Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
File:                     iSPXAiS3vTwqfOfceofJKtWv8mk.mft (raw, json)
Hash identifier:          hhlokobj8w6NMfLcXi3UageHWNzM0PN8ZQhA62QJJM0=
Subject key identifier:   8F:69:9F:03:C3:B0:02:55:0F:4F:08:18:56:46:80:FC:5D:9C:46:A5
Authority key identifier: 89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69
Certificate issuer:       /CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
Certificate serial:       0199FC2164749B66809BED3149D80F50DFBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 11:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:10 +0000
Files and hashes:         1: iSPXAiS3vTwqfOfceofJKtWv8mk.crl (hash: z5+KU3/Q8Q9Ptva9EWxSP3VicJp2ij/T+fhDItWa7yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:64:74:9b:66:80:9b:ed:31:49:d8:0f:50:df:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8923d70224b7bd3c2a7ce7dc7a87c92ad5aff269
        Validity
            Not Before: Oct 19 11:01:10 2025 GMT
            Not After : Oct 20 11:01:10 2025 GMT
        Subject: CN=8f699f03c3b002550f4f0818564680fc5d9c46a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:51:de:ec:1c:a7:75:bf:0e:cf:3c:7f:e7:a3:
                    0e:ce:f7:34:cd:1b:7a:fa:87:40:33:d6:f3:80:27:
                    81:1c:0a:34:28:f9:90:de:38:5c:20:84:00:a7:c7:
                    2d:4b:ff:39:1d:41:c2:5e:aa:09:6a:60:35:02:1a:
                    b3:f9:d5:73:d9:0a:2a:89:6c:64:91:c9:96:00:d0:
                    c0:89:70:66:91:5f:17:b9:40:47:66:5a:36:d1:ca:
                    0c:95:41:52:45:3c:85:07:9a:06:5e:6e:96:7c:70:
                    15:95:15:92:6d:bc:47:25:9f:24:46:88:df:e1:9c:
                    8a:51:19:a9:97:9b:2b:bb:e6:d7:5b:6d:88:f6:74:
                    59:cd:5f:7d:28:41:3d:80:34:56:f7:b6:fd:ee:4e:
                    5b:52:5d:e4:1a:93:ae:89:e0:9d:b6:f6:51:6f:8b:
                    d4:6f:d0:05:b1:38:c3:6f:ac:de:d1:50:6e:dd:f7:
                    2e:9f:b9:b2:65:52:43:78:30:09:da:26:dd:fb:d5:
                    94:d3:88:7d:db:6b:4a:42:89:00:4b:5e:7e:ec:b7:
                    26:97:25:6b:83:f9:ea:c5:5d:c9:de:6e:01:aa:e7:
                    2c:52:7b:a8:25:6d:36:b7:77:46:41:d4:ae:03:06:
                    a4:17:cc:63:50:74:8f:9d:67:71:7b:e1:6e:da:ce:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:69:9F:03:C3:B0:02:55:0F:4F:08:18:56:46:80:FC:5D:9C:46:A5
            X509v3 Authority Key Identifier:
                keyid:89:23:D7:02:24:B7:BD:3C:2A:7C:E7:DC:7A:87:C9:2A:D5:AF:F2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSPXAiS3vTwqfOfceofJKtWv8mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/e212d6-b81b-4e8a-8e05-f986551a707d/1/iSPXAiS3vTwqfOfceofJKtWv8mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:6d:91:3c:34:33:e9:fc:c2:7d:79:ac:bc:9a:f7:82:ba:
         ba:d0:0c:02:8a:67:cf:3a:e5:44:97:e9:08:93:51:58:f6:58:
         90:88:0d:ff:16:e3:62:35:91:a9:76:13:c5:97:0d:88:57:ed:
         aa:91:f4:34:b0:bd:55:57:c6:2c:73:4f:ee:aa:1c:e1:d1:af:
         7d:db:44:59:cc:60:fa:be:37:3b:bb:5c:07:77:2d:23:bc:2b:
         ab:26:45:49:52:c8:a4:4d:ae:64:e1:17:af:6a:17:6b:63:6d:
         f6:21:aa:06:74:17:10:cc:2f:50:7c:b1:23:09:d6:b7:2a:68:
         18:59:8f:66:0e:0b:ac:99:c9:b7:cb:f7:60:b7:7e:7c:c4:a6:
         51:4f:89:06:ae:34:2d:ff:2a:d9:4f:4e:0b:1d:dd:3b:e0:9a:
         23:e5:31:28:31:50:ef:54:ed:7b:fb:03:19:8b:a1:e6:aa:e7:
         8f:c3:99:ce:b3:5a:50:27:55:ab:39:55:65:d4:1e:b4:ff:72:
         7f:e9:a2:d9:43:18:de:8c:33:b6:c4:68:ea:1c:30:31:9b:b4:
         50:66:80:70:e7:d6:0a:7e:23:9b:8b:fd:80:6a:78:2f:5e:12:
         08:5f:20:ec:08:a1:f8:60:d5:40:d1:fa:78:37:7e:ef:b2:88:
         e3:97:cd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:34:04 2025 by rpki-client