Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
File:                     bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft (raw, json)
Hash identifier:          NchQ4WHzxs7A2Iw25XTCzkVBFpBAGjYyqt+3brha3t8=
Subject key identifier:   4D:49:19:67:5C:FC:2F:DE:D5:E8:CB:FB:5E:06:04:0D:D5:D6:C1:ED
Authority key identifier: 6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94
Certificate issuer:       /CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
Certificate serial:       0199FBEB056496F38A16108E4684FF5F54AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
Manifest number:          097E
Signing time:             Sun 19 Oct 2025 10:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:47 +0000
Files and hashes:         1: bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl (hash: z/oJar40Pm++S6V9rR6t5PJfdABFAtz0jXwZSeaZhXA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:05:64:96:f3:8a:16:10:8e:46:84:ff:5f:54:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d1578a2e623736a06a5e19d91bd09620d06ad94
        Validity
            Not Before: Oct 19 10:01:47 2025 GMT
            Not After : Oct 20 10:01:47 2025 GMT
        Subject: CN=4d4919675cfc2fded5e8cbfb5e06040dd5d6c1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:31:17:7e:df:4d:62:3d:9c:55:b6:d5:f4:
                    5d:76:6c:f7:7e:cf:19:40:43:80:0e:38:8f:7d:d6:
                    8f:dd:09:ac:ac:af:ed:30:c1:fd:2d:4d:6b:71:44:
                    81:c9:8a:d8:63:f7:e9:e6:d9:73:b4:3a:88:06:71:
                    f3:14:22:f5:96:2a:11:72:92:5b:44:55:b3:6c:b2:
                    0a:8b:ef:5c:14:9a:8c:d0:c5:e2:39:f0:cb:c2:9e:
                    a8:7f:17:69:79:40:3e:28:79:68:c3:14:4b:8c:d0:
                    53:e9:ab:c1:fe:74:49:3f:bd:0d:ef:a1:66:d7:74:
                    a1:70:39:4a:e3:c8:19:cc:d4:2a:1e:48:7f:4f:cc:
                    41:44:66:c0:29:49:4d:9e:59:ac:70:d6:83:19:f6:
                    7e:23:c0:1a:55:69:79:db:58:02:d7:be:e7:8f:59:
                    c6:43:3d:81:19:91:9f:82:45:e9:c3:65:9b:6b:b2:
                    92:b5:da:70:f6:e1:23:59:23:43:ac:a0:3c:eb:ad:
                    8e:91:74:eb:3e:dd:33:81:4f:30:74:34:6a:bf:67:
                    c1:8f:35:49:1d:a7:8f:8f:04:78:93:cc:d3:6c:0b:
                    77:46:09:94:58:f1:5b:b6:43:2a:b0:32:c1:9e:d8:
                    35:30:26:16:60:81:2a:9d:b0:f9:14:88:1e:9f:95:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:19:67:5C:FC:2F:DE:D5:E8:CB:FB:5E:06:04:0D:D5:D6:C1:ED
            X509v3 Authority Key Identifier:
                keyid:6D:15:78:A2:E6:23:73:6A:06:A5:E1:9D:91:BD:09:62:0D:06:AD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/94bf52-7838-4270-a91c-7adbdadc6e86/1/bRV4ouYjc2oGpeGdkb0JYg0GrZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a6:aa:0c:35:99:75:7b:67:2e:64:df:72:8b:7f:6f:48:28:
         4c:4b:73:2f:f8:0c:5c:76:12:3c:0c:43:0d:a0:39:84:82:90:
         fe:64:6d:68:c2:df:8a:59:72:76:02:06:11:54:6a:aa:45:68:
         44:4d:1d:65:3a:c9:64:2e:91:0e:7f:a7:b3:c4:05:78:cf:97:
         08:43:1d:c7:b0:e9:03:0b:2a:9f:16:70:c6:ae:9d:73:55:bb:
         cb:eb:aa:13:95:f1:ab:bb:55:c7:80:74:f9:7c:8a:ea:26:5a:
         e6:98:bb:11:bf:35:6b:a6:a3:b3:10:bb:af:00:80:6f:f9:a8:
         6f:f3:8c:d1:97:fd:77:63:a6:5e:e1:f8:ef:88:8f:f8:c6:3a:
         d9:ea:da:a3:2e:c2:d7:ef:a6:85:2f:29:78:3f:0e:e4:ed:ea:
         cc:e8:3c:fe:81:d4:d6:cd:26:b8:bc:3f:30:02:d6:28:d1:66:
         51:d3:de:c0:db:6f:df:09:a4:f1:92:ca:f1:c3:bc:1f:7f:eb:
         d5:de:b2:24:73:35:97:2c:52:7e:18:d9:52:83:d9:90:02:8c:
         aa:7b:34:49:c4:96:f3:1c:e5:02:1b:11:25:e6:d9:69:98:51:
         eb:8a:3d:59:6f:6a:04:29:1a:a4:d7:4e:19:1d:6b:6d:c9:82:
         77:a3:85:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:34 2025 by rpki-client