Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File:                     96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier:          uRDrWXao7aBUUP4OpJ5ZVDA8ftjcqjknc6cCM6oS7yk=
Subject key identifier:   FE:03:ED:06:D3:15:D3:52:3E:AC:05:8A:31:11:47:24:9E:4E:09:09
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer:       /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial:       0199FFC7AFD64DBDBAB5B073E82160689F7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number:          015D
Signing time:             Mon 20 Oct 2025 04:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:40 +0000
Files and hashes:         1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: 1PlAmutYssYFmAJB/9YuZTjtpgFfJ55CK+TK09GWvhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:af:d6:4d:bd:ba:b5:b0:73:e8:21:60:68:9f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
        Validity
            Not Before: Oct 20 04:01:40 2025 GMT
            Not After : Oct 21 04:01:40 2025 GMT
        Subject: CN=fe03ed06d315d3523eac058a311147249e4e0909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:83:23:61:4f:9c:0d:5e:2b:b8:72:5f:fc:
                    ee:19:3b:41:76:cd:75:02:33:ac:54:6b:ab:eb:7e:
                    0f:0a:3c:9b:13:93:52:12:70:c3:1b:35:54:45:1d:
                    4f:9a:6d:30:1b:fc:4e:49:83:3a:af:e0:28:a6:46:
                    8f:3d:c7:de:98:3f:9b:9b:02:7a:53:ea:55:86:0d:
                    a4:b6:38:47:19:c4:2a:3c:75:11:80:2e:f1:f8:6b:
                    3f:7f:13:80:52:b7:cd:8b:65:09:62:4c:17:d1:d3:
                    20:49:9b:52:db:04:58:2a:81:9d:bb:e1:ce:7c:e3:
                    a7:8d:5a:95:2f:ce:b5:0c:55:7f:78:85:8e:2d:7e:
                    48:6a:11:03:6c:22:38:13:e1:56:48:8c:5a:dc:d3:
                    0f:0c:e3:e0:e7:b4:62:5e:37:c3:fa:64:d6:b9:b9:
                    dc:5d:f8:9b:82:ff:7b:0a:19:b5:b9:b0:8a:81:6e:
                    7e:fc:01:27:cb:38:e3:76:a4:28:f1:2d:db:ce:72:
                    6c:d5:6a:c4:a5:a7:4f:37:02:f1:92:2e:b7:c4:c2:
                    45:20:1e:e5:b6:cf:a8:8d:6a:9d:f1:b9:b8:ec:78:
                    59:dc:dd:67:77:29:3e:65:81:73:6d:eb:ad:6e:4b:
                    88:07:ad:54:b1:0b:e8:17:6f:c3:2f:6f:ac:9f:4a:
                    c6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:03:ED:06:D3:15:D3:52:3E:AC:05:8A:31:11:47:24:9E:4E:09:09
            X509v3 Authority Key Identifier:
                keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:69:86:ec:0a:98:98:68:2e:03:97:35:73:76:dd:45:fc:29:
         e5:61:f6:ac:f6:10:99:2f:33:6b:b3:e6:74:5c:63:e9:df:c2:
         d3:6a:43:fb:50:f6:c8:d1:7a:99:e0:9d:ba:0d:23:d6:5e:1a:
         0e:4c:45:4d:68:aa:f6:5d:c4:cc:88:a9:f1:16:38:26:17:3f:
         c4:04:99:4f:c6:f7:77:66:5f:9d:ce:09:73:b0:e9:0e:8f:35:
         88:63:ef:b2:02:d9:78:4b:b8:a6:cc:22:d2:93:89:22:da:ca:
         2b:48:4c:6e:d0:b0:d6:5e:53:42:2c:25:3f:71:cb:c1:27:dc:
         94:7d:42:b1:cf:f2:e9:30:db:5b:19:f1:53:07:8f:b3:cf:6b:
         dd:3d:da:44:20:f7:3a:e2:38:00:6a:e4:3b:3e:8d:22:98:16:
         14:d5:26:28:83:61:de:9b:bc:cd:54:7c:8e:32:6a:06:1e:35:
         2d:4e:38:40:fb:7c:c1:eb:b3:cf:d6:07:2f:1c:ce:73:ba:3e:
         52:6c:49:66:57:08:54:60:9a:21:f3:ce:de:ea:0f:4e:f8:d0:
         46:ab:01:23:8a:d7:cc:aa:91:9a:b8:69:82:39:7b:ff:9d:54:
         b7:4b:df:dc:c3:69:83:95:52:bb:b3:cf:41:20:64:4f:31:9e:
         4e:a2:d5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:23 2025 by rpki-client