Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
File:                     tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft (raw, json)
Hash identifier:          m1PkRy3Omz7qkF6e2In4PnHkpflWD1KTCH7JmvTTaiw=
Subject key identifier:   07:9D:33:83:FA:AF:38:77:17:99:0C:A3:0B:3D:C9:3D:C5:38:12:3B
Authority key identifier: B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31
Certificate issuer:       /CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
Certificate serial:       0199FBEACE406A8C023FAA4AD057502F6BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
Manifest number:          16DC
Signing time:             Sun 19 Oct 2025 10:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:33 +0000
Files and hashes:         1: tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl (hash: 7lohtK5vDGXbKLLCGTZS9U6OszktXghsOmCx1WOVioo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:ce:40:6a:8c:02:3f:aa:4a:d0:57:50:2f:6b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56a8957ccc30aa4ec2d478e53f38726c9955a31
        Validity
            Not Before: Oct 19 10:01:33 2025 GMT
            Not After : Oct 20 10:01:33 2025 GMT
        Subject: CN=079d3383faaf387717990ca30b3dc93dc538123b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:b2:6e:ab:a2:68:99:a7:b9:cb:13:a1:a7:
                    39:8a:30:f1:40:ae:25:03:c8:ae:24:0e:46:76:f5:
                    05:6f:81:46:5e:3d:70:d6:5c:ee:1e:db:4e:60:12:
                    14:2c:f6:41:79:59:d7:d8:5a:94:be:d6:2d:59:1c:
                    82:ca:b8:05:65:3d:eb:88:d6:a7:3f:0c:ed:d7:6f:
                    7b:fc:80:e6:fa:77:1f:06:eb:39:d2:80:9c:5b:c2:
                    fa:0d:ac:fb:9a:09:9f:15:4c:b8:7e:ac:50:1a:d4:
                    c8:5f:46:fa:08:b2:f1:ac:e7:8d:f8:4a:09:28:1f:
                    86:cd:01:21:0f:cb:8e:21:7e:24:26:0b:6b:af:ed:
                    84:45:4b:72:69:c3:79:6a:6e:88:ca:6a:8f:8f:e9:
                    1a:60:83:b7:f1:f8:50:16:9b:ba:fe:24:55:0e:b6:
                    c2:c2:3c:ad:a6:80:f0:03:a4:2b:60:be:35:16:33:
                    61:fc:bb:06:f7:38:6f:59:13:fb:57:0a:5f:26:e4:
                    f1:1b:01:e0:b3:af:fa:84:e7:b8:df:63:3f:cd:3d:
                    84:5a:db:01:dd:2f:06:7a:a1:5a:8e:a2:a8:4e:03:
                    55:4a:1b:28:26:0b:0c:5c:04:4e:3f:74:bb:6c:96:
                    79:bb:2a:ae:9e:6a:42:87:10:6b:3c:10:9d:00:a2:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9D:33:83:FA:AF:38:77:17:99:0C:A3:0B:3D:C9:3D:C5:38:12:3B
            X509v3 Authority Key Identifier:
                keyid:B5:6A:89:57:CC:C3:0A:A4:EC:2D:47:8E:53:F3:87:26:C9:95:5A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqJV8zDCqTsLUeOU_OHJsmVWjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/16e2aa-ddbd-4ee1-ae60-08bc640aed67/1/tWqJV8zDCqTsLUeOU_OHJsmVWjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:92:12:45:29:e6:8a:1b:ea:a0:d4:7f:cc:d1:c2:05:08:ed:
         5c:36:25:fa:1c:66:b1:f5:45:af:71:b1:20:9b:69:dc:0a:05:
         fb:d8:cc:7a:ef:5f:ec:05:bf:79:de:7f:1e:cd:1b:97:75:83:
         8f:bc:cd:a5:74:ec:25:93:3b:6f:0c:c9:98:56:2d:fe:5e:7f:
         40:8d:37:a9:17:0f:77:f1:43:00:66:04:2c:8e:d1:6e:be:10:
         d3:25:d6:0e:35:2f:c9:02:6f:e4:4a:3e:2d:5b:90:cc:ec:33:
         ce:f7:af:75:45:c3:07:d1:20:91:e4:fe:f5:5c:d0:73:6b:a5:
         e8:73:e3:ff:08:fe:a0:a3:28:93:26:a7:c0:59:d7:e8:e7:e7:
         ef:b4:11:3e:59:02:81:43:4c:f9:ef:30:81:b8:19:6e:04:93:
         de:92:9e:ee:2d:6f:dc:12:df:c4:68:9f:02:5b:ff:14:32:11:
         d0:65:56:7c:e0:4f:ac:4e:f3:e4:ad:bb:fa:fa:3e:42:6c:aa:
         c7:30:b2:44:35:fb:84:98:1c:a2:05:00:24:84:b4:ec:1b:2e:
         f9:bf:31:51:2b:32:be:5b:c1:80:c2:f3:cf:29:45:53:ae:4f:
         32:76:03:80:5a:a6:ec:ff:12:0d:87:76:92:89:71:58:9f:40:
         7c:c4:e1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:04 2025 by rpki-client