Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File:                     syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier:          38ZMBhd3ncYw+BhMuDtDtSFOtlEPb/7F8nSLChV9QHk=
Subject key identifier:   CB:15:93:BE:54:B7:40:78:D6:1C:3A:BD:58:7B:20:70:6D:65:D8:8F
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer:       /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial:       0199FBEB816D428DC9CED0B0D966631D1248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number:          03EB
Signing time:             Sun 19 Oct 2025 10:02:19 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:19 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:19 +0000
Files and hashes:         1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: uxxdJVj7a2tbkqx6u8h0mUlW0q11hJxuRiQoD/bBuUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:81:6d:42:8d:c9:ce:d0:b0:d9:66:63:1d:12:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
        Validity
            Not Before: Oct 19 10:02:19 2025 GMT
            Not After : Oct 20 10:02:19 2025 GMT
        Subject: CN=cb1593be54b74078d61c3abd587b20706d65d88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:ef:5f:68:54:88:c0:40:7c:84:98:f9:42:
                    72:37:d6:9c:d3:76:39:86:c8:b1:d1:d8:3b:24:6f:
                    bf:1c:a7:64:d6:09:40:c7:2b:e3:a1:d6:78:96:93:
                    95:dc:e2:5e:7a:13:a5:c3:7a:24:19:b9:7d:da:7b:
                    f0:cb:1c:87:b5:d5:b8:27:e5:4d:8e:6a:4d:32:05:
                    4c:1d:f7:07:6d:33:3a:9d:54:2e:94:5f:9e:9e:b2:
                    5f:37:42:2d:de:ea:9f:92:fc:29:e2:fc:a5:b5:25:
                    64:79:2d:02:44:4a:80:50:fe:3f:5a:9f:68:5c:ac:
                    d5:83:84:7d:ef:56:2b:85:4d:0f:3e:f0:a9:82:a8:
                    f2:a6:fb:2d:ca:29:e8:ed:5e:f6:40:64:7d:46:3e:
                    e8:06:c6:e7:54:9f:86:6e:7e:b2:e5:86:6e:fa:28:
                    6e:ce:13:2c:6f:17:77:1b:ef:ed:6a:ee:6c:52:8f:
                    93:77:32:4c:66:1f:dc:f5:e9:ee:6e:83:35:1a:96:
                    ab:b8:e8:68:c5:27:15:2b:43:75:eb:96:bf:bd:28:
                    39:7c:a0:ce:46:09:e8:fc:a3:58:bb:85:1b:3f:2e:
                    f9:c3:f1:4e:0f:ea:d1:fe:e9:f7:40:66:e5:46:c4:
                    e7:a8:0d:d0:76:51:72:1c:c9:9b:c9:46:8b:db:56:
                    83:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:15:93:BE:54:B7:40:78:D6:1C:3A:BD:58:7B:20:70:6D:65:D8:8F
            X509v3 Authority Key Identifier:
                keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d2:a6:a8:b0:31:cc:2b:8b:3d:2c:88:ce:38:a4:71:7d:b7:
         8d:ab:de:f2:ea:43:a4:e8:94:cc:e3:68:0f:16:5a:2f:3c:11:
         b8:d7:ba:55:06:e3:db:f1:b6:0b:32:d6:7d:4c:cb:bb:c9:51:
         0d:dc:c2:e9:07:50:96:96:68:2d:e1:12:66:5a:f9:74:cc:04:
         69:19:ad:1b:09:58:0b:85:60:93:63:9c:ad:40:a7:be:59:cc:
         55:9f:9c:0e:94:08:86:0e:43:cc:7f:89:c9:ad:3f:4e:53:a3:
         79:3b:ec:78:9a:cc:e7:c3:d1:4c:19:97:60:c8:43:46:d6:35:
         17:86:60:96:c0:e3:dc:9a:19:fc:77:32:6d:ef:10:1c:16:d7:
         55:a4:62:95:7a:f3:e9:95:e6:b1:fb:5d:e0:3b:e1:f2:8b:06:
         fd:1c:35:d3:3a:20:08:b1:72:0f:71:5e:68:25:14:b4:57:b5:
         e6:e1:7a:f1:1d:14:60:4d:18:4e:05:55:aa:c8:cc:23:2a:a0:
         58:6b:76:e6:95:de:b7:c7:8e:c0:8e:b2:28:e9:ab:69:85:2b:
         66:af:58:43:ed:b9:90:b7:89:31:97:34:e4:87:99:15:40:0a:
         4e:b1:a8:b3:09:3e:40:fd:06:a8:02:80:8c:2c:30:30:96:97:
         e1:4f:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:25 2025 by rpki-client