Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File:                     8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier:          EriAS4Rigt/NJTNB8xi/4WladXNho2UAqc1yo/utgaU=
Subject key identifier:   AC:45:93:56:77:DD:9F:52:BD:B4:77:7C:E8:97:99:A0:DC:C7:61:60
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer:       /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial:       0199FC8F16BFF1EAD512AD9EE053EF3338AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 13:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 13:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 13:00:59 +0000
Files and hashes:         1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: g1Ovk1zlHGV8pRaQxV/ZCb+Cu9rtrOJBB653CjCWEpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:16:bf:f1:ea:d5:12:ad:9e:e0:53:ef:33:38:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
        Validity
            Not Before: Oct 19 13:00:59 2025 GMT
            Not After : Oct 20 13:00:59 2025 GMT
        Subject: CN=ac45935677dd9f52bdb4777ce89799a0dcc76160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:2a:87:f7:72:a7:65:50:71:1f:41:ed:69:
                    24:4c:71:20:c0:ab:1d:da:4e:bf:82:a0:33:60:1e:
                    da:19:b9:20:20:70:95:26:32:0b:ae:2c:3c:c1:73:
                    0f:7f:98:4a:d2:0c:e7:5c:e3:67:54:2b:21:09:9e:
                    95:22:10:d0:52:a6:d7:0a:5f:e3:02:79:3a:6b:54:
                    08:00:19:ef:18:13:2c:a8:0d:bd:b2:7a:7e:ea:f6:
                    0a:9a:74:28:b1:6d:a3:ba:f7:ed:6a:b1:3d:db:8f:
                    b5:a5:b6:57:d7:36:13:7a:69:c3:4f:1c:50:c7:65:
                    bc:f4:08:b1:5c:d0:11:af:d4:d6:3c:40:a4:79:46:
                    bf:c2:03:e7:e5:92:43:f9:b2:1f:1c:18:84:23:ff:
                    07:80:9e:99:74:d0:14:6a:be:26:d6:65:a8:b3:06:
                    51:f8:2f:91:a8:e0:26:eb:47:30:c7:b0:f1:63:53:
                    eb:68:9c:79:89:9f:3f:aa:9f:8b:92:76:e4:30:71:
                    49:66:b5:20:ab:88:35:35:40:dc:83:e3:8a:a1:93:
                    1b:f4:00:c0:c6:b6:40:7a:3e:18:e6:d8:b7:6c:ab:
                    2c:19:2e:25:24:43:c1:43:25:55:9f:2c:eb:38:d8:
                    5e:7c:e8:7e:5a:cb:61:c6:cf:a9:0f:91:32:2b:9e:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:45:93:56:77:DD:9F:52:BD:B4:77:7C:E8:97:99:A0:DC:C7:61:60
            X509v3 Authority Key Identifier:
                keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:27:66:1f:a7:d9:37:03:e6:8c:bd:45:ba:da:fc:fe:a5:91:
         aa:8b:4e:37:51:35:24:66:df:bc:88:b6:c9:3a:05:a7:ae:8d:
         e9:2b:e6:cf:d1:bf:94:d9:4f:b6:59:b9:e9:a3:22:8d:f9:59:
         70:03:06:e9:6a:4d:72:7e:b2:7e:ae:91:46:00:59:41:57:53:
         4b:6a:e8:9d:14:db:27:fd:3e:c1:a1:fb:e7:df:7b:68:3d:bf:
         8a:e9:0a:67:85:34:69:c7:80:2a:46:1d:b5:3b:7d:ce:c4:bc:
         fb:d3:db:df:87:82:63:0f:e1:d0:c0:6f:9a:43:80:c5:39:33:
         a4:08:51:41:44:e5:19:0e:5f:bc:2a:bc:d6:a7:58:6b:b3:55:
         b5:70:ec:8b:b5:aa:27:7f:9e:73:81:68:ca:cd:ed:b6:72:07:
         ec:2c:b9:59:e2:3c:58:dd:9b:16:0f:e0:c0:70:93:b5:84:08:
         94:93:cb:f9:a4:e9:b3:8d:07:47:37:2a:11:39:9e:16:5b:6d:
         53:9a:0f:df:7f:20:d9:c6:5b:d6:be:f9:a9:45:4e:67:36:84:
         4e:0a:13:70:5e:81:02:0b:87:4b:22:20:fe:cc:90:0b:f4:77:
         4d:af:22:25:a6:b0:ba:83:b4:ec:cc:1b:0a:ec:06:cb:62:58:
         b5:31:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:55 2025 by rpki-client