Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File:                     SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier:          QmfSLKK6dyTClh32j8KtecZQx/AzMzSaBFVuKWCoCqU=
Subject key identifier:   E0:04:55:2B:C3:5C:4D:C0:7B:5E:40:75:E9:1F:39:2B:D4:3F:1D:30
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer:       /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial:       0199FFC7386232BAAADC2DAA46FF7E54599A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number:          1674
Signing time:             Mon 20 Oct 2025 04:01:10 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:10 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:10 +0000
Files and hashes:         1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: +7LzvVFEnzAZUEwGLPLry8gN3RmsiRHBjbFhHr0bjTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:38:62:32:ba:aa:dc:2d:aa:46:ff:7e:54:59:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
        Validity
            Not Before: Oct 20 04:01:10 2025 GMT
            Not After : Oct 21 04:01:10 2025 GMT
        Subject: CN=e004552bc35c4dc07b5e4075e91f392bd43f1d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:47:13:c8:8e:ee:03:cb:32:f4:de:03:4a:81:
                    4b:80:d9:8e:18:bb:e4:7d:11:50:59:34:3c:1e:8f:
                    ef:d8:ea:1e:05:58:fc:5b:6a:15:e5:88:21:3e:06:
                    c3:fa:8b:6b:69:37:1a:eb:16:b6:3a:30:f2:62:de:
                    04:b5:33:18:6e:34:41:24:41:99:7d:b6:93:cc:aa:
                    8f:22:6c:6b:91:bd:64:aa:8d:97:57:12:1b:32:37:
                    c7:ef:f6:13:cb:17:bd:b2:b8:f9:19:d9:06:5c:d5:
                    ee:25:b9:6e:2d:48:40:d1:c2:ba:8a:a4:7d:37:98:
                    25:56:5e:7c:58:51:a4:39:dc:a2:e6:61:29:0a:38:
                    25:18:28:7a:b3:43:0a:c7:76:ce:19:30:f3:37:b5:
                    53:02:c9:3e:62:cc:0d:c5:e7:40:dc:12:6a:f5:7f:
                    c6:8e:31:97:7e:ce:22:75:68:d9:e1:b9:6c:43:ae:
                    ea:0a:44:e3:5d:42:dd:ea:eb:2a:ca:60:3d:ab:87:
                    70:23:92:2d:b7:9f:a1:2b:d4:0c:f8:0f:19:e1:04:
                    32:08:26:54:13:e4:6c:2e:e1:9c:50:e0:ea:08:c3:
                    e7:fa:26:fa:3f:b8:df:c9:f6:42:ef:d7:2f:0d:58:
                    48:c9:6d:13:09:72:cf:5e:f7:1b:71:e0:db:3e:ba:
                    40:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:04:55:2B:C3:5C:4D:C0:7B:5E:40:75:E9:1F:39:2B:D4:3F:1D:30
            X509v3 Authority Key Identifier:
                keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:25:b3:0e:8e:2f:de:73:5b:1e:e6:c7:1d:db:02:81:4a:47:
         e1:80:21:3a:c5:4e:c3:84:90:cb:35:c8:8b:a9:73:de:46:a3:
         5a:58:f7:a1:ab:52:fd:86:a5:ed:70:f0:6c:48:25:1c:fb:ec:
         39:3f:96:50:5f:4c:83:00:f9:7a:71:7b:fb:48:c7:01:9c:05:
         93:df:04:f7:81:61:d0:a1:80:e9:f7:d3:fb:39:ac:28:bf:5b:
         eb:02:5b:d7:78:4c:28:84:02:d7:3c:68:2e:04:28:bb:a3:3e:
         15:1c:0c:e7:e7:43:32:33:4d:84:5a:ec:dd:75:64:24:52:08:
         00:1d:87:c1:72:2e:28:93:65:96:ef:1a:60:ef:38:c6:54:69:
         70:79:94:fb:49:73:10:5f:2c:18:14:17:b2:6e:35:9b:45:18:
         98:61:d2:a5:b8:23:f2:32:18:8b:07:c0:be:83:35:4a:88:62:
         bc:a8:71:28:de:21:10:c3:6d:2f:56:86:14:a4:1e:c6:39:1a:
         55:56:63:52:7f:df:e2:9e:23:93:fd:9c:9d:53:36:0e:5a:fa:
         88:4e:6e:f2:0f:47:d2:f8:e7:24:74:7c:9b:6e:73:33:3e:d6:
         12:50:d6:ee:52:fc:36:c0:e4:89:c9:ec:89:11:a8:21:3a:cd:
         e3:4a:43:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/xzhiMrqq3C2qRv9+VFmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ODkxOGNhNjYxODBkZWUwNzliYWY0NTA1M2U0Y2ViNTc2
MjkyYmQwHhcNMjUxMDIwMDQwMTEwWhcNMjUxMDIxMDQwMTEwWjAzMTEwLwYDVQQD
EyhlMDA0NTUyYmMzNWM0ZGMwN2I1ZTQwNzVlOTFmMzkyYmQ0M2YxZDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UcTyI7uA8sy9N4DSoFLgNmOGLvk
fRFQWTQ8Ho/v2OoeBVj8W2oV5YghPgbD+otraTca6xa2OjDyYt4EtTMYbjRBJEGZ
fbaTzKqPImxrkb1kqo2XVxIbMjfH7/YTyxe9srj5GdkGXNXuJbluLUhA0cK6iqR9
N5glVl58WFGkOdyi5mEpCjglGCh6s0MKx3bOGTDzN7VTAsk+YswNxedA3BJq9X/G
jjGXfs4idWjZ4blsQ67qCkTjXULd6usqymA9q4dwI5Itt5+hK9QM+A8Z4QQyCCZU
E+RsLuGcUODqCMPn+ib6P7jfyfZC79cvDVhIyW0TCXLPXvcbceDbPrpA0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAEVSvDXE3Ae15AdekfOSvUPx0wMB8GA1UdIwQY
MBaAFEiJGMpmGA3uB5uvRQU+TOtXYpK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQt
ZDJjZmQ1ZjIyZTdhLzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQtZDJjZmQ1ZjIyZTdh
LzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSWzDo4v
3nNbHubHHdsCgUpH4YAhOsVOw4SQyzXIi6lz3kajWlj3oatS/Yal7XDwbEglHPvs
OT+WUF9MgwD5enF7+0jHAZwFk98E94Fh0KGA6ffT+zmsKL9b6wJb13hMKIQC1zxo
LgQou6M+FRwM5+dDMjNNhFrs3XVkJFIIAB2HwXIuKJNllu8aYO84xlRpcHmU+0lz
EF8sGBQXsm41m0UYmGHSpbgj8jIYiwfAvoM1SohivKhxKN4hEMNtL1aGFKQexjka
VVZjUn/f4p4jk/2cnVM2Dlr6iE5u8g9H0vjnJHR8m25zMz7WElDW7lL8NsDkicns
iRGoITrN40pDDQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:01:32 2025 by rpki-client