Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File:                     mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier:          ojwOjqLdRZqEJFcuoYfVFsXbGfbmhJfflN32m/rOIt8=
Subject key identifier:   24:84:DA:8D:55:1E:C9:39:5C:AB:EC:07:E7:13:2C:D6:B8:D0:42:87
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer:       /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial:       0199FBEB9C87FE9D5DB6765DE07099751BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number:          08B6
Signing time:             Sun 19 Oct 2025 10:02:26 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:26 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:26 +0000
Files and hashes:         1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: oeaELAcWOX6tx32REOV1rfHwZN5M/R11A27eugKyuq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9c:87:fe:9d:5d:b6:76:5d:e0:70:99:75:1b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
        Validity
            Not Before: Oct 19 10:02:26 2025 GMT
            Not After : Oct 20 10:02:26 2025 GMT
        Subject: CN=2484da8d551ec9395cabec07e7132cd6b8d04287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:12:c7:81:51:2e:ba:61:41:3a:16:4e:47:24:
                    ad:4d:eb:95:a6:c1:e2:93:fe:0a:62:6c:77:28:71:
                    54:67:65:be:89:37:1d:16:8b:ff:75:0a:c1:b7:da:
                    70:eb:d1:88:4c:e8:fe:2b:05:5c:78:b6:5e:56:8c:
                    4f:98:84:a4:52:ca:54:28:01:22:c5:a1:1e:97:85:
                    ef:a0:69:1d:61:0b:94:5f:37:6f:f1:7e:d5:c9:ff:
                    f5:1e:c1:19:a6:92:6d:06:4a:34:f9:6c:0c:1b:22:
                    23:b1:d3:df:cd:91:01:bc:44:0f:e3:a6:b8:11:ee:
                    98:8b:98:59:ea:7b:a7:fe:23:e4:96:40:1b:bc:86:
                    9b:b9:87:3d:c9:42:39:22:e0:fb:eb:22:4d:ea:8e:
                    3e:c2:15:ed:68:3a:55:e7:76:56:dc:85:7e:ed:b9:
                    35:87:36:f2:c2:c2:b6:ff:75:5d:53:45:1f:e0:f1:
                    42:37:1c:6d:e2:58:1a:40:16:72:03:ba:15:c4:f9:
                    fc:99:08:c8:db:4a:25:de:58:37:ef:30:85:63:24:
                    4d:a0:e6:3f:6f:9f:c3:e3:fd:5d:48:c5:bb:aa:79:
                    4a:de:9d:fb:8e:e5:4c:dc:d1:38:4c:d7:4b:52:96:
                    15:f5:ea:3b:a7:bd:01:c4:2d:80:c4:5f:b3:3e:af:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:84:DA:8D:55:1E:C9:39:5C:AB:EC:07:E7:13:2C:D6:B8:D0:42:87
            X509v3 Authority Key Identifier:
                keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:15:b4:c1:83:04:1e:5e:e2:f2:f4:09:12:73:55:70:06:a8:
         d9:cb:af:52:76:81:5e:b9:98:84:a2:25:89:98:99:ea:66:77:
         90:ac:cb:30:7c:5d:68:2b:c7:98:05:1a:9d:0b:09:d9:0e:a8:
         f5:ab:a2:7c:47:60:c3:d1:1c:87:ae:db:45:7f:82:b1:77:1d:
         2d:6f:ea:c9:43:13:1a:27:16:10:f0:52:69:d5:db:f9:1c:23:
         b7:ef:0d:94:61:88:11:b5:57:82:81:08:37:bb:42:2d:90:e8:
         8b:6d:b8:11:85:2e:e1:c1:d3:7d:da:f4:c1:b7:3b:4d:79:a4:
         30:c8:e0:e4:f3:55:d3:56:c4:18:fc:68:6a:1a:63:90:b9:bb:
         12:f2:e1:48:fe:c0:13:0b:bc:b6:32:aa:16:9a:05:1a:f8:fc:
         8a:11:66:7d:07:4e:4b:35:48:c7:e9:0e:e3:92:43:e7:28:16:
         53:93:45:10:5c:13:77:bd:76:61:93:e0:6a:76:27:65:df:e0:
         38:a3:d3:08:da:35:f0:3a:4f:ee:f3:28:47:dd:2f:4c:bd:32:
         78:16:58:4a:48:6d:4c:e6:2e:9c:4c:25:78:59:4d:f2:c8:4d:
         5a:6f:be:9f:0a:1a:8a:7d:13:24:57:0d:18:9e:f9:dd:de:ac:
         c6:b9:f2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:31 2025 by rpki-client