Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
File:                     mZeck6ki-_c0k75q1l6zv-und8U.mft (raw, json)
Hash identifier:          WpGPEYufMDDhASM4E/25x+Dx+UJeXuGZYVMJhiwusXo=
Subject key identifier:   A5:E4:98:5E:51:68:45:71:90:6E:C3:21:C2:EB:B2:3F:DA:A3:70:AD
Authority key identifier: 99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5
Certificate issuer:       /CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
Certificate serial:       0199FC582DDECFAFDE4666D3C70220B36A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 12:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:01 +0000
Files and hashes:         1: mZeck6ki-_c0k75q1l6zv-und8U.crl (hash: IsD61RlqcU531SmrwEV0RPa2YryG3ExZlCsU2VOqOXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2d:de:cf:af:de:46:66:d3:c7:02:20:b3:6a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99979c93a922fbf73493be6ad65eb3bfeba777c5
        Validity
            Not Before: Oct 19 12:01:01 2025 GMT
            Not After : Oct 20 12:01:01 2025 GMT
        Subject: CN=a5e4985e51684571906ec321c2ebb23fdaa370ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b9:21:45:70:73:dd:bd:ab:08:39:f5:8b:02:
                    39:27:c9:9b:83:a7:6f:e0:e0:5c:5a:60:a3:24:3d:
                    92:5d:19:4e:ba:b3:d8:c8:58:01:8a:d4:be:de:7e:
                    30:81:ff:13:2f:7b:27:61:25:b3:2d:6e:b3:ac:55:
                    56:f3:6f:be:36:c5:2e:4d:86:08:31:61:1b:5c:6e:
                    30:93:ff:8f:fb:e3:3a:a4:96:45:19:21:64:83:d4:
                    3f:84:5e:e1:28:df:59:e9:ba:44:85:75:6c:d3:16:
                    fd:22:64:34:b5:ed:79:8a:6c:dd:24:88:f2:16:15:
                    4e:5f:90:82:17:e5:bb:b9:03:d4:5c:c0:86:09:79:
                    66:dd:29:df:af:67:57:cd:7d:9e:44:05:5f:ff:af:
                    b5:58:5c:b6:de:a7:8f:b4:07:b9:7e:8a:c7:9a:d9:
                    e6:fa:fa:26:e4:06:bc:d2:bd:e6:ec:cb:03:4b:ae:
                    c3:32:af:02:5d:3c:4e:be:33:c5:06:6c:88:e8:03:
                    1b:3c:c4:46:c1:28:1c:2b:38:73:fe:f1:01:3c:bf:
                    8e:8a:65:2d:15:60:a3:15:5d:b3:2f:5f:a9:4e:98:
                    83:6b:71:1c:03:7e:9e:a4:d7:59:4d:5b:63:63:53:
                    7b:6e:13:8f:bd:b5:d3:5b:90:55:b6:60:7d:96:41:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E4:98:5E:51:68:45:71:90:6E:C3:21:C2:EB:B2:3F:DA:A3:70:AD
            X509v3 Authority Key Identifier:
                keyid:99:97:9C:93:A9:22:FB:F7:34:93:BE:6A:D6:5E:B3:BF:EB:A7:77:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZeck6ki-_c0k75q1l6zv-und8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/adf171-5cc3-4c6e-809d-c091da6868c7/1/mZeck6ki-_c0k75q1l6zv-und8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c4:58:df:10:ef:08:81:e0:e9:e9:91:72:4d:fa:0f:2c:8d:
         1f:a0:06:cf:cc:fe:2d:5c:7d:53:58:4d:d7:60:76:97:82:d6:
         12:bb:fb:6c:df:8f:7b:96:b6:5f:95:a3:d0:44:c3:ae:7b:48:
         a2:93:64:62:78:c9:47:e9:45:ed:b3:db:6b:e7:65:e5:58:87:
         0b:0a:ba:98:52:57:d0:79:62:e9:c2:68:f3:1c:2f:2c:50:9b:
         d3:b0:0a:90:c7:96:64:c4:86:e1:e3:99:ea:09:13:fd:72:76:
         d6:3c:0e:3b:23:e7:94:55:82:df:a2:9c:9d:d1:a1:c8:ec:93:
         88:20:cc:2b:ba:09:3f:a3:4c:73:cd:a2:e7:ef:9f:eb:60:ac:
         99:49:e6:0c:14:48:c4:d9:68:b6:c8:42:65:f0:b4:9d:c7:1a:
         c5:45:d6:69:96:f9:79:12:8b:ad:9b:b7:a5:52:52:9f:9d:14:
         e3:56:bc:53:6c:10:da:73:c5:fe:69:f3:11:6a:4d:fe:a0:c0:
         3b:34:1e:c7:78:2b:db:3f:83:f4:20:55:44:0d:d7:d0:b6:dc:
         19:29:54:cf:b8:6a:31:32:25:1e:e0:6e:d5:0d:fb:73:e6:0f:
         34:ef:fd:64:11:bb:c9:71:fc:cd:7d:ba:fa:ae:35:3e:70:17:
         5e:49:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:56 2025 by rpki-client