Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
File:                     nR_TKOt-elrN5RmPDX6b4mhHbXE.mft (raw, json)
Hash identifier:          F9jopMli8KrAb+2Bx6fNNGk61Coebn1mPujUczioyBk=
Subject key identifier:   6E:AD:AD:D1:96:C8:7B:E3:EB:CA:5F:32:7F:DA:4B:01:2A:86:60:84
Authority key identifier: 9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71
Certificate issuer:       /CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
Certificate serial:       0199FAA0C6007AA2248515D350E838907354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
Manifest number:          1189
Signing time:             Sun 19 Oct 2025 04:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:04 +0000
Files and hashes:         1: nR_TKOt-elrN5RmPDX6b4mhHbXE.crl (hash: iQYfPCQtlDrNtZ19QQgPh9D8aZsL3JsD+dK0gy5ZB/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:c6:00:7a:a2:24:85:15:d3:50:e8:38:90:73:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d1fd328eb7e7a5acde5198f0d7e9be268476d71
        Validity
            Not Before: Oct 19 04:01:04 2025 GMT
            Not After : Oct 20 04:01:04 2025 GMT
        Subject: CN=6eadadd196c87be3ebca5f327fda4b012a866084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c3:5f:76:1e:a4:8a:ab:80:50:3e:65:7f:bf:
                    72:35:0b:9d:a9:aa:fb:a6:fd:e3:43:95:43:93:2e:
                    27:7f:9e:fe:e7:3c:e5:4b:77:3e:a2:4c:52:95:0e:
                    88:77:e9:c8:4c:b2:7d:8e:34:0d:dc:b5:72:1b:59:
                    1b:9e:a9:89:42:ce:a9:32:cd:68:15:e6:c2:61:53:
                    c4:52:9d:71:10:29:e1:78:17:31:ff:0f:1c:93:38:
                    e2:32:9a:7c:1b:0f:8a:d7:03:2e:3e:7c:2c:8f:8f:
                    a2:3b:86:59:db:10:a8:de:84:87:5a:69:ee:ff:6e:
                    fb:37:64:b8:a6:16:ea:88:c3:1a:80:08:92:25:6b:
                    4f:49:91:d1:78:c1:0b:a8:b4:c3:16:94:bc:2b:af:
                    7c:a8:49:4b:12:b7:6a:00:fe:e2:f8:1e:58:83:4b:
                    1a:a4:72:05:2a:43:15:07:66:48:06:7a:06:89:67:
                    a7:b1:46:bf:01:74:f9:28:fe:c9:8c:88:c5:25:ac:
                    f4:e6:3a:17:ce:92:b6:95:2a:00:77:cf:05:10:13:
                    6c:9c:c4:f8:37:f6:4f:00:27:82:83:50:0b:16:cc:
                    9e:74:54:69:c6:f6:e0:b1:69:2a:d5:e0:bd:4f:4e:
                    6b:0c:1f:38:8d:69:0b:22:88:d4:55:54:ef:ee:cd:
                    2d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AD:AD:D1:96:C8:7B:E3:EB:CA:5F:32:7F:DA:4B:01:2A:86:60:84
            X509v3 Authority Key Identifier:
                keyid:9D:1F:D3:28:EB:7E:7A:5A:CD:E5:19:8F:0D:7E:9B:E2:68:47:6D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nR_TKOt-elrN5RmPDX6b4mhHbXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0c3d1b-fc23-41fb-af9c-a163f573b6d9/1/nR_TKOt-elrN5RmPDX6b4mhHbXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:8d:bf:36:44:05:f8:7c:59:27:4c:9e:ca:bd:da:27:2d:
         98:fb:2a:41:04:e6:ef:19:44:a1:1e:77:17:28:32:f9:e4:4f:
         77:2a:f5:2a:ea:4a:0a:67:62:4c:e7:aa:a0:67:47:ea:70:5f:
         c5:2c:f7:e0:ab:d3:be:f5:b9:67:0d:f8:30:2e:61:e1:ac:e4:
         41:fe:89:5e:aa:f5:f5:43:c5:d1:1a:80:1b:ec:1a:bd:6a:49:
         a2:e6:69:4f:de:c5:a7:c2:3d:c2:6d:3a:7d:80:09:a2:27:a5:
         56:b5:e1:b5:fe:72:65:b2:66:0a:70:64:91:63:77:6b:e8:f2:
         ae:bb:8e:3a:da:cc:38:1c:34:4d:50:92:52:22:92:b5:97:b7:
         5f:57:71:33:01:f0:e5:0b:14:db:3e:9b:aa:a4:7f:67:67:ae:
         77:b2:33:4e:9e:1e:3d:f8:d1:51:80:78:54:bc:8b:a5:98:ae:
         15:0e:c7:28:cd:0f:b1:99:b0:ba:25:6b:9f:27:12:10:83:a0:
         e7:ea:fc:b5:0f:ed:85:44:c8:95:fd:2c:19:c2:fe:4a:62:6f:
         1d:51:c0:5d:34:27:c5:3d:3a:cb:da:79:59:85:3f:ee:a3:c2:
         d5:53:e2:ba:19:e5:10:b7:f4:37:81:51:0f:23:de:64:e5:19:
         d1:39:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:50 2025 by rpki-client