Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
File:                     rqVXfKLwuifftTsIjifG2Uty7_c.mft (raw, json)
Hash identifier:          Do3bcrRl5xh4mQFgRNlMEjLo0QFtYys1xjVP8iWahY8=
Subject key identifier:   A6:A4:5F:8F:E1:9E:94:0B:91:3A:53:54:88:DB:55:D2:90:E4:3F:84
Authority key identifier: AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
Certificate issuer:       /CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Certificate serial:       0199FDA1BEA4CCC79A716A58AB2F65CB58EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
Manifest number:          0DD7
Signing time:             Sun 19 Oct 2025 18:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 18:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 18:00:59 +0000
Files and hashes:         1: rqVXfKLwuifftTsIjifG2Uty7_c.crl (hash: cF5ZMET8yLOhrhtNBvc5AlbtCiqtWR7Rdy5KSqVkNI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:be:a4:cc:c7:9a:71:6a:58:ab:2f:65:cb:58:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
        Validity
            Not Before: Oct 19 18:00:59 2025 GMT
            Not After : Oct 20 18:00:59 2025 GMT
        Subject: CN=a6a45f8fe19e940b913a535488db55d290e43f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:6c:06:31:5c:61:e8:6d:0b:45:10:e3:6a:
                    15:48:0f:2c:00:3c:ce:b2:7f:80:89:91:1e:25:d4:
                    c2:99:86:45:d0:91:dd:d6:9a:8d:a2:59:9b:ea:be:
                    b8:ac:50:0a:ef:dc:2d:3f:b6:e7:35:1b:62:f9:31:
                    5a:0d:3c:70:6e:09:2d:63:92:83:13:a4:a8:18:3c:
                    ea:89:1e:e6:2c:1a:32:15:d9:73:12:03:43:e8:d6:
                    92:d0:37:28:27:fc:54:85:75:67:6f:f4:6a:cc:e6:
                    55:7b:71:5b:f7:47:97:53:e3:bd:91:e7:75:76:9f:
                    1d:31:68:69:af:62:ae:37:04:42:39:0f:26:3a:85:
                    b8:78:e9:1b:3b:53:ea:21:da:d3:a9:90:c9:f5:d1:
                    53:c2:a6:ba:64:ae:79:57:32:22:57:10:a4:2e:a6:
                    fa:fe:7a:c8:36:22:e4:6b:68:bb:f3:7d:0f:57:9e:
                    47:28:2f:a0:c4:ea:4e:f2:c5:8e:c8:89:13:07:d2:
                    85:0d:a7:96:39:da:d4:da:1a:e7:ce:d8:a3:64:05:
                    d5:89:7e:ca:69:60:ba:5f:6e:ae:f7:24:d8:69:d5:
                    ba:6f:f3:b9:e5:25:52:24:29:66:34:e1:83:45:63:
                    9f:5b:e2:ad:dd:aa:8d:7e:d8:76:84:94:0c:d0:44:
                    df:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A4:5F:8F:E1:9E:94:0B:91:3A:53:54:88:DB:55:D2:90:E4:3F:84
            X509v3 Authority Key Identifier:
                keyid:AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3d:eb:fe:45:08:ca:19:15:69:e2:75:82:d6:1c:93:1a:24:
         3a:3a:69:b3:a2:19:2c:e0:8c:17:9d:d1:c0:ef:b0:2d:3b:24:
         a6:13:dc:af:8c:99:e9:db:d3:47:fb:ff:cf:ae:9e:03:cd:41:
         7c:d8:72:44:92:79:60:04:31:77:4c:b8:20:c9:78:e2:9e:c7:
         d3:43:55:0a:52:60:de:a6:1e:fa:e5:18:8e:35:e3:eb:a7:d6:
         0c:7f:ba:e1:b2:71:51:f4:2f:db:31:06:a1:2e:7a:ea:f3:bd:
         4e:61:f7:0e:76:fb:71:32:3a:aa:10:e3:ca:74:a9:00:8a:18:
         e0:b4:3c:97:1d:7d:97:27:a7:ad:cf:10:76:cb:c3:8d:34:05:
         06:7f:f1:4e:44:1e:a0:56:c9:7a:60:16:73:1f:8d:28:70:6c:
         0b:99:6e:d5:37:e5:7e:cf:41:36:dd:25:66:a5:e3:08:dc:af:
         af:52:9a:a8:1d:e2:a5:a2:c1:35:9c:c6:7e:2f:aa:d1:a6:3b:
         b0:22:d9:36:f4:7f:cc:df:da:14:ef:61:3d:a7:1d:d0:06:0a:
         e4:d2:cb:1d:52:e0:bc:84:d1:88:65:df:7c:90:3f:f6:de:f9:
         5b:e2:36:41:c9:d2:2e:46:aa:ea:8b:79:21:02:47:65:8a:ac:
         8c:26:83:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:44 2025 by rpki-client