Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File:                     DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier:          aQV4/EfievMX0QlpfYOalu39w/yMmHbx9V4inP046QM=
Subject key identifier:   92:D4:5A:11:6D:40:30:62:1F:51:A9:DF:FF:B2:C0:D6:C5:8D:E7:89
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer:       /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial:       0199FDD923F5925B0909EA3861E350D5561D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 19:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:30 +0000
Files and hashes:         1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: j9cnslWdVj/Fq1LacUQyqKS3pybXkwws63ZHWafZyf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:23:f5:92:5b:09:09:ea:38:61:e3:50:d5:56:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
        Validity
            Not Before: Oct 19 19:01:30 2025 GMT
            Not After : Oct 20 19:01:30 2025 GMT
        Subject: CN=92d45a116d4030621f51a9dfffb2c0d6c58de789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cd:5d:22:55:46:94:97:8d:ad:63:52:c2:55:
                    17:e7:54:3c:fb:fc:36:09:ed:77:71:fd:df:a7:9f:
                    11:ea:8a:ef:a4:7c:0e:5c:b9:3a:d1:a7:c3:00:2c:
                    a4:e1:37:18:ac:f9:97:cf:e4:10:a4:10:87:4e:f6:
                    70:e8:01:bb:fb:c5:b0:e5:d9:b6:87:cd:0a:94:c1:
                    f2:94:01:91:ca:36:fd:28:36:6c:51:78:2e:53:de:
                    1d:9f:f4:7e:ca:f7:61:23:93:22:b6:87:fe:1e:e5:
                    d0:e2:73:16:33:cc:64:1f:1c:9a:d8:fc:3b:1a:ef:
                    77:76:e5:fd:66:df:3b:79:45:f3:57:bd:e8:87:5d:
                    9d:57:e1:c7:96:0b:2d:61:45:7a:4c:e3:36:5d:be:
                    a7:d8:ab:9d:59:b8:8b:dc:6d:0f:22:ed:cc:f5:bc:
                    36:1c:60:ee:34:1d:d3:42:9e:f9:43:3d:74:1f:8d:
                    c2:99:ef:90:e4:24:a7:9b:32:e6:db:60:07:99:1d:
                    a2:08:36:2f:a0:53:bb:b2:70:bd:39:63:7c:ec:24:
                    df:e7:a3:e7:11:ef:73:a5:8a:de:22:a8:89:c2:8a:
                    ee:36:67:54:c2:d1:36:33:37:c6:a0:6b:d3:44:d5:
                    56:cf:59:2e:41:82:0b:c2:23:fb:f1:99:14:c0:c3:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D4:5A:11:6D:40:30:62:1F:51:A9:DF:FF:B2:C0:D6:C5:8D:E7:89
            X509v3 Authority Key Identifier:
                keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6b:a4:bc:a9:e5:59:6f:10:bf:8a:4e:51:1f:f7:8f:4d:91:
         31:e4:9b:2d:a7:9b:8b:0a:cb:db:9c:00:70:69:71:2d:06:35:
         1c:bc:02:5a:c4:f5:26:f8:ea:06:96:53:d6:62:b0:7b:f6:78:
         41:68:ed:79:62:4f:35:30:5a:0d:cb:ae:1a:83:ce:f8:8b:58:
         08:d9:52:c1:fb:06:60:e3:b8:a2:ea:78:89:41:43:01:12:f8:
         08:92:ba:2b:98:82:6c:a7:cf:d5:5d:5c:f8:b0:97:e8:f7:ee:
         66:85:eb:5d:c8:8f:e0:7b:fc:39:c8:fc:b9:7e:84:e6:08:28:
         71:96:19:50:17:28:b4:b6:8c:30:d1:da:d0:89:c7:c6:41:88:
         af:c2:e6:d3:1b:05:13:6b:1d:83:63:08:15:ba:7d:a9:56:07:
         29:d7:6d:5e:b0:c1:fa:97:d7:8c:8a:f2:82:7c:96:85:68:46:
         01:54:72:d1:69:d1:be:27:71:d9:3a:94:6d:18:a9:a2:31:61:
         f2:77:f5:1b:e2:5c:7c:d5:15:30:df:20:91:e2:fa:ba:9b:c4:
         57:71:0e:7c:6e:5a:cd:96:76:e7:02:da:30:c6:f8:aa:4f:2d:
         2d:92:5a:87:5e:2a:6e:29:16:98:d6:70:ad:4c:b3:ad:d9:ef:
         93:85:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:16 2025 by rpki-client