Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File:                     b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier:          e15fh2ToosfN6PuwTSAHxS4u7ZpsXIa/Ml3Rm5RxhTQ=
Subject key identifier:   AE:81:0D:0B:5C:DA:CE:DC:17:6A:7D:1E:AE:66:67:7F:44:16:FA:AA
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer:       /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial:       0199FC5844A685EF8B7A186CA24D3B85886D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 12:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:07 +0000
Files and hashes:         1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: kequAmZjt9FFkJ4aDu+9AyF6D4HzMVM4Er3WI5wEU68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:44:a6:85:ef:8b:7a:18:6c:a2:4d:3b:85:88:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
        Validity
            Not Before: Oct 19 12:01:07 2025 GMT
            Not After : Oct 20 12:01:07 2025 GMT
        Subject: CN=ae810d0b5cdacedc176a7d1eae66677f4416faaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0e:e2:9b:5a:ad:ef:e1:ea:02:c7:2b:cc:68:
                    b7:40:dd:44:55:85:6a:ca:f7:7d:54:b7:e5:6d:ed:
                    14:7e:da:99:2e:89:34:02:6f:47:01:03:8e:b7:e4:
                    d0:d7:96:a5:b0:ee:b0:9e:25:84:9b:82:5f:19:d8:
                    e6:0f:1c:18:4f:94:ba:82:41:bb:db:fe:e7:fd:09:
                    72:27:bb:45:95:11:34:8a:1b:de:71:ec:32:ed:c8:
                    bf:e1:0c:3b:ef:15:10:06:1a:98:08:c3:26:e7:ec:
                    77:b9:68:3e:69:cd:49:21:4c:e5:d8:9b:3e:ec:be:
                    98:d2:6e:f3:16:d3:91:d8:ee:8c:51:38:c9:dd:6e:
                    48:78:38:ab:21:a1:c4:59:70:e9:c1:68:82:a2:75:
                    3f:19:26:d1:8b:13:c0:a2:73:0a:c4:34:33:d0:8f:
                    ea:2e:29:d0:c8:95:eb:7b:b8:f7:53:87:41:3b:6b:
                    57:35:dc:68:87:ec:22:75:ce:e3:8b:95:2e:b0:eb:
                    ac:36:72:af:22:74:b7:ba:4b:2d:b8:d0:32:d7:f6:
                    14:6a:ea:c7:c3:d8:76:f8:21:08:de:5f:86:1e:6e:
                    97:25:f4:f8:61:04:bb:7b:e2:bb:c0:bc:54:a5:04:
                    54:85:47:44:11:b1:92:f2:66:f8:ec:82:0e:35:d3:
                    c5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:81:0D:0B:5C:DA:CE:DC:17:6A:7D:1E:AE:66:67:7F:44:16:FA:AA
            X509v3 Authority Key Identifier:
                keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:83:ed:52:71:e6:dd:cc:99:5a:a9:1f:c0:b1:a0:f2:bc:c1:
         cb:8e:51:6d:25:42:7a:7d:54:d8:8a:63:fa:a2:df:55:8b:7d:
         c5:ad:0e:54:a5:77:b0:a8:7f:c1:fb:2c:b2:d4:73:8f:34:b3:
         1d:ee:a9:51:2f:f9:d3:66:52:5c:12:ce:c2:17:b8:5b:ae:06:
         c7:94:78:98:34:c4:1f:4a:5f:70:2c:37:f6:4d:3e:36:b4:65:
         43:f3:05:65:c6:57:49:20:69:83:81:e1:20:d2:2b:77:b1:4b:
         b2:34:f6:41:f3:cb:a5:89:c9:1b:de:67:ba:49:b6:3c:be:44:
         8a:bb:9b:39:5f:1c:e3:44:b0:f1:89:ae:02:3e:a5:b2:da:d5:
         2f:da:88:9c:4c:c6:c7:71:51:73:72:bf:a8:93:dd:45:36:14:
         73:1f:1f:c0:9e:27:8e:6e:c8:19:bd:c7:d8:9f:0c:18:50:c7:
         5c:03:9e:07:19:82:d3:8f:48:08:64:2c:27:36:f3:82:9f:95:
         e0:7a:5f:30:c1:7e:ce:26:fa:f7:e3:4b:0c:cb:52:92:5f:aa:
         8e:78:71:46:e4:a0:d2:20:3e:c9:bc:0f:52:16:26:eb:a8:76:
         d5:5a:3e:37:72:65:88:91:72:b3:57:ad:c3:5b:15:d5:71:a7:
         f7:7c:35:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:00 2025 by rpki-client