Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File:                     4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier:          7Y1vbAYSPEug2nE/Xj2DEYMcF94feEwqXLwVm4l1SPA=
Subject key identifier:   7E:B6:6C:6A:B9:1B:B6:59:30:1C:37:18:B3:5F:D2:88:EB:13:DA:86
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer:       /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial:       0199FE471084AAEE92FF4A51BF5B68BEF4D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number:          1672
Signing time:             Sun 19 Oct 2025 21:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:33 +0000
Files and hashes:         1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: OKJAJvJjupRltPvMh67aihDYIOfZkvNemot4ARFx4ts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:10:84:aa:ee:92:ff:4a:51:bf:5b:68:be:f4:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
        Validity
            Not Before: Oct 19 21:01:33 2025 GMT
            Not After : Oct 20 21:01:33 2025 GMT
        Subject: CN=7eb66c6ab91bb659301c3718b35fd288eb13da86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:6a:ba:81:8d:6d:ad:27:80:44:1c:61:4e:
                    e1:09:f7:1a:d2:41:3c:5e:91:59:3c:31:ed:a9:a4:
                    83:7b:5e:22:81:90:a0:92:40:42:fa:98:10:66:02:
                    16:4a:db:c7:4a:13:1c:e6:d2:09:26:17:e9:2b:3a:
                    74:21:c8:2a:13:b3:da:ad:a1:a8:f7:75:db:a2:bd:
                    d7:b9:3b:f4:9f:6b:dc:b6:6e:a0:48:bb:70:18:51:
                    2c:c0:95:0f:f5:e4:5b:65:80:d9:96:7e:b2:0a:a1:
                    a5:29:e0:5e:e6:04:4a:64:97:ee:fb:90:4f:0a:17:
                    47:12:97:10:7d:00:05:2f:c2:a3:45:06:cb:db:63:
                    86:fe:fb:44:aa:da:6e:8a:39:91:93:8b:b9:60:ff:
                    7d:f6:d1:9c:55:fe:9b:69:65:02:64:79:b0:9c:9f:
                    e9:e5:0b:03:3d:2d:19:e6:a1:4d:20:99:9d:04:14:
                    0a:9a:b9:3b:79:b4:89:8b:a5:97:a3:e2:74:89:5a:
                    2c:0d:98:da:a5:bc:a9:a4:a4:d7:28:c5:b3:13:4a:
                    67:58:0d:e1:f1:3a:5c:72:91:66:d9:e4:bd:4c:16:
                    0a:08:95:f3:bd:5e:35:03:21:1c:64:98:95:08:ae:
                    7f:41:2d:b8:cc:f6:dd:0b:a4:3f:d9:6b:a1:b2:fd:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B6:6C:6A:B9:1B:B6:59:30:1C:37:18:B3:5F:D2:88:EB:13:DA:86
            X509v3 Authority Key Identifier:
                keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:1f:78:4b:23:bf:a5:05:8e:1b:39:c3:e3:aa:42:d3:86:4c:
         8c:10:79:78:69:76:72:70:54:c4:35:02:60:68:d5:99:86:06:
         83:59:12:b5:74:fd:7a:84:fc:8c:8c:5a:42:73:69:ff:30:69:
         ea:bd:8b:0e:e6:f5:64:7a:ce:26:d2:0b:f6:98:b2:e0:2d:90:
         75:fb:cb:b5:ff:1a:72:47:92:87:13:fc:03:35:81:10:bc:57:
         b2:ca:1c:e1:fd:18:5e:a5:d1:17:50:cb:10:28:44:a3:ba:87:
         63:6f:94:8c:b6:32:e7:98:25:1d:b2:56:aa:7a:32:b4:ac:46:
         55:6a:f0:36:f2:48:ba:32:d5:4c:43:1c:54:3d:5b:47:64:1c:
         97:f6:dc:a2:e6:2b:78:34:3d:68:df:5a:00:c4:ce:2f:28:de:
         96:a3:07:76:ad:e7:3f:19:55:78:63:d6:81:3d:bf:57:4f:88:
         70:e5:ee:cd:6f:33:12:ce:a8:32:e1:a7:6e:e2:98:64:41:0c:
         d5:6f:da:39:30:04:96:dd:22:4c:8d:6e:31:7e:73:ca:a8:bf:
         10:a0:f1:49:2d:f2:2a:af:3e:7d:62:cf:40:3c:b4:85:28:58:
         49:90:83:50:4e:0c:a6:66:4c:3a:70:be:a3:fb:dd:35:9c:0c:
         ee:5a:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:18 2025 by rpki-client