Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
File:                     tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft (raw, json)
Hash identifier:          ajGOBH7rFk+jmFicQ/Ygji80guzxAoX5/ZiMRLdgV68=
Subject key identifier:   BE:BD:D7:4D:86:DB:38:69:6F:8E:51:E6:6E:2B:13:9D:1E:9C:5E:C6
Authority key identifier: B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3
Certificate issuer:       /CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
Certificate serial:       0199FBEAE38734BEA0A37688F05BE11A84CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
Manifest number:          0F7C
Signing time:             Sun 19 Oct 2025 10:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:38 +0000
Files and hashes:         1: tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl (hash: 1ScFuQeiz+vrzZ0TwUG01U9BggsSCxQVJIAsdqpqQhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:e3:87:34:be:a0:a3:76:88:f0:5b:e1:1a:84:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e3a86369ef79dc13cfb437615d492388bf8ce3
        Validity
            Not Before: Oct 19 10:01:38 2025 GMT
            Not After : Oct 20 10:01:38 2025 GMT
        Subject: CN=bebdd74d86db38696f8e51e66e2b139d1e9c5ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:4f:39:f4:7d:2e:1d:f5:e7:30:52:e7:76:
                    b4:5b:8c:88:18:8f:de:f1:8d:19:45:ca:14:82:3a:
                    fb:16:af:c1:55:27:d8:12:ee:45:cf:74:41:28:5b:
                    26:2b:f9:53:c0:fe:9c:be:1a:d7:53:9a:57:d0:21:
                    08:40:fe:80:d0:52:59:ea:58:1a:e5:19:75:1a:de:
                    ac:47:ec:e4:ed:55:29:3d:49:5d:25:a3:fb:5a:f9:
                    f9:3a:25:0c:8b:84:1c:f4:fb:c4:69:f9:81:0e:43:
                    92:41:6b:f7:e0:cf:f8:f6:32:b8:eb:a9:65:03:ea:
                    a8:eb:de:7e:86:c1:1e:2c:be:f5:30:21:ba:95:94:
                    01:30:bf:75:c0:1e:e2:2d:71:34:0f:62:8f:0c:da:
                    d4:7c:94:e4:3f:c7:f6:f7:fb:2d:42:f6:4b:14:05:
                    9f:71:ba:bf:2d:f9:91:da:bd:35:fe:b6:31:f3:76:
                    d7:8d:59:60:e5:d9:23:6d:a4:e8:9e:f2:e9:66:8b:
                    b5:20:f9:3a:97:f6:ec:41:6b:62:cd:26:5c:bc:a7:
                    f2:cc:d1:c1:1c:95:c7:89:9e:05:8b:ba:2f:a6:5a:
                    48:19:39:23:21:4a:58:77:5e:8e:48:5f:02:70:46:
                    57:1d:29:18:95:c0:ff:ff:59:5f:df:f7:a9:0f:1c:
                    ea:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BD:D7:4D:86:DB:38:69:6F:8E:51:E6:6E:2B:13:9D:1E:9C:5E:C6
            X509v3 Authority Key Identifier:
                keyid:B4:E3:A8:63:69:EF:79:DC:13:CF:B4:37:61:5D:49:23:88:BF:8C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOOoY2nvedwTz7Q3YV1JI4i_jOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/5c57dd-486e-4c69-a116-f90a8dce1bfc/1/tOOoY2nvedwTz7Q3YV1JI4i_jOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:5d:63:7d:09:cf:f8:42:d7:eb:09:87:eb:df:0e:df:32:
         15:3a:e3:fb:09:3f:b1:cf:de:1a:f3:6a:3d:e1:74:d1:bb:95:
         75:4f:ff:2a:28:80:c2:8b:47:ff:30:42:8c:47:6d:ef:4e:c2:
         3c:c0:27:03:1a:93:c1:fa:9b:e9:c6:05:41:bb:b2:11:13:ab:
         12:8b:b0:72:a4:54:e2:60:64:c0:0c:de:ed:68:45:40:48:e3:
         52:3b:ae:98:b7:a2:63:04:f3:a1:66:98:00:fb:c1:22:50:c5:
         b5:06:2e:73:8e:cf:c2:b7:09:4c:12:e3:e2:04:1f:16:0e:81:
         ea:b7:4f:56:96:0a:2b:9f:60:d9:d9:e4:b3:93:e1:ac:c7:c4:
         27:ad:11:ca:f6:dd:4e:6b:5f:d5:97:53:28:3c:8c:5a:f4:09:
         3d:09:b8:19:0d:3f:2e:e1:64:d4:14:c5:f7:db:a7:c4:6d:62:
         54:44:37:de:a3:61:f1:e8:ab:07:64:74:86:af:c5:80:bd:3b:
         5e:94:c9:b5:a0:66:d6:3d:7d:1e:c5:fe:b2:9d:cd:c5:1e:5f:
         c7:23:3e:37:49:f9:ca:18:9d:ce:43:bc:18:a8:15:fc:34:64:
         ce:36:c9:2d:9b:e9:3b:6f:9c:77:8e:e4:91:dc:c4:77:df:65:
         00:36:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:01 2025 by rpki-client