Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
File:                     2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft (raw, json)
Hash identifier:          gbiqAphvRSQ2A2JWyEBqQ4i0tq6ZbOPcp76og1+C7Jc=
Subject key identifier:   EE:D2:59:BD:B1:F7:12:3A:29:51:25:7C:A4:20:C8:E7:FB:BA:B8:91
Authority key identifier: D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3
Certificate issuer:       /CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
Certificate serial:       0199FBEAED3B1149D2E574FC355A594EDAE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:41 +0000
Files and hashes:         1: 2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl (hash: YV/Nsis7gwsGPDMO9c/3f8PYMj6s2CHO6n87IInqAls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:ed:3b:11:49:d2:e5:74:fc:35:5a:59:4e:da:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d72b033ff6fa38bf236139acdb77a7a0a047a3
        Validity
            Not Before: Oct 19 10:01:41 2025 GMT
            Not After : Oct 20 10:01:41 2025 GMT
        Subject: CN=eed259bdb1f7123a2951257ca420c8e7fbbab891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:48:9d:8a:98:b2:62:2a:3d:c6:00:c3:df:26:
                    5f:42:2e:c2:0d:0e:f2:9d:df:cd:ae:8f:82:d3:71:
                    19:5e:ec:28:cf:ce:d5:10:86:ef:83:31:f2:7f:80:
                    43:29:c8:15:e6:ac:19:86:20:00:a4:e0:47:68:1d:
                    88:8d:fd:a0:54:4b:ba:8c:3d:35:73:00:93:cf:04:
                    8f:3b:49:1f:19:55:58:87:46:39:c1:05:65:76:02:
                    38:76:d1:b3:2a:7f:9d:d3:65:c7:26:06:10:92:68:
                    8d:40:56:88:51:53:61:c2:90:f4:68:6d:00:7e:ba:
                    c8:d0:34:85:7f:8f:e6:ac:04:c9:3b:c1:76:ac:1f:
                    fa:ac:7c:a1:2b:25:4e:1d:95:8e:47:78:a1:d9:af:
                    a3:ab:22:bc:6f:65:9c:6a:d2:39:db:1d:e4:fb:c1:
                    10:aa:ea:e8:58:eb:40:15:01:2c:e9:f6:fd:55:ca:
                    8c:89:2d:38:1b:fb:ec:b9:0e:92:3c:ac:bc:5e:1b:
                    59:d3:c4:b0:e0:1f:22:29:f9:c8:50:1f:f4:b8:b0:
                    52:f3:cb:20:02:39:e4:13:18:b9:ff:42:8a:89:7f:
                    d6:14:c9:df:f7:57:97:a9:0e:28:b1:a0:23:0d:63:
                    d2:34:7a:6c:24:6b:76:78:d0:15:02:d7:ad:85:35:
                    99:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D2:59:BD:B1:F7:12:3A:29:51:25:7C:A4:20:C8:E7:FB:BA:B8:91
            X509v3 Authority Key Identifier:
                keyid:D9:D7:2B:03:3F:F6:FA:38:BF:23:61:39:AC:DB:77:A7:A0:A0:47:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dcrAz_2-ji_I2E5rNt3p6CgR6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4cbaf7-b83b-4798-ab36-f821a5a5cf6a/1/2dcrAz_2-ji_I2E5rNt3p6CgR6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6a:c5:44:49:d9:d4:08:9d:ff:f6:1d:07:34:4a:af:6b:9f:
         79:74:07:ff:4f:30:45:26:bc:0d:fe:ad:fd:ee:d3:0d:1d:c6:
         cf:be:d1:02:fc:d2:0a:52:a6:f8:e1:c3:94:cd:a1:a1:7e:37:
         54:64:12:14:ee:e5:ab:13:ee:15:25:f8:5a:0c:41:37:ea:96:
         df:f0:0c:3f:ea:11:58:8e:8b:40:70:bd:97:9c:69:93:39:69:
         87:5e:b3:48:d9:d1:17:ce:07:d7:b8:40:de:63:3f:e6:a1:87:
         fa:91:ab:3c:1f:d5:9c:0d:29:a4:e1:43:96:05:e0:1f:bd:d0:
         7e:be:ff:74:94:b8:c4:14:fd:17:cc:1c:01:d1:25:06:55:ec:
         b7:80:35:c6:34:e3:31:e8:96:89:02:31:ab:a7:17:7f:d1:2e:
         0e:a5:b2:b0:83:78:88:ec:96:d1:b1:23:b3:32:3a:4e:19:2b:
         f5:82:47:85:39:9f:6a:98:b7:5c:1f:1b:15:d8:02:f6:74:5b:
         c2:ba:dc:72:ee:01:98:f1:43:f5:b0:4a:4f:82:f1:99:93:d9:
         2f:6e:19:fa:13:12:a0:80:53:47:9b:0b:90:11:b2:83:40:85:
         5b:da:de:1e:c0:b3:f2:1d:2d:5e:ea:f0:c0:be:47:84:dd:a4:
         22:00:ea:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:17 2025 by rpki-client