Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
File:                     _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json)
Hash identifier:          sqiv0Dg8t48f7pfBFnahk26OxVlwidzw2R2nY6IPU8A=
Subject key identifier:   57:F3:15:D9:3D:FD:1D:F3:64:E7:6C:2C:8E:CB:FE:B7:9D:94:5C:EF
Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55
Certificate issuer:       /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
Certificate serial:       0199FEB46CADB5E70F505C1B43359FB5E390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
Manifest number:          0262
Signing time:             Sun 19 Oct 2025 23:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:01 +0000
Files and hashes:         1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: m2XB2sj7AFqhw6fbK7uR9532jgie9hWuihQfDKLzLJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:6c:ad:b5:e7:0f:50:5c:1b:43:35:9f:b5:e3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455
        Validity
            Not Before: Oct 19 23:01:01 2025 GMT
            Not After : Oct 20 23:01:01 2025 GMT
        Subject: CN=57f315d93dfd1df364e76c2c8ecbfeb79d945cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:3b:9b:59:90:9a:73:fc:0c:75:ec:c9:d1:
                    26:00:02:4e:10:85:7f:fb:1e:a6:f8:0f:eb:2d:d3:
                    ce:2c:25:62:1d:b5:cb:60:4d:41:02:8a:18:02:00:
                    30:2e:2d:7c:82:05:a6:97:a9:5d:b5:e1:ae:c1:6f:
                    a9:74:d4:da:91:73:a4:23:af:2a:97:e5:e0:ff:18:
                    0b:11:46:73:ee:11:0c:e5:f4:0a:0c:67:91:a6:62:
                    10:4a:2e:1d:24:52:84:9e:b8:7a:23:b9:97:85:ed:
                    09:12:78:d8:f5:c4:e6:d7:f9:64:b9:93:49:66:3f:
                    60:fe:eb:f3:09:61:46:37:21:63:c6:67:da:6d:99:
                    14:c7:9b:de:e8:39:99:68:7c:bb:d8:7c:35:6f:97:
                    4f:e9:30:cd:d5:bf:9d:c4:9c:67:98:36:f0:f8:ec:
                    be:26:e4:ae:9f:0b:f4:15:30:a3:83:4d:75:b4:ab:
                    2f:91:05:12:ab:43:96:7d:63:49:e5:7f:4e:d9:ea:
                    c8:59:f7:3a:02:e8:63:e3:12:d7:f7:99:ca:9d:c1:
                    5f:63:29:de:66:14:25:f6:fd:0b:0a:78:af:2c:c1:
                    c4:1b:e9:45:6d:e3:93:1d:15:61:fc:3b:0f:d3:88:
                    1b:b5:81:07:9a:13:b7:c1:17:38:bf:88:e0:d7:ba:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F3:15:D9:3D:FD:1D:F3:64:E7:6C:2C:8E:CB:FE:B7:9D:94:5C:EF
            X509v3 Authority Key Identifier:
                keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:63:2a:59:d4:ab:a7:da:a7:e5:07:9e:ac:17:ac:16:c1:9e:
         af:1f:59:82:35:99:9a:bb:7d:70:67:f7:4a:46:1c:06:32:b7:
         46:82:6e:7c:c4:23:91:65:28:86:49:18:39:e0:f3:a8:8c:5a:
         17:db:9e:e2:7f:f7:cc:dd:59:9d:14:54:97:0f:79:01:92:a6:
         a5:1c:f4:78:be:3c:75:33:2a:03:1f:95:37:40:27:f3:23:17:
         bb:3b:5e:ff:2d:38:e7:f7:aa:c0:48:27:75:88:17:25:91:ab:
         6f:e7:1f:e3:8e:eb:e2:08:8d:bf:8e:6e:ab:e8:51:16:9c:ad:
         4a:00:b0:60:cc:5e:9c:bb:40:d6:32:47:cd:47:d2:6c:d4:87:
         5b:73:51:d6:0a:ad:e1:bf:5b:e5:9b:d6:4a:ee:26:af:3a:3f:
         25:eb:75:3f:82:0b:0d:00:b5:46:04:f2:91:aa:e2:0c:e8:f8:
         57:f4:7b:f5:82:66:2f:d5:53:57:7b:9d:26:9b:d6:b9:29:7a:
         27:b0:99:e8:ec:46:af:97:51:f6:b4:dd:2b:b8:32:5f:eb:c8:
         47:97:20:3e:32:d6:16:d1:b8:bb:8a:65:8d:33:53:cf:45:2e:
         d4:0b:41:af:fc:58:72:e6:d0:96:9d:1e:1f:a7:4d:06:2f:0b:
         c5:a8:44:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:09 2025 by rpki-client