Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
File:                     TvYP_RC7937OmKeBY1mERCd9v6Q.mft (raw, json)
Hash identifier:          6eSC5ZytWJoT8bYwSSMoSgMmvVhF63A+yJSsqWeJfC4=
Subject key identifier:   1D:C7:CB:3F:75:4B:68:7F:61:3A:D7:2C:29:BF:C4:39:EE:DF:CF:AB
Authority key identifier: 4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4
Certificate issuer:       /CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
Certificate serial:       0199FBEBC24453293FFD67B26E4492F59A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 10:02:35 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:35 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:35 +0000
Files and hashes:         1: TvYP_RC7937OmKeBY1mERCd9v6Q.crl (hash: R56xVE1oOkW6honrFF+a/pxh8h14senD5wkFQT20sQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:c2:44:53:29:3f:fd:67:b2:6e:44:92:f5:9a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef60ffd10bbf77ece98a78163598444277dbfa4
        Validity
            Not Before: Oct 19 10:02:35 2025 GMT
            Not After : Oct 20 10:02:35 2025 GMT
        Subject: CN=1dc7cb3f754b687f613ad72c29bfc439eedfcfab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:44:45:e3:5e:da:41:d6:3b:8c:ea:bd:ca:
                    77:52:af:23:57:f9:cb:a9:cb:61:67:1d:62:fc:4d:
                    83:33:46:dc:e4:f4:13:af:71:7c:87:6d:06:be:2e:
                    f9:95:2c:94:0c:cc:34:81:55:71:07:04:e4:90:65:
                    5d:0e:1d:e9:23:cb:a1:eb:68:6c:dc:8a:65:ed:b3:
                    8b:de:d2:a8:00:78:cd:a9:83:be:6c:8d:2b:87:36:
                    16:cb:7b:fe:1d:1e:74:bc:7b:bc:d0:c5:d0:78:e5:
                    75:ff:5f:8c:19:5f:e5:50:09:48:6a:ff:e1:46:db:
                    de:76:ea:60:2e:65:80:2f:72:8f:37:c4:c8:d7:2f:
                    47:7f:36:cf:7b:3b:db:ae:6e:2a:aa:cf:a1:b7:52:
                    57:72:67:4e:29:34:50:d1:40:5f:74:ca:de:34:90:
                    f0:33:a8:47:ab:d4:a3:17:4a:d2:ee:29:2b:55:97:
                    b7:3a:86:ff:ec:48:c7:37:e0:77:be:7d:66:35:d2:
                    ea:d4:2d:9f:ff:39:69:91:2f:8a:5c:03:9a:d3:37:
                    0f:cc:c1:5d:02:89:8f:00:07:c3:be:b8:c7:39:ff:
                    22:f1:dd:1d:27:95:23:24:55:59:89:9a:7f:b6:c1:
                    9b:85:ac:8f:82:87:33:69:bf:0d:04:58:4d:a4:18:
                    38:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C7:CB:3F:75:4B:68:7F:61:3A:D7:2C:29:BF:C4:39:EE:DF:CF:AB
            X509v3 Authority Key Identifier:
                keyid:4E:F6:0F:FD:10:BB:F7:7E:CE:98:A7:81:63:59:84:44:27:7D:BF:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvYP_RC7937OmKeBY1mERCd9v6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/639e5f-0797-4473-aeff-52f5753fc3be/1/TvYP_RC7937OmKeBY1mERCd9v6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fb:af:1d:10:cc:a7:16:67:f6:3b:0b:e2:b8:ed:fe:08:ec:
         b5:9c:2d:f4:85:55:e5:3c:d4:ec:9a:e5:1d:31:ab:bb:6a:13:
         28:d4:3e:84:03:5e:47:4b:dd:71:bb:c6:1e:50:c4:fe:5d:58:
         3f:72:03:71:a5:de:ee:9c:0a:f8:f0:ec:29:9d:1c:da:20:9e:
         f1:3d:a2:87:6e:24:5c:d1:7e:72:ab:88:d2:25:a2:20:b2:d3:
         ed:df:5e:62:58:9b:2e:3d:c8:c9:f1:aa:fe:b0:25:e3:0d:11:
         19:37:ca:3c:d8:9c:d3:5e:e0:29:76:37:c3:63:15:24:df:7d:
         ff:fd:83:dc:b9:e7:c7:00:e1:0a:e2:64:ec:92:67:37:cd:00:
         84:37:35:8a:bf:3a:ef:cc:58:29:72:a4:1d:ea:3c:33:7d:fe:
         45:bf:60:47:94:7e:8f:ec:5a:f1:ea:b9:8c:bc:75:69:12:6c:
         44:a1:29:77:6a:99:b0:c7:45:6d:54:5d:b5:d0:45:34:80:9e:
         4e:db:a6:86:44:b2:ed:39:2e:64:b2:da:9f:af:6d:a4:68:ea:
         06:a1:eb:19:f9:f7:a5:93:d0:64:4d:26:db:c3:59:18:06:33:
         00:2d:fb:06:60:3b:bd:1a:ea:b1:db:b2:fc:14:f3:71:1b:b6:
         6c:c0:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:53 2025 by rpki-client