Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
File:                     Ef7lYBzyOOHdeSGsnYgpbizM3og.mft (raw, json)
Hash identifier:          Gbtzs1M6as1eDi1SzzQ9TxHCjrx7eiN0lAqtmTO+E2s=
Subject key identifier:   6C:E1:CC:6A:24:A9:6B:A4:BD:95:0C:BA:93:95:23:83:C4:38:C1:60
Authority key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Certificate issuer:       /CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Certificate serial:       019A02599ACD8AE782202A48B375BA00206E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
Manifest number:          10B4
Signing time:             Mon 20 Oct 2025 16:00:17 +0000
Manifest this update:     Mon 20 Oct 2025 16:00:17 +0000
Manifest next update:     Tue 21 Oct 2025 16:00:17 +0000
Files and hashes:         1: Ef7lYBzyOOHdeSGsnYgpbizM3og.crl (hash: K1P63OAxqw4jeo0SUHSKjtsfn5BNGSGsJTUCA5lpNQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:59:9a:cd:8a:e7:82:20:2a:48:b3:75:ba:00:20:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
        Validity
            Not Before: Oct 20 16:00:17 2025 GMT
            Not After : Oct 21 16:00:17 2025 GMT
        Subject: CN=6ce1cc6a24a96ba4bd950cba93952383c438c160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f3:20:01:7c:9f:7f:02:4b:da:ea:f5:3f:af:
                    6f:a8:5d:68:f5:d7:81:3f:84:62:65:28:3a:de:00:
                    52:7a:88:9b:f7:e9:b9:b5:20:33:66:d2:2b:ee:a8:
                    07:f0:b2:f9:58:55:f7:ad:99:d2:27:8b:89:c7:a3:
                    28:c2:42:52:55:05:9b:09:52:c0:80:73:95:25:fa:
                    4e:fa:71:14:59:17:64:6b:65:48:9f:90:96:c0:ee:
                    07:bd:a6:fa:eb:0a:4a:1f:53:9c:99:bf:8d:88:88:
                    fc:3e:38:df:1c:2e:e1:aa:a2:44:3b:8e:0a:ca:7a:
                    cd:86:d1:1b:94:91:f4:ee:95:9b:54:5f:83:1b:7d:
                    20:03:93:d8:6c:65:7d:c1:9a:8d:01:02:3e:40:48:
                    0b:7c:78:6f:33:e3:f2:bb:87:c6:a9:10:e9:6d:91:
                    ab:be:18:a9:0c:68:6d:fb:58:3a:ac:1a:4e:5f:89:
                    28:48:4c:4b:46:73:90:8d:89:ec:85:d3:3c:fa:54:
                    03:0a:ca:7b:27:7c:05:2e:fe:97:4c:33:36:93:5f:
                    b0:78:d5:08:b5:b9:6c:90:17:88:31:37:e4:04:09:
                    a4:a9:88:e2:b3:af:0c:7b:f1:71:6d:8e:29:41:e7:
                    f5:d8:64:ac:a2:ac:92:92:02:ca:05:f0:7e:0f:af:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E1:CC:6A:24:A9:6B:A4:BD:95:0C:BA:93:95:23:83:C4:38:C1:60
            X509v3 Authority Key Identifier:
                keyid:11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:55:af:96:c1:55:1f:d2:48:13:3a:3f:47:1b:59:c9:2b:8a:
         fd:7a:8a:e8:fa:50:5c:2b:6c:9a:22:1d:70:1c:86:7d:48:cb:
         47:d8:4a:99:47:1e:aa:c4:b9:b1:86:8e:1c:6a:d4:eb:71:fa:
         de:ee:c0:06:d1:94:e7:80:87:48:a5:45:80:4a:f9:aa:ec:3d:
         e1:37:92:c4:58:f9:dc:5d:df:7d:91:7f:cb:83:88:1f:eb:03:
         54:15:04:14:86:fb:2b:e7:5a:7a:e6:b4:fd:a3:62:e8:4b:c0:
         f6:77:50:34:7b:da:2c:dc:a4:44:e8:20:c2:08:5d:3c:82:96:
         98:a1:c2:23:c1:af:25:44:30:a7:95:c4:4e:31:ab:1a:af:9e:
         4b:3f:eb:53:1a:8a:f1:fc:31:fe:a3:c0:51:df:61:1b:e8:93:
         12:ba:55:ca:4e:54:f1:93:0e:49:2b:8d:1b:4b:b1:a6:66:08:
         1b:9d:ab:6f:33:90:ae:d3:c0:f5:3e:58:60:f1:80:32:a6:b6:
         42:26:b3:6b:50:7b:e7:4a:53:10:e3:b2:20:e7:44:42:1c:4a:
         79:65:00:61:9e:f2:79:24:10:e9:81:45:4e:1d:e7:a2:40:5d:
         ea:7c:65:2e:55:9b:48:d4:5c:1d:dc:9c:bb:c9:9b:5e:6f:8c:
         8b:eb:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:36:02 2025 by rpki-client