Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File:                     SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier:          x1CjoHq05s4Rjcu2ycPxH/0V1MaWXgqd0HBvFDgHS8E=
Subject key identifier:   06:B6:A9:89:BE:6E:8D:B4:AE:D1:09:0E:AC:89:7C:4D:35:E3:15:CB
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer:       /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial:       0199FBEB008C068AA30CC059E867EA4D79C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number:          0609
Signing time:             Sun 19 Oct 2025 10:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:46 +0000
Files and hashes:         1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: LR53l/m921FYvlfxGsb3RfsEGuusQDEELMXXA62LEgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:00:8c:06:8a:a3:0c:c0:59:e8:67:ea:4d:79:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
        Validity
            Not Before: Oct 19 10:01:46 2025 GMT
            Not After : Oct 20 10:01:46 2025 GMT
        Subject: CN=06b6a989be6e8db4aed1090eac897c4d35e315cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:28:7a:0c:a4:be:64:91:c5:c8:19:40:58:dc:
                    52:8e:97:bf:5e:5b:66:7c:2f:d1:42:8b:a6:79:64:
                    9f:e3:48:d5:bf:f3:c0:3d:11:eb:b9:9c:fb:3b:f9:
                    f0:8d:68:05:51:32:e4:72:4f:a1:1a:79:71:99:81:
                    c8:2b:25:37:db:3f:af:98:1c:4d:67:46:c4:a8:a0:
                    8d:ba:ad:c6:ed:f2:21:1f:f3:b7:10:48:8e:fc:aa:
                    5f:fd:56:29:64:c4:d2:08:c8:4c:3c:ec:80:f2:c2:
                    7e:a0:17:2f:0f:d4:c7:1e:15:98:ed:3b:6a:79:1f:
                    89:e6:6e:85:24:39:38:4c:84:91:e6:2a:75:b4:89:
                    29:65:f3:10:3f:e8:d1:40:ca:27:ec:e8:a8:f4:45:
                    66:f4:b2:f1:59:27:bf:b5:e6:dd:b3:0a:24:a7:38:
                    e8:22:42:83:c7:08:7b:af:b7:5a:59:bf:47:79:0a:
                    44:76:07:49:d5:0c:b3:5c:0b:5f:94:b4:de:7a:1e:
                    ef:38:d8:39:8f:fd:ec:54:04:a8:f5:cf:05:5f:15:
                    52:e8:81:64:ed:55:b7:7f:82:b6:86:60:99:76:13:
                    40:2d:9b:15:b7:55:3e:41:eb:3e:1f:27:f9:e6:01:
                    ea:fa:1b:19:55:17:f1:43:53:e1:55:09:23:74:34:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B6:A9:89:BE:6E:8D:B4:AE:D1:09:0E:AC:89:7C:4D:35:E3:15:CB
            X509v3 Authority Key Identifier:
                keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:45:12:fe:68:81:e2:7e:6a:66:f5:4b:da:48:13:1f:0d:5c:
         58:e7:e4:91:48:ba:38:8d:56:24:85:99:d7:2e:8f:cc:a9:dd:
         95:c5:87:e8:ed:d7:0f:28:3f:8a:c1:af:d9:f5:b0:c0:27:b5:
         19:43:27:58:ac:fa:9c:97:30:3f:cd:35:26:0b:2c:db:8c:ff:
         83:bb:3b:62:e5:c3:96:c6:79:e6:2b:ef:30:75:6d:9a:bf:55:
         5c:cf:30:a5:91:c8:cb:09:3b:c7:3a:14:ab:ee:7e:d0:04:78:
         80:9a:e9:ac:8b:0f:b5:1c:c6:64:9a:7e:1e:90:86:6f:46:fd:
         a3:0a:90:70:97:bb:5e:cf:20:54:67:65:74:0e:b6:1b:17:c7:
         0e:63:e3:be:23:d1:04:f8:93:e2:a6:af:23:c7:58:21:36:a0:
         cb:51:89:3f:2a:74:db:12:64:58:21:0c:dd:51:44:87:f6:99:
         ba:99:32:71:f8:be:bd:22:b8:d5:ba:7f:78:64:7a:3c:87:59:
         6c:e0:15:cd:31:18:65:63:88:2f:29:e9:43:b5:3c:c6:9c:33:
         c2:22:fa:74:9e:a6:d9:49:39:13:6b:6a:2e:94:01:eb:e4:da:
         34:a9:48:21:59:65:dd:fc:0c:10:80:b2:48:46:aa:c9:d9:40:
         7b:5e:73:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:16 2025 by rpki-client