Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
File:                     mEL3HQwjZ4gu9HCLIGtLbimjezM.mft (raw, json)
Hash identifier:          eUYeGvIPC489dudI2fQC/4piBTVaKKtYk6k4M2lj0A4=
Subject key identifier:   F4:A3:39:01:E2:B7:E6:C4:4A:72:8B:32:23:49:E3:DA:8E:49:DB:CF
Authority key identifier: 98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33
Certificate issuer:       /CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
Certificate serial:       0199FDD951A18B379AD5623D68BE328532D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
Manifest number:          1378
Signing time:             Sun 19 Oct 2025 19:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:41 +0000
Files and hashes:         1: mEL3HQwjZ4gu9HCLIGtLbimjezM.crl (hash: 53VzB5Qd2anCIPW1kW7ADMXLy10/nrGcpMZPxIWQvpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:51:a1:8b:37:9a:d5:62:3d:68:be:32:85:32:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9842f71d0c2367882ef4708b206b4b6e29a37b33
        Validity
            Not Before: Oct 19 19:01:41 2025 GMT
            Not After : Oct 20 19:01:41 2025 GMT
        Subject: CN=f4a33901e2b7e6c44a728b322349e3da8e49dbcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9b:73:5a:81:09:d2:ed:05:5b:66:9a:b4:7b:
                    5c:68:a9:67:a1:3a:ea:3c:ae:70:49:ea:1d:9b:04:
                    a1:19:5a:ab:92:18:54:9f:56:61:16:3f:af:62:03:
                    86:da:be:80:d3:a4:7c:1c:ec:e3:e6:e7:6b:c3:c4:
                    81:ab:d9:99:24:09:0e:22:e4:f1:c5:0a:19:2e:7c:
                    86:68:46:97:76:a2:e8:56:98:35:a6:3d:c2:49:cc:
                    29:db:10:de:28:74:1f:70:2f:bf:09:9f:0e:3a:80:
                    7a:ef:31:53:0a:49:18:f6:59:e9:06:3e:55:ea:7c:
                    f0:da:fe:f1:53:a0:aa:62:7c:bb:d3:dd:e2:7c:56:
                    7f:bb:10:ad:6f:4e:c6:6d:7f:eb:54:e0:0b:9b:9f:
                    54:77:fe:22:a1:11:a2:b4:77:55:15:2a:7a:bf:e5:
                    97:40:43:c2:ee:29:1f:90:ef:f5:9c:71:3e:0a:bd:
                    d3:e6:09:82:53:8e:96:bd:79:63:fa:66:62:9d:78:
                    7b:12:65:ec:05:23:a5:8f:20:1a:97:64:44:ee:0d:
                    74:05:a8:ba:12:b8:2b:ae:e8:9d:95:9e:23:ca:bc:
                    70:b8:37:aa:12:2b:04:eb:63:02:6c:ef:c4:5d:18:
                    e0:14:c0:52:a4:32:85:5d:13:60:89:1b:48:4f:12:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A3:39:01:E2:B7:E6:C4:4A:72:8B:32:23:49:E3:DA:8E:49:DB:CF
            X509v3 Authority Key Identifier:
                keyid:98:42:F7:1D:0C:23:67:88:2E:F4:70:8B:20:6B:4B:6E:29:A3:7B:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEL3HQwjZ4gu9HCLIGtLbimjezM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/25c947-8534-4341-ad6e-7da8dbaea94a/1/mEL3HQwjZ4gu9HCLIGtLbimjezM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:d3:6c:4a:d8:6f:4b:57:29:4c:bc:4c:a4:a9:b1:c2:88:
         48:ab:8c:2f:9b:79:10:eb:7a:4a:3e:e5:0b:8e:8c:be:53:a7:
         29:13:34:32:cd:c9:cd:8c:5f:02:94:c1:53:20:6d:77:08:38:
         4a:f1:6e:67:fc:0c:11:1f:74:b6:38:9f:18:1d:56:e2:38:ac:
         c2:02:af:19:f1:5b:ae:60:6d:37:b6:5c:0a:b8:6e:ab:36:96:
         cf:ac:a6:89:73:ae:a1:6b:aa:00:ec:67:3e:ab:08:2b:ac:33:
         cb:f2:20:74:a1:48:7f:6e:7f:6b:28:72:5e:0a:8f:d5:5e:b9:
         04:43:11:14:bc:2e:23:69:62:c7:27:50:6b:1c:62:6e:40:41:
         da:7c:c7:6b:a5:84:96:17:34:8b:f9:a8:50:50:69:1a:50:6d:
         9d:84:40:c4:23:97:44:e7:90:8e:85:3b:91:33:52:5f:21:85:
         f8:7f:64:4a:cd:a6:10:53:23:43:87:b1:21:b2:e7:88:b9:ef:
         aa:e5:84:04:02:c7:72:43:be:f2:ac:75:7f:86:c8:b7:1c:2c:
         aa:c3:da:a4:73:7d:c4:95:fa:e2:2b:ac:de:55:2f:63:a5:d0:
         bc:a8:1e:f3:46:47:8a:53:5a:1d:60:53:2b:23:1a:7e:c3:98:
         19:9a:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:52 2025 by rpki-client