Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File:                     e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier:          RrgSJXKpktfMzOZyTp8c2DiDK99V1R3iPDjdub8wyZ4=
Subject key identifier:   50:CC:6F:9D:07:54:BC:E9:44:25:FC:34:D7:6E:B5:2F:7B:6E:D3:B8
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer:       /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial:       0199FDD8F506F507CB8926556CF703080880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number:          161D
Signing time:             Sun 19 Oct 2025 19:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:18 +0000
Files and hashes:         1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: OL891WjPcr6Qeta0JLa3XjVU70oDwKWY3JkQb8yRxBs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:f5:06:f5:07:cb:89:26:55:6c:f7:03:08:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
        Validity
            Not Before: Oct 19 19:01:18 2025 GMT
            Not After : Oct 20 19:01:18 2025 GMT
        Subject: CN=50cc6f9d0754bce94425fc34d76eb52f7b6ed3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6c:e2:1e:e0:73:e7:ea:1b:6a:c3:90:08:92:
                    0f:dd:67:26:b8:26:c9:f9:19:4f:12:6b:a0:3b:07:
                    72:b3:db:68:c4:29:66:2b:e9:14:8b:98:36:b0:d7:
                    b5:08:c9:fc:b2:f8:39:3a:46:60:9c:56:f6:eb:35:
                    b7:d6:78:a6:fd:df:e8:78:3a:24:d9:ac:45:de:5b:
                    4e:23:05:ca:91:48:ac:9c:09:12:61:26:25:27:d0:
                    55:42:66:f8:e5:ad:7d:d9:2e:21:fb:db:c0:fc:91:
                    1c:dd:a2:9d:84:f8:e8:78:0f:12:6a:0b:20:32:90:
                    b9:79:84:e6:f2:14:31:91:3d:63:0f:74:aa:0f:8d:
                    d8:a6:35:c4:ba:f3:b0:34:22:8f:25:cd:a7:90:c3:
                    ea:aa:8c:0f:15:51:de:0e:65:17:9b:24:db:03:5a:
                    23:c6:3e:c0:7c:ed:be:38:55:f5:c4:3a:c5:4f:75:
                    71:46:e0:79:c9:5b:77:b6:e6:87:f7:0d:52:2f:47:
                    c2:4a:6b:1a:a4:33:89:e6:d9:db:45:8c:60:69:7c:
                    a7:86:e4:f5:d0:5d:ff:26:e2:ed:8a:54:fb:8e:8b:
                    36:a3:1a:c8:0f:19:4b:b3:c1:0f:ad:d2:ff:77:e4:
                    73:1e:d0:30:dd:cf:6b:59:ea:b4:42:13:be:ad:70:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CC:6F:9D:07:54:BC:E9:44:25:FC:34:D7:6E:B5:2F:7B:6E:D3:B8
            X509v3 Authority Key Identifier:
                keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:71:5c:70:da:91:72:a0:72:ea:26:74:14:21:1e:0c:45:89:
         98:fe:ee:21:47:f1:75:95:88:c5:da:22:15:11:01:fe:ed:59:
         28:33:e0:f1:31:ea:81:a6:37:9c:60:0d:f0:87:61:45:fb:d6:
         ff:d1:cf:b5:12:d5:10:4c:8b:0a:b7:f9:52:e8:c2:9e:3b:12:
         b2:17:ad:97:62:60:03:55:d0:a0:c3:e8:48:ff:fd:6a:6d:93:
         ba:1a:18:40:41:6e:62:9e:82:76:1b:47:6a:cf:d9:0c:f8:86:
         9e:05:db:2d:cd:82:45:34:eb:73:26:ec:f6:7e:fd:37:6c:c8:
         56:28:bc:cf:3a:ae:ab:6e:a0:f3:35:0b:96:24:e6:b4:41:90:
         d2:54:42:05:55:c3:2c:34:48:2a:42:75:9f:b0:f7:e3:4f:8b:
         88:45:2b:c9:64:9c:8e:30:1c:da:a3:cb:09:ea:e7:bd:28:10:
         f4:b3:62:05:d8:93:74:29:ef:83:58:80:78:82:86:95:d3:cf:
         ef:31:19:ea:86:f5:ec:05:f8:e8:46:c8:55:bf:51:81:e3:d0:
         aa:67:58:a3:9d:31:57:27:8e:c2:63:4b:e5:26:1d:14:44:68:
         cb:83:ce:35:75:78:4e:5e:97:0e:06:b5:5b:c4:86:ce:37:5a:
         40:f8:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:36:56 2025 by rpki-client