Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
File:                     t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft (raw, json)
Hash identifier:          Z3+kRkg0SdkEpembxf8Y97LxBrVZt21C1JEvGpk7mCQ=
Subject key identifier:   2F:86:B9:2C:8E:E1:E1:1B:61:D2:B4:38:35:D3:87:D1:1B:2C:8E:D2
Authority key identifier: B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41
Certificate issuer:       /CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
Certificate serial:       0199FA6A1B93CF4593D473D960168CF4F823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
Manifest number:          0D76
Signing time:             Sun 19 Oct 2025 03:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:21 +0000
Files and hashes:         1: t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl (hash: 4+jpLGLsg3N3Mr+Qy/NWxu0dRunGff16oqz40I+JPy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:1b:93:cf:45:93:d4:73:d9:60:16:8c:f4:f8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b792d7ecf3b45c4938f05bb9051c5a89729dd441
        Validity
            Not Before: Oct 19 03:01:21 2025 GMT
            Not After : Oct 20 03:01:21 2025 GMT
        Subject: CN=2f86b92c8ee1e11b61d2b43835d387d11b2c8ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:09:40:16:d4:4b:a8:14:2a:d6:87:02:8e:
                    3d:58:5f:6e:90:14:7c:8b:87:31:a8:54:8a:86:54:
                    e4:ff:66:9b:06:aa:78:36:df:f9:c6:b1:91:1d:f7:
                    e5:33:98:7c:6b:77:96:da:e8:43:85:94:69:e1:90:
                    e7:77:8c:dc:0a:32:ec:4f:38:5c:41:9c:82:7a:c5:
                    d1:b7:e8:87:f4:9d:5e:a5:71:35:89:63:bd:74:86:
                    22:16:b5:9c:80:f5:a2:18:ed:f8:63:cd:1e:70:bd:
                    dd:20:8c:50:6e:a4:f5:a4:e0:20:4f:d3:6b:44:c3:
                    9a:5e:02:94:0d:59:b2:dd:7e:c4:80:af:58:15:99:
                    da:4c:c2:b2:4f:03:a8:03:05:da:22:a9:be:4a:2f:
                    b3:77:28:51:77:d4:f6:21:7d:9c:03:35:9d:79:17:
                    88:77:18:a4:1e:7b:31:ff:f7:b8:5d:3f:77:57:8c:
                    6d:11:cb:c4:cd:5f:83:a0:79:5d:39:cc:bd:b2:88:
                    ab:e7:77:c5:89:73:d1:9e:9a:29:90:7d:c3:4c:07:
                    76:5f:f6:98:99:a6:3f:1b:ae:88:c8:48:bd:bc:8f:
                    d8:43:c4:d6:56:33:49:aa:32:19:d6:a1:7b:bc:b0:
                    60:56:65:b8:48:dc:fa:61:ce:4c:e3:9f:86:a9:98:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:B9:2C:8E:E1:E1:1B:61:D2:B4:38:35:D3:87:D1:1B:2C:8E:D2
            X509v3 Authority Key Identifier:
                keyid:B7:92:D7:EC:F3:B4:5C:49:38:F0:5B:B9:05:1C:5A:89:72:9D:D4:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5LX7PO0XEk48Fu5BRxaiXKd1EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b05e62-cac2-42f9-9ef6-a32549232520/1/t5LX7PO0XEk48Fu5BRxaiXKd1EE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:73:41:18:62:a3:36:81:6b:0d:bc:65:2f:ee:24:32:79:5c:
         fd:47:34:4c:25:6e:74:91:82:10:3b:c2:86:99:c8:55:23:1d:
         9f:30:17:d3:f6:4e:d8:d7:c0:e7:79:87:41:84:a1:6e:b8:88:
         a1:60:22:64:8d:d5:0e:34:c1:55:c1:25:16:e4:66:e6:60:44:
         c6:88:05:d5:b7:1d:f0:a2:73:7d:39:0f:db:ba:81:e0:9b:82:
         1e:0b:11:7e:ab:2c:14:b0:e7:c2:45:9a:26:05:fe:ea:8f:28:
         75:6f:f6:5d:16:15:75:b0:a3:c3:75:96:08:12:e1:ef:6f:82:
         a3:ce:4d:2f:78:60:5c:d4:bb:d1:99:8e:30:e3:76:03:03:84:
         49:fd:84:63:03:22:f5:5c:b8:5f:25:bf:14:a8:c0:a8:82:1d:
         03:f2:26:6f:02:f2:7c:1e:b4:3e:e1:c7:c8:7b:bb:8d:5c:5e:
         c2:aa:d1:b1:46:6f:74:0c:9b:ca:80:65:62:11:40:63:ab:70:
         15:c6:5b:9a:49:dc:82:28:f3:ac:80:ee:f1:02:9d:d3:5c:7d:
         fe:f9:aa:46:b5:b5:a8:4e:39:14:85:4a:63:d2:cd:3e:76:f2:
         4a:28:82:5e:08:1b:09:0f:b7:00:b0:d0:85:24:e5:85:59:67:
         5e:35:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:35 2025 by rpki-client