Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File:                     rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier:          jPdvPBPG/Srno8fJz7jPTA01X9x9cNR8DPzT5SbNBnc=
Subject key identifier:   AD:E8:47:23:68:C5:50:16:3D:D1:C0:D5:2B:18:8C:08:5F:E4:32:50
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer:       /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial:       0199FCC69EA59B898EDF1DEA074125F8FF46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number:          1373
Signing time:             Sun 19 Oct 2025 14:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:39 +0000
Files and hashes:         1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: kas1zWusyWbIqA6mRdK0i6nPdI8II8pZLqQZDmISi/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:9e:a5:9b:89:8e:df:1d:ea:07:41:25:f8:ff:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
        Validity
            Not Before: Oct 19 14:01:39 2025 GMT
            Not After : Oct 20 14:01:39 2025 GMT
        Subject: CN=ade8472368c550163dd1c0d52b188c085fe43250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:a6:1b:a1:a5:d5:61:bf:64:72:69:eb:9d:
                    9d:1c:66:96:e6:39:e7:b0:02:87:94:2f:c9:71:51:
                    ca:da:9b:b6:7e:d0:59:f7:fa:f9:24:09:ac:11:d6:
                    4d:34:7a:02:45:3c:f5:be:2e:8f:8d:47:cf:5f:e4:
                    81:bc:e5:c1:f5:a1:b5:41:7a:04:1b:72:3e:e1:56:
                    02:16:19:d8:11:52:72:c9:44:ef:32:5b:a1:05:5a:
                    c3:6c:1b:19:04:91:06:60:f0:56:da:d4:af:1d:d8:
                    09:ea:4f:e3:fb:13:a6:c3:e2:6f:07:d7:43:e0:7e:
                    ca:a5:20:c5:bd:bf:77:f4:32:6b:4b:ce:0f:2f:e9:
                    8c:6c:e7:72:dd:5d:98:dd:29:4a:0c:53:88:1d:a6:
                    d1:20:a1:8a:1a:40:c1:31:f1:29:94:fd:09:40:b7:
                    cf:f8:b3:09:13:2b:67:ef:d0:0c:a5:2c:ef:1d:99:
                    de:d1:5f:6f:41:9b:0c:8e:85:92:5d:b3:29:6d:17:
                    6a:ef:44:b0:e9:3d:0c:15:83:e7:1a:be:84:33:32:
                    a3:43:be:ea:ac:1b:c1:ad:58:2e:4d:9f:cf:62:b7:
                    00:49:41:c6:13:1d:16:cf:43:5f:84:23:e0:85:df:
                    21:f3:72:1d:c6:b0:cf:61:c5:5f:93:a2:83:b7:d3:
                    9f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E8:47:23:68:C5:50:16:3D:D1:C0:D5:2B:18:8C:08:5F:E4:32:50
            X509v3 Authority Key Identifier:
                keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:2f:71:c0:44:26:f5:6b:70:25:0b:bf:6c:31:67:ef:a4:
         ef:9e:fb:86:43:b5:8d:52:ce:12:93:00:99:ac:7f:78:2e:95:
         9b:85:9a:2e:c0:78:e0:d2:0f:32:8d:80:a7:9c:2c:dd:45:5b:
         34:2d:1a:1a:e9:f8:68:cf:84:68:de:7f:43:5b:ab:b9:5f:df:
         a1:4b:d3:98:47:e8:e5:cb:fd:50:09:32:24:b3:c8:e1:2b:fa:
         c0:20:0a:5d:e1:ff:f8:27:7b:1a:48:0e:d0:4e:55:c9:e7:7e:
         79:28:8c:f1:6d:a6:ec:8d:f9:9d:62:87:85:0b:e9:78:6a:10:
         84:34:33:73:7c:b1:b6:65:58:b7:43:4c:41:02:b8:3a:6d:81:
         a2:d3:a4:71:7c:61:fd:d1:2e:1e:77:88:2c:41:11:27:fd:48:
         6d:d0:2f:ff:9a:67:eb:95:7a:45:a6:11:5a:62:3b:bf:87:60:
         1b:46:83:e6:08:82:a5:dc:f6:da:23:71:7b:56:10:97:cf:45:
         69:4f:85:b2:32:b3:e1:8b:2f:89:60:8f:1d:28:b1:08:7b:22:
         88:8f:88:22:8b:b1:e3:2c:9c:d8:2b:7b:36:1c:84:97:7d:9b:
         7d:13:e8:d0:e7:68:d9:cf:74:14:32:72:74:f6:af:22:74:b8:
         80:fc:14:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:50 2025 by rpki-client