Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File:                     SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier:          Coz0tvt1RHSe8gf4LHdI71zzVZ6FAC/hp4gMwYGjMlw=
Subject key identifier:   59:47:EA:25:1A:14:EE:AD:80:CE:E7:C4:B5:BA:60:E4:DB:8A:F8:1A
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer:       /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial:       0199FD33EFA99A7451AE9A6B30E5777102AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number:          13F9
Signing time:             Sun 19 Oct 2025 16:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:03 +0000
Files and hashes:         1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: W+KOABENBlCu0btmKlyCA4MYyu1uvERIc6XweCB3I6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:ef:a9:9a:74:51:ae:9a:6b:30:e5:77:71:02:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
        Validity
            Not Before: Oct 19 16:01:03 2025 GMT
            Not After : Oct 20 16:01:03 2025 GMT
        Subject: CN=5947ea251a14eead80cee7c4b5ba60e4db8af81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:24:fc:22:92:21:12:7a:4f:e8:99:1a:4f:1b:
                    f8:2c:1c:43:6d:78:f1:ce:7e:22:94:21:1a:1b:f9:
                    33:18:18:f0:df:42:cb:e7:bc:54:d9:c4:60:3d:83:
                    62:7b:0d:bd:00:7d:0c:63:27:1d:c8:c6:ad:f5:6a:
                    cc:7d:32:cc:da:03:fc:3f:58:df:63:de:f1:2c:89:
                    7c:11:45:4f:ab:9f:81:89:65:e4:88:12:de:b9:ec:
                    da:00:f9:9e:1c:1a:80:28:ba:9b:aa:cb:e5:d8:47:
                    47:09:f1:6a:d9:24:84:14:69:49:4a:b4:a5:b3:b3:
                    5a:2e:2c:28:b2:10:c6:11:65:6d:61:ef:34:9b:d8:
                    8f:6a:1f:29:57:a2:38:2c:3b:b4:94:21:cc:9f:c8:
                    16:cc:ec:3f:93:0b:3e:1f:51:35:ae:b0:9d:dd:65:
                    68:4b:e2:b6:dc:28:af:39:be:37:76:87:b1:ee:76:
                    27:4d:cb:82:b8:d4:dd:db:9b:14:dc:0e:60:06:bb:
                    79:8b:07:d6:1c:18:36:8c:aa:09:2f:a2:72:de:fc:
                    f0:83:22:6d:27:13:5d:d9:69:9f:64:ea:7e:c4:9f:
                    d3:83:c1:e4:36:55:42:0e:35:86:10:c1:1a:c2:17:
                    b0:4a:ee:17:d8:f0:79:5d:38:c1:60:c6:e6:7c:91:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:47:EA:25:1A:14:EE:AD:80:CE:E7:C4:B5:BA:60:E4:DB:8A:F8:1A
            X509v3 Authority Key Identifier:
                keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:56:a0:9a:cd:54:85:15:52:50:17:a3:c6:96:72:bc:72:
         5f:37:ab:19:7e:1f:9e:01:54:08:68:cb:34:62:7a:4b:5c:fe:
         29:a5:b2:46:ad:86:8e:90:17:15:5b:87:58:26:a4:17:ec:67:
         59:d1:ad:24:3f:a1:e7:0c:34:56:02:00:0f:1a:6f:95:0d:68:
         fc:fe:bc:b9:96:19:4a:46:64:5e:ca:4a:46:df:e8:04:ec:f3:
         92:7e:2b:7d:d3:e2:6f:49:a6:77:a6:dc:f0:23:9c:be:35:79:
         fb:13:26:d8:4d:88:a2:05:58:ad:75:9e:18:b5:7e:01:f1:d4:
         0b:21:17:06:f6:df:ae:d7:e9:70:cc:88:11:f6:3c:b2:32:e2:
         b1:10:9d:96:a0:fe:47:2c:4d:77:eb:b2:2e:5e:a7:b0:3e:f6:
         42:90:e0:31:a4:49:d7:9b:57:e3:a1:b8:6a:c7:5e:58:d9:c4:
         30:7f:1c:95:f9:6e:4d:c7:ee:fb:02:70:06:aa:0f:df:b8:df:
         08:79:27:8a:ca:8a:7f:b3:74:1a:f3:69:f9:ea:57:af:2c:06:
         36:b8:22:95:a9:83:3b:b7:b3:27:5c:49:65:81:d2:bd:ee:e0:
         b0:46:7f:ec:f7:31:58:d6:4e:8a:4d:09:c5:2e:ce:8b:cf:64:
         63:4d:69:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:01 2025 by rpki-client