Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File:                     i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier:          4qL3JTkjp3Nfotqu0iZqc/Z4y9lpq9yWzdnDzwGXSL0=
Subject key identifier:   5C:76:3D:FA:37:BB:F6:90:0E:8B:E2:5B:49:45:E9:65:48:08:2A:1E
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer:       /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial:       0199FC21606915BDAE9139BFDA9B2DF9EE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number:          01CC
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: Q+8pqlfwDEgalyxcYqlvAr+yZlZV/BwGY+ogqoll7i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:60:69:15:bd:ae:91:39:bf:da:9b:2d:f9:ee:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=5c763dfa37bbf6900e8be25b4945e96548082a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:e3:25:bf:82:7b:76:d4:1b:5a:34:9b:cd:
                    56:b1:a3:c7:12:35:f2:82:c0:69:e2:42:ea:64:b0:
                    3c:d2:35:91:61:28:5f:da:b7:71:35:f2:fb:94:14:
                    d5:e8:0a:e9:2a:aa:7e:2f:13:6d:5f:87:5d:d5:c5:
                    aa:31:8f:f2:ac:e0:6b:35:b7:4f:d5:5f:51:0c:c3:
                    09:d0:1c:75:a0:8f:e0:51:22:0b:6d:24:f6:28:da:
                    fc:1c:51:36:e9:fb:c1:21:b2:da:ed:7a:e1:9c:5f:
                    ac:6a:37:72:a4:72:e1:04:a7:61:5a:b9:ac:ae:56:
                    8a:0e:b0:5f:3c:7e:02:5e:cd:8f:7e:d7:56:7f:ba:
                    49:32:08:6b:63:3b:c4:f3:a7:7f:0c:6f:2d:c7:eb:
                    be:1c:34:95:49:09:51:46:1e:af:47:6e:b6:ef:8c:
                    46:28:5e:10:eb:82:5e:55:a7:61:11:cb:ef:22:fe:
                    15:91:80:d1:99:35:f4:c1:cb:02:f1:d6:76:57:81:
                    26:38:73:e6:5d:e0:ec:f7:8c:a3:16:3c:f0:c9:13:
                    ee:a8:d6:b3:23:f7:6c:89:8b:38:13:7f:32:89:38:
                    72:b5:97:b1:47:bf:11:a9:8c:0b:02:9b:0b:14:d6:
                    a0:1a:53:14:e0:02:0b:f6:84:94:f4:e3:ca:21:74:
                    ae:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:3D:FA:37:BB:F6:90:0E:8B:E2:5B:49:45:E9:65:48:08:2A:1E
            X509v3 Authority Key Identifier:
                keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:d4:5c:33:83:ae:f2:29:cb:e1:77:42:71:7a:3d:62:84:
         bf:bc:a1:d8:97:da:c7:34:cb:9b:95:87:6f:b5:dc:55:3b:b0:
         6a:df:ce:57:b9:12:0d:95:6b:08:64:40:d6:68:c8:c8:9d:f2:
         38:76:64:ed:65:26:9c:70:ba:81:4d:d7:e1:96:4e:0f:54:ac:
         df:b8:e7:0b:31:fd:d7:0a:4b:5e:00:a1:e8:36:ae:46:6d:ab:
         90:b7:d8:0b:fa:a2:46:49:72:b6:4a:ac:9f:c3:b0:4c:83:a5:
         14:33:5e:77:f2:74:64:58:c7:4f:51:a2:d2:f1:43:00:d2:13:
         49:0e:3f:2a:ef:c9:01:e5:d3:aa:42:56:96:3f:5d:58:fd:a7:
         86:c6:4f:ae:d4:c7:76:9e:91:55:38:a5:fc:a0:a9:b0:ae:9d:
         5d:25:5e:0f:b3:c1:82:03:f6:e9:16:22:be:96:07:51:9d:fb:
         46:96:bf:21:a5:5b:c2:6c:00:61:42:c7:a9:8b:b0:bc:f9:93:
         15:cc:f9:c1:da:85:7b:ed:94:2b:66:bd:f9:ba:40:f7:9d:ab:
         8c:8f:ff:f3:f6:b2:31:1f:9b:db:a0:14:c2:f8:9e:a2:3f:21:
         83:ad:66:67:1f:bd:bc:d7:8e:ba:76:9a:da:72:39:eb:65:d2:
         e7:44:87:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:30 2025 by rpki-client