Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File:                     4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier:          /Tg2H7MllAsofUczia43Op+gYuQN0O6JmXhPxUeRkRY=
Subject key identifier:   6A:5A:AA:BD:F4:55:A6:27:77:4A:7F:14:00:F5:5A:F5:70:57:13:00
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer:       /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial:       0199FA69CE0470A3AB7CB3AF4A2CF61BD46B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number:          0E62
Signing time:             Sun 19 Oct 2025 03:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:01 +0000
Files and hashes:         1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: G8jpjUEQFCA6hWvq6a2ePy5DQukPe2nx5W4ijwzJoYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:ce:04:70:a3:ab:7c:b3:af:4a:2c:f6:1b:d4:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
        Validity
            Not Before: Oct 19 03:01:01 2025 GMT
            Not After : Oct 20 03:01:01 2025 GMT
        Subject: CN=6a5aaabdf455a627774a7f1400f55af570571300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3b:92:16:9d:01:f3:94:4d:dd:32:41:5e:92:
                    e7:31:1b:8f:4b:24:96:7b:97:76:78:0e:e5:ad:01:
                    ac:73:8f:1d:01:2e:ef:a6:fc:d0:33:b0:80:1d:c3:
                    cb:12:1f:b6:f0:c3:bf:16:2f:71:22:78:08:d5:ed:
                    ec:e5:b4:67:3f:0c:8a:35:ea:81:8f:89:ad:6f:29:
                    52:1d:68:e6:74:1c:07:9e:6e:ba:ef:8b:4c:f1:c4:
                    c9:fc:a7:ec:b9:14:d9:13:6e:ee:af:c8:23:8e:36:
                    05:dd:b2:f8:ab:27:5c:e1:4f:55:e3:a4:80:82:be:
                    9a:b2:98:3a:3d:41:05:37:59:4c:a9:d2:db:60:50:
                    c3:80:cb:9c:c2:67:fe:4e:9c:76:83:c4:f1:13:a0:
                    40:63:97:e3:f3:8d:c1:bd:62:25:68:bd:37:f4:ac:
                    fb:f9:62:3b:c7:39:8f:45:25:d9:af:9c:89:32:8c:
                    a5:72:9a:2a:c6:57:e8:ba:67:fd:82:d5:ba:ba:24:
                    33:86:bb:25:32:fa:dd:7b:15:be:fc:db:28:c5:bd:
                    02:b9:5c:80:b8:0f:21:d7:4f:07:36:b7:e8:22:b7:
                    a6:68:e6:e8:37:05:05:04:7d:14:c6:e1:a2:74:73:
                    cf:95:0f:50:0c:0a:89:48:02:9b:98:78:e7:e1:4f:
                    5f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5A:AA:BD:F4:55:A6:27:77:4A:7F:14:00:F5:5A:F5:70:57:13:00
            X509v3 Authority Key Identifier:
                keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:70:51:b8:9c:20:8c:67:ac:50:c4:a4:ac:0a:e3:3e:a9:1d:
         58:c3:36:ce:5e:d5:7f:40:33:24:2a:83:3f:b3:35:d5:87:31:
         65:ca:ca:af:c1:02:b5:c2:88:8e:05:02:4a:4c:bc:6b:7c:22:
         86:90:20:8f:d0:64:07:b5:db:68:fa:47:28:b1:f3:5b:ce:fe:
         55:1b:ab:de:14:d3:e2:eb:27:42:fb:72:93:e5:32:6e:af:09:
         21:9c:30:c5:76:9e:31:eb:2d:50:36:35:09:d5:84:0d:76:c9:
         67:13:9f:5d:d9:12:9c:ff:41:18:08:07:a0:27:20:c0:80:0c:
         33:db:32:94:66:39:c1:72:ce:b0:af:1f:bf:2b:aa:ba:57:b5:
         a6:20:83:34:f4:2e:00:87:ec:49:4c:18:90:61:43:dc:ec:51:
         0d:26:ac:bb:6e:86:59:c0:83:2c:75:74:53:ba:da:09:ee:56:
         87:69:f7:ba:69:d6:23:b8:53:cd:c8:0d:c3:50:42:6f:7e:00:
         a6:b8:6b:60:98:bc:16:bd:22:40:66:6d:54:71:38:3d:2c:1c:
         be:98:0b:95:75:24:8a:bd:50:bf:db:b6:7e:be:55:be:e7:24:
         e8:9e:f5:7d:73:51:a7:d2:63:e7:3f:6d:26:72:9a:b2:de:5f:
         29:72:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:07 2025 by rpki-client