Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
File:                     ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft (raw, json)
Hash identifier:          Sv3LaUYDdZ4Rp0etyCnBW6tbIm8+vSAKHA3mWKZNWck=
Subject key identifier:   4B:A0:6B:23:4D:CA:9C:AC:B8:47:4F:5A:14:2F:56:7B:27:7F:A3:75
Authority key identifier: 00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04
Certificate issuer:       /CN=0018a3328c44f08f65243c61e064fefed6413c04
Certificate serial:       0199FBEC0C68BDA88983F7C148F13D68F805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:02:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:54 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:54 +0000
Files and hashes:         1: ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl (hash: TkelEArnuJ1jKBRQpe1EmjcIpHB3y5/BfCtHfAQ/MM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:0c:68:bd:a8:89:83:f7:c1:48:f1:3d:68:f8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0018a3328c44f08f65243c61e064fefed6413c04
        Validity
            Not Before: Oct 19 10:02:54 2025 GMT
            Not After : Oct 20 10:02:54 2025 GMT
        Subject: CN=4ba06b234dca9cacb8474f5a142f567b277fa375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:c5:6f:0f:d9:4b:1a:dc:35:f9:c4:a4:68:
                    9f:35:fa:2f:2c:20:14:8a:aa:14:bd:8a:86:1b:62:
                    64:57:a5:de:e6:1e:9a:9b:ef:62:e7:12:4b:67:8d:
                    ce:2c:93:5f:a3:7b:2b:2b:ff:96:42:47:28:a1:c1:
                    69:0b:82:63:74:c7:94:70:5d:ea:9d:cf:ba:b7:93:
                    90:0f:f7:86:93:0f:9d:2e:44:41:76:81:d8:24:c6:
                    71:89:2d:f8:26:b6:32:9c:d2:8e:63:36:30:38:14:
                    c9:fb:4c:51:6d:54:aa:0d:0c:96:e0:db:c2:c8:ed:
                    cd:5e:e6:52:e2:d6:58:91:f6:e4:91:a2:87:de:66:
                    41:b9:f7:b4:a6:ab:c1:ac:26:92:d7:b4:b8:b2:89:
                    85:7c:d8:6e:41:76:86:53:f6:a4:77:82:84:60:ab:
                    dd:36:82:a9:d9:6f:7c:23:a0:ab:87:ce:88:4d:4d:
                    ea:31:07:bc:29:79:e2:29:05:89:20:43:64:2b:39:
                    03:46:f1:51:22:3c:84:b2:27:af:bc:2b:29:ce:7f:
                    5f:3d:93:d6:be:9c:8c:f2:1c:2a:87:4c:b5:cd:6b:
                    95:db:ab:92:cd:e6:53:7e:f4:54:ea:b6:0a:d3:99:
                    28:cb:39:95:ac:8c:5c:af:c4:8c:db:48:dc:c9:af:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:6B:23:4D:CA:9C:AC:B8:47:4F:5A:14:2F:56:7B:27:7F:A3:75
            X509v3 Authority Key Identifier:
                keyid:00:18:A3:32:8C:44:F0:8F:65:24:3C:61:E0:64:FE:FE:D6:41:3C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ABijMoxE8I9lJDxh4GT-_tZBPAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/501e98-60f2-4f63-876f-720e5153916c/1/ABijMoxE8I9lJDxh4GT-_tZBPAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:09:19:4b:28:c6:2c:32:75:18:5e:8c:a4:2c:c6:be:25:81:
         19:83:55:7f:ef:89:25:52:19:9b:d7:0f:c2:01:9e:4a:ee:9e:
         8c:23:36:0a:17:2d:9b:64:ba:8e:b5:52:c1:09:97:c7:ac:c4:
         af:0a:64:38:86:a3:fa:bb:21:8a:47:b1:88:08:35:32:2a:f5:
         9b:9a:ba:1a:e2:fb:21:8b:51:89:72:80:35:5d:32:46:66:1b:
         49:24:79:c5:69:2c:43:c8:74:ac:d3:15:6e:b1:18:e3:40:e6:
         07:91:48:3e:02:af:a8:52:aa:95:34:76:5c:ca:36:b8:88:79:
         1b:5c:53:2b:cb:06:b5:d2:7d:87:24:9e:e2:f9:05:fb:6d:c0:
         ca:0c:e5:c5:27:98:70:6d:63:ca:13:d7:a0:5f:89:f6:f5:a1:
         c5:a6:28:57:0d:d7:3d:32:07:a2:97:52:91:de:18:fa:50:7e:
         aa:86:03:8d:a6:15:10:d7:f2:f9:0e:60:38:35:59:9b:28:a6:
         70:dc:b2:f8:33:23:fd:1e:15:ac:f0:af:50:ad:46:bb:72:bf:
         3d:fb:6c:8f:20:6f:41:28:59:87:ae:4d:12:ee:2f:10:e9:51:
         2d:af:39:8c:18:3e:28:c5:3f:b0:66:70:d2:b1:ec:b4:9e:7c:
         ce:58:62:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:26 2025 by rpki-client