Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
File:                     _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json)
Hash identifier:          WwGkSqZStZeda5eOYqj3Yz7Jx9VPjOrKQbtyBtYWQHQ=
Subject key identifier:   9C:7B:66:AD:90:4C:EA:EA:24:EB:BD:3F:56:BA:ED:83:9D:D2:B1:69
Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59
Certificate issuer:       /CN=fe51bda6cdc898f674441fce5c7421b46f611d59
Certificate serial:       0199FBEC28502820AEDCA73038041F1DD90E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
Manifest number:          0196
Signing time:             Sun 19 Oct 2025 10:03:01 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:01 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:01 +0000
Files and hashes:         1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: SYk5V0sGB5eT/bo7qiYsgdfokovKhHHSsK8ADCDBrEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:28:50:28:20:ae:dc:a7:30:38:04:1f:1d:d9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59
        Validity
            Not Before: Oct 19 10:03:01 2025 GMT
            Not After : Oct 20 10:03:01 2025 GMT
        Subject: CN=9c7b66ad904ceaea24ebbd3f56baed839dd2b169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:02:a9:1b:72:e2:c2:08:c1:13:58:e5:d2:75:
                    4b:8b:ab:10:ec:c5:1f:c9:86:bb:5e:78:c9:59:fb:
                    b5:ae:be:35:bf:4e:bd:d8:61:ba:f9:d8:86:53:5b:
                    e8:02:18:fb:d3:e9:b4:3d:07:b6:d9:5d:5a:5c:c1:
                    f4:67:bc:97:51:6a:4b:7d:9a:1a:81:6f:ef:14:51:
                    93:d4:c5:63:be:77:3d:16:f3:fa:36:39:a8:16:f3:
                    f1:b3:10:71:1c:b5:b4:b9:d9:20:6c:b7:76:7e:35:
                    d7:9c:37:77:e5:f3:e5:c3:c8:c5:1b:bd:19:8a:8f:
                    0d:59:d6:5f:2f:65:c8:3b:9d:e2:0d:53:ea:e2:12:
                    d4:8a:b3:ad:ae:df:5e:d8:d9:d0:a7:1d:8f:19:11:
                    a7:96:6a:b1:11:c3:19:15:54:c2:6c:dc:e2:3c:3b:
                    7e:53:0b:1d:66:50:c3:ef:93:26:7b:92:91:20:c4:
                    75:2e:62:93:5a:d8:f5:c0:4a:7a:00:70:31:aa:2c:
                    79:34:dd:fc:a5:fc:8b:b8:8c:db:0e:db:99:c3:2a:
                    f1:5e:99:2b:8b:88:c3:2b:9d:ff:47:a6:ad:de:43:
                    5c:35:a0:ff:70:a4:2d:f8:3d:fa:ee:77:16:7c:32:
                    61:58:eb:c5:66:27:3e:18:14:59:96:3b:64:29:e7:
                    36:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7B:66:AD:90:4C:EA:EA:24:EB:BD:3F:56:BA:ED:83:9D:D2:B1:69
            X509v3 Authority Key Identifier:
                keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ac:75:66:41:4f:b6:d7:fe:4b:23:74:e7:c5:03:79:cf:2f:
         87:22:40:d3:c3:2a:c1:d4:05:df:7b:ba:09:b1:9e:b5:fc:50:
         14:29:10:55:50:b8:2f:b4:80:bc:ac:41:41:23:70:51:11:fe:
         97:64:39:61:3f:af:7a:dd:10:33:16:37:7b:5b:f4:60:d8:b7:
         6a:52:ef:0f:09:78:90:cc:99:a6:10:b5:6e:6b:38:27:1a:b0:
         48:60:b0:ab:a0:64:b3:73:d8:84:64:8c:b9:67:ef:36:96:3f:
         f5:db:8a:f2:2c:df:de:77:ff:4b:cf:61:a5:2a:38:da:af:ac:
         26:eb:5f:b1:ec:b4:69:c8:67:90:06:67:07:d9:8a:fc:a4:36:
         28:36:52:95:39:52:c0:1f:c4:d7:d7:77:65:a8:40:45:c8:e7:
         55:e9:1a:0e:51:f5:b7:20:bc:ec:73:f8:18:0d:23:91:00:08:
         bb:87:35:e8:e8:ab:02:30:e3:f3:91:5e:09:bc:7b:75:9b:3f:
         a9:72:36:43:59:eb:39:f7:73:d3:22:04:49:de:ee:74:76:a4:
         6f:07:b3:ec:77:83:f6:a2:6d:7d:f0:95:4c:54:09:61:64:b3:
         54:c9:1d:a6:22:4b:bf:72:fe:fe:ed:39:43:89:1c:17:2e:d9:
         50:ee:8e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:24 2025 by rpki-client