Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File:                     AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier:          I59q4TM2XA5lkvgyihNvcIPpifFSbiXkgPp0KfWD0DY=
Subject key identifier:   47:13:DF:FE:43:1C:4C:66:40:56:2D:E3:90:EE:BA:C8:AA:21:39:03
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer:       /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial:       0199FC8F4A100FD56B148618DFC099B9002E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 13:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:12 +0000
Files and hashes:         1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: +30CaLJFbAop6aYlcipPPWKxl2x6ZksVuDtds6c9J94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:4a:10:0f:d5:6b:14:86:18:df:c0:99:b9:00:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
        Validity
            Not Before: Oct 19 13:01:12 2025 GMT
            Not After : Oct 20 13:01:12 2025 GMT
        Subject: CN=4713dffe431c4c6640562de390eebac8aa213903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:f4:dd:eb:14:11:85:b0:26:5d:80:d1:d2:
                    80:c8:b6:ee:fd:cb:24:a4:82:8e:2c:3d:bd:5b:1d:
                    91:df:fb:d3:46:48:75:a5:71:8f:31:0c:d0:79:24:
                    cb:2b:fb:b3:6d:67:bf:42:2a:d5:53:74:af:db:9f:
                    c2:e5:84:f2:48:d9:aa:4e:b2:9f:9a:1c:d7:61:14:
                    82:40:90:34:5c:74:b5:67:75:58:62:f8:42:0a:47:
                    95:63:0c:39:37:35:7c:3f:94:34:64:e0:e6:6a:30:
                    c2:8d:f9:b9:ef:2b:41:46:df:c9:d3:f3:c6:c1:98:
                    a2:85:32:1b:53:9b:33:dc:6c:8a:cb:e1:ff:12:13:
                    3b:fd:43:50:ff:6a:66:e7:ae:cb:2d:b7:bd:0c:0e:
                    89:bd:84:d9:e5:69:71:02:36:de:48:62:e2:af:c3:
                    9b:66:b8:a9:d8:40:b0:38:49:a1:a2:8f:47:b2:68:
                    1d:ce:a0:ec:b1:36:3b:a7:02:96:b8:10:53:df:c7:
                    50:ce:99:6b:33:05:bb:db:46:1a:68:f0:b8:fb:8b:
                    68:ba:49:36:97:81:54:c7:40:13:86:a4:b4:13:f6:
                    84:79:ad:95:9d:75:a9:07:7b:a8:e5:e9:c5:f0:98:
                    7d:9c:c4:50:e1:b3:01:a4:8a:8c:17:eb:41:fe:df:
                    a3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:13:DF:FE:43:1C:4C:66:40:56:2D:E3:90:EE:BA:C8:AA:21:39:03
            X509v3 Authority Key Identifier:
                keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:56:b2:64:96:88:cc:5d:a0:a5:53:03:12:a1:ed:06:d2:f1:
         04:6a:08:6b:c2:7d:b4:fd:52:8a:76:e1:a6:93:61:99:24:37:
         43:12:d8:f9:bb:bf:7f:85:c4:70:d7:b1:0a:d4:f7:2a:a4:30:
         b5:2a:2c:f1:88:42:29:ae:bc:dc:d5:3d:6c:db:6e:d2:e3:cf:
         9c:47:ed:7f:0f:14:e1:ab:dd:ef:18:a1:93:69:6a:21:01:a0:
         40:b5:77:4f:3b:26:f5:30:6d:f8:db:00:bf:62:45:1e:82:50:
         bc:7c:92:08:5b:4a:e2:b2:d9:84:9f:c2:39:3d:86:1f:16:ee:
         c5:31:77:3a:c2:dc:88:83:df:9f:80:b5:b6:46:5b:34:be:9f:
         36:ec:ea:1f:e8:36:6d:1c:ce:e3:ed:ba:2d:8f:78:25:e0:e0:
         66:19:04:49:8b:c9:50:6d:40:ed:f3:6d:cc:c0:14:af:c4:38:
         a9:79:78:86:73:5f:d3:15:29:cf:ac:c9:de:a3:21:9c:95:d7:
         0c:67:e4:67:ce:ac:d7:de:d8:e6:eb:3d:28:aa:93:69:f2:fe:
         e4:43:34:ee:a5:c9:04:88:a5:e9:14:29:31:33:a4:f3:4a:7c:
         78:fb:b3:22:3c:9c:f6:24:ed:f6:d3:69:fd:5b:95:b3:4e:0e:
         c3:c6:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:41 2025 by rpki-client