65:d7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:38 2025 by rpki-client