Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
File:                     H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft (raw, json)
Hash identifier:          pY8YWg+s8AIshIsnG1de1XY9gW15WswsA+p5XOeJ6R0=
Subject key identifier:   9F:CB:56:FA:9F:77:C5:1D:A8:28:01:59:92:F8:DD:2E:21:9E:A9:F6
Authority key identifier: 1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32
Certificate issuer:       /CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
Certificate serial:       0199FD344DE1F2F01E8732D7440430C8092D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
Manifest number:          0451
Signing time:             Sun 19 Oct 2025 16:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:27 +0000
Files and hashes:         1: H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl (hash: P6+0GZ1k+7jLDbvi44H16iRTJvSZn+T/rtIu+4AyloI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:4d:e1:f2:f0:1e:87:32:d7:44:04:30:c8:09:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f897dbff01afd9d1e77b6f9fe08d97742f56d32
        Validity
            Not Before: Oct 19 16:01:27 2025 GMT
            Not After : Oct 20 16:01:27 2025 GMT
        Subject: CN=9fcb56fa9f77c51da828015992f8dd2e219ea9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:bb:fe:82:7f:1f:8f:e2:d1:99:20:9e:f0:
                    71:78:4f:4e:37:c9:5b:9c:40:b8:ce:52:41:c5:b7:
                    f8:5a:e1:86:4e:bb:c0:23:2b:ca:2c:c9:e6:1d:3c:
                    05:9d:70:7e:0c:a8:91:d1:65:b6:0d:7c:c7:df:cc:
                    fb:6c:b7:d5:0c:5d:cb:97:9e:7b:75:90:b5:1e:6b:
                    6f:10:a3:8d:b1:f4:fc:b7:82:48:5c:d0:e2:5d:12:
                    a8:f9:f8:0f:ad:eb:f2:0a:3c:02:ab:8f:6b:98:76:
                    3c:da:ed:f0:2b:92:b3:e6:61:3b:45:46:64:04:c9:
                    63:6e:4c:cf:2c:5e:5c:80:62:ac:fb:92:24:f6:aa:
                    05:59:c7:a6:cc:93:aa:40:dd:ae:36:32:b8:0f:54:
                    e2:51:dd:f3:1a:cd:2c:7d:1b:f5:4b:3f:8e:9e:1f:
                    e2:66:51:35:8c:ee:16:6d:55:6b:75:64:9f:76:e5:
                    83:dd:5c:dd:54:2e:d6:de:0d:c5:a8:5b:6c:09:9f:
                    f9:6b:4c:1c:d7:51:38:51:07:7a:a1:9b:b9:03:41:
                    a9:fc:83:61:96:96:75:d4:70:cd:5d:0e:16:df:fe:
                    44:eb:7c:ca:bd:f5:19:02:eb:f7:1e:d2:3b:c0:bd:
                    af:ba:2d:91:3f:ae:ae:01:ac:c3:2d:7e:68:c9:17:
                    cc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CB:56:FA:9F:77:C5:1D:A8:28:01:59:92:F8:DD:2E:21:9E:A9:F6
            X509v3 Authority Key Identifier:
                keyid:1F:89:7D:BF:F0:1A:FD:9D:1E:77:B6:F9:FE:08:D9:77:42:F5:6D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e401d0-69fe-4326-a042-411c3d2d069e/1/H4l9v_Aa_Z0ed7b5_gjZd0L1bTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b7:97:e9:2c:04:5e:ef:41:f8:3a:cd:a1:b5:64:68:b2:95:
         15:64:8f:1b:c1:76:e1:5d:23:75:cf:2b:98:ad:76:d8:f1:93:
         8d:b2:a9:3c:81:5c:a4:0d:87:5f:93:0e:13:c0:b3:c6:ca:bc:
         cc:6c:0c:b4:57:91:f6:b2:1f:31:b3:15:56:99:4b:4e:96:d5:
         fd:70:f5:46:02:7c:c9:19:0c:a6:79:69:cd:30:11:76:63:ba:
         84:a0:b7:76:ed:2f:4a:70:5b:10:06:bb:74:1b:e5:e0:be:d7:
         d9:e2:46:b5:74:f7:e5:d3:96:d4:fc:65:75:9c:40:f8:90:34:
         d7:db:d4:1f:28:06:13:85:f4:39:b3:f8:5c:f4:39:29:cb:06:
         c6:94:be:8b:fa:e8:da:3d:d9:90:2b:3b:8c:a3:3a:97:b0:98:
         0a:ee:d4:ec:12:1c:58:0a:11:d3:14:99:24:06:31:17:7b:1e:
         1e:12:7e:41:17:62:6f:9b:6e:74:0d:6d:48:bd:33:21:31:2d:
         f6:f7:c0:b4:b1:ed:cf:28:02:30:0f:4a:63:a5:ab:ac:2e:32:
         59:71:2b:07:ef:6d:35:81:0f:66:de:69:25:b0:44:f7:f9:a4:
         25:86:b8:39:c2:ca:24:f3:12:45:52:0d:d7:8b:9b:5a:df:17:
         04:1c:5c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:52 2025 by rpki-client