Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
File:                     a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft (raw, json)
Hash identifier:          vijU8CLhB1db4dRSQNqXu8stJOiItUv/N6i19kKVhfQ=
Subject key identifier:   B8:FB:CB:0E:9F:D4:26:21:13:3C:AD:2B:71:21:70:BC:A8:11:B4:F2
Authority key identifier: 6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C
Certificate issuer:       /CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
Certificate serial:       0199FB45DE809291CBE9F6319E9310367375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 07:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:24 +0000
Files and hashes:         1: a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl (hash: ufG25E9tWycqUAoyJj/sRxIs3sGpW6iD0bzN/1pGlyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:de:80:92:91:cb:e9:f6:31:9e:93:10:36:73:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6beb8e750d31bcceaa8804b5f653259d1850e81c
        Validity
            Not Before: Oct 19 07:01:24 2025 GMT
            Not After : Oct 20 07:01:24 2025 GMT
        Subject: CN=b8fbcb0e9fd42621133cad2b712170bca811b4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:96:ec:9a:63:fd:ff:dc:b0:22:8a:78:b3:a4:
                    c5:c8:85:c7:df:2d:98:08:0a:80:8d:83:f7:0d:7c:
                    40:db:7c:f4:fd:b6:72:32:5b:96:c8:c3:bc:79:f2:
                    3e:b1:15:ed:96:fe:ad:4e:d6:76:5e:a9:96:cf:80:
                    c2:94:34:e1:cf:d8:05:12:14:22:1b:c5:85:5b:85:
                    dd:f1:79:55:62:51:1c:1a:cf:64:13:4a:b5:22:04:
                    95:ae:dd:d0:f8:5e:c5:68:41:00:d2:01:e9:f8:66:
                    7c:87:a1:af:7a:32:f5:aa:33:0a:13:a4:71:85:db:
                    42:09:c2:66:0f:1e:41:cb:03:9e:8e:df:1e:d4:78:
                    0e:5a:85:34:4b:c2:02:d0:d7:e4:0a:ae:82:18:40:
                    6d:e8:00:a7:d6:8a:67:fd:e5:b6:64:b4:8c:ba:b4:
                    b2:d8:62:18:63:71:32:26:77:7c:6d:f6:da:e3:8b:
                    82:43:03:2e:99:df:70:ac:34:19:b1:e3:3b:63:ec:
                    fe:d8:94:76:cc:40:74:7e:d9:9a:81:15:2d:60:e4:
                    28:b7:47:88:0e:42:1d:aa:78:2d:46:82:fd:da:09:
                    d7:e2:48:e7:71:03:5f:9c:9d:a3:ae:dd:3d:a0:33:
                    de:22:31:a3:76:1d:a9:69:a0:07:ac:4c:c5:12:21:
                    bb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FB:CB:0E:9F:D4:26:21:13:3C:AD:2B:71:21:70:BC:A8:11:B4:F2
            X509v3 Authority Key Identifier:
                keyid:6B:EB:8E:75:0D:31:BC:CE:AA:88:04:B5:F6:53:25:9D:18:50:E8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/552229-b663-4a11-ad4b-9ff0f954d75d/1/a-uOdQ0xvM6qiAS19lMlnRhQ6Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:79:37:d8:6c:d3:ae:5e:70:7b:b9:6d:b9:a0:63:eb:53:99:
         20:94:31:27:f5:fd:99:ad:38:8f:6b:54:cc:6f:b9:e6:20:f4:
         77:60:85:19:14:20:31:8b:a4:d1:e8:11:a7:ef:27:88:b7:3a:
         66:c5:e6:3d:18:c4:88:e7:e5:9f:01:a0:36:6c:84:77:0d:5a:
         16:2f:6c:28:5e:99:8c:25:c3:57:de:78:e1:94:1a:97:5c:5b:
         11:fd:c9:40:ac:df:8e:9d:ae:db:aa:93:1b:3d:eb:28:a7:9e:
         89:0b:fe:f8:a0:88:3a:ee:5c:0b:f0:be:48:f4:e3:ec:85:3c:
         40:7a:78:e7:3f:e6:53:bd:23:51:e2:8e:45:b5:c9:6e:f5:dc:
         41:60:0d:80:6c:ea:7e:b3:e6:b6:42:ff:f9:f8:8f:e1:5e:ae:
         a8:0e:0a:70:46:67:38:43:ff:bc:74:7f:b7:61:05:18:0e:14:
         3e:34:ba:b3:fc:9d:2c:96:98:56:dd:35:91:d4:f6:b0:8e:e4:
         d2:f6:81:53:71:08:82:a6:15:06:09:48:2c:77:b4:fd:ac:bc:
         43:b7:f2:f9:51:46:fc:d2:b0:19:06:7c:2e:83:12:fd:b3:6c:
         8b:8c:12:83:26:e6:29:49:57:63:cb:f7:7a:9e:cd:2f:46:66:
         d4:2f:ff:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:15 2025 by rpki-client