Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
File:                     wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json)
Hash identifier:          fl69ZUsAbd+lztdMAoeoJipfwaII0ikGCHKCzdXSnqQ=
Subject key identifier:   C1:42:B9:1C:A3:EE:FB:CE:0D:1E:85:4C:D6:B1:2F:71:F7:FA:39:5A
Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7
Certificate issuer:       /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
Certificate serial:       0199FBEB9C3C3880AE9A5DFA9BCC1DE7A33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
Manifest number:          0D48
Signing time:             Sun 19 Oct 2025 10:02:26 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:26 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:26 +0000
Files and hashes:         1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: oNF3R1m6QowvvAPexBxzqgZMLeN4hutzKdWToWNXtWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9c:3c:38:80:ae:9a:5d:fa:9b:cc:1d:e7:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7
        Validity
            Not Before: Oct 19 10:02:26 2025 GMT
            Not After : Oct 20 10:02:26 2025 GMT
        Subject: CN=c142b91ca3eefbce0d1e854cd6b12f71f7fa395a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:1a:d4:e5:1d:c4:7e:be:e4:2d:8f:90:d0:
                    96:f8:a7:af:38:f3:17:e0:62:e0:4d:66:4a:74:b4:
                    57:97:a3:0b:8a:b3:ea:04:f6:be:81:dc:4d:46:58:
                    5b:ea:30:e6:ec:bb:fd:1a:b1:fb:1b:d1:20:6e:d2:
                    6e:a9:cc:2e:1a:d0:53:1c:67:a2:f8:1f:ee:8f:9d:
                    e1:9d:8d:6c:64:e2:23:bc:d1:ca:58:10:f9:3b:fb:
                    6a:6d:cc:9c:35:2d:c9:41:4d:0f:e2:bc:20:ea:19:
                    8c:91:00:fc:bb:99:14:f4:41:32:55:0c:a9:aa:bc:
                    6a:b7:dc:70:97:b4:e8:3f:f4:18:71:fc:61:ac:4e:
                    e8:96:c0:8f:3b:59:35:09:53:00:98:46:ab:46:7b:
                    df:f0:b8:3f:36:74:1e:f4:92:a8:da:b0:08:d1:e7:
                    db:ff:8f:35:3a:99:05:7b:0d:fd:b4:9a:c0:35:59:
                    84:0b:a0:6e:ac:a2:73:e5:6c:2c:ad:4b:c4:6c:3c:
                    bb:81:20:1d:1e:a6:60:84:91:3a:b2:6f:28:aa:e3:
                    81:51:9e:26:f1:73:af:0d:4a:ca:63:ed:c3:e2:2a:
                    23:e4:7e:3a:2f:9b:12:2b:28:4b:b1:46:3b:ab:08:
                    b9:43:b1:7a:89:f7:5d:2a:5f:a1:73:55:f6:c1:67:
                    c0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:42:B9:1C:A3:EE:FB:CE:0D:1E:85:4C:D6:B1:2F:71:F7:FA:39:5A
            X509v3 Authority Key Identifier:
                keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:da:7f:b0:07:c8:8d:f1:2b:a4:36:e7:72:da:87:23:25:4e:
         c8:14:54:98:29:b2:4b:ea:08:1f:88:f9:04:45:f4:db:f3:0f:
         65:4f:bb:bf:a5:45:86:0c:dc:e6:1f:f3:bc:22:af:c9:b3:ef:
         e7:54:35:0c:ad:b6:2c:ce:bc:cb:d8:b0:97:7f:99:99:fc:b8:
         3a:de:2f:e6:2e:99:f0:6c:0e:1f:48:b0:91:58:a4:07:72:cd:
         0b:dd:42:bb:8b:45:f9:28:32:88:4b:cc:1e:64:bc:92:cf:0d:
         0f:58:bc:4a:a3:a3:6a:f1:ea:aa:3e:63:68:f4:0a:a4:16:af:
         e5:30:68:a7:90:03:2a:de:2a:d0:de:6f:a6:0b:94:ac:54:e5:
         a5:85:f9:81:56:06:47:ab:e4:39:0f:d3:6e:16:5a:ee:98:d1:
         e4:b9:1d:7f:26:3e:76:ea:c8:83:97:1c:be:6b:60:69:c0:ff:
         4c:c3:00:3f:80:d5:64:9b:23:8c:eb:49:5a:fb:01:8d:dc:40:
         8f:8c:6f:05:cb:b8:89:fe:5d:47:9b:41:dc:b4:3b:da:7b:01:
         94:5d:45:83:05:a5:8a:44:64:38:44:be:c0:ee:86:46:cc:eb:
         8c:6c:24:9b:c1:1d:e0:91:80:83:55:5d:0b:40:34:70:ea:df:
         12:92:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:29 2025 by rpki-client