Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File:                     Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier:          TKdHY25MRGBJMXTnlRHRkOxMY2hkhSmlWAzkg6T9ib4=
Subject key identifier:   05:71:AB:D5:8B:11:5F:B8:39:E5:CF:AA:7E:67:61:4D:86:D9:29:F4
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer:       /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial:       0199FFC776EA93C9518C259427F27CE72121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number:          16E0
Signing time:             Mon 20 Oct 2025 04:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:26 +0000
Files and hashes:         1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: 1405jQNc715yC8Ala336kFvrQTbgXl25T7Zxk4VXD0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:76:ea:93:c9:51:8c:25:94:27:f2:7c:e7:21:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
        Validity
            Not Before: Oct 20 04:01:26 2025 GMT
            Not After : Oct 21 04:01:26 2025 GMT
        Subject: CN=0571abd58b115fb839e5cfaa7e67614d86d929f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:74:c3:03:4d:d1:0e:fc:77:ea:ba:cd:49:c6:
                    06:fd:13:91:93:d9:60:de:65:df:bf:b2:fe:13:76:
                    bf:6b:c7:9b:92:33:26:0b:65:7c:0b:77:cc:1f:f2:
                    2f:d5:78:6b:09:f6:eb:f2:14:c4:24:4a:81:81:1b:
                    ac:4f:32:7d:b9:cd:dd:f9:07:fd:c8:30:19:36:19:
                    39:2f:12:da:0b:47:26:5c:3b:91:7b:ef:22:95:c3:
                    16:28:e9:69:d8:bd:cc:38:59:02:9a:93:64:f7:5a:
                    93:4b:8f:e5:71:e8:35:7a:33:40:01:c3:3e:7e:c3:
                    f9:0e:87:19:c8:c8:26:b5:0a:4d:1c:2d:81:cf:c4:
                    a8:3c:29:9e:fd:77:15:78:ef:fe:6f:3d:6e:b5:6f:
                    09:ae:cc:dc:4e:03:03:d0:a1:16:d2:cd:80:15:ce:
                    14:b6:8c:5c:9d:c6:2b:54:fe:4e:cd:06:16:08:16:
                    e1:59:84:36:93:b2:16:8c:37:5f:66:2f:de:79:60:
                    55:83:4f:6e:07:05:c2:58:9c:05:25:cf:db:02:15:
                    90:37:07:65:09:40:c0:1d:12:82:65:5e:09:d3:f7:
                    11:57:a5:75:d4:c9:1d:15:a5:af:0b:87:5f:00:f0:
                    81:bb:66:b6:50:1f:ab:80:af:32:d6:ba:1d:8e:39:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:71:AB:D5:8B:11:5F:B8:39:E5:CF:AA:7E:67:61:4D:86:D9:29:F4
            X509v3 Authority Key Identifier:
                keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:2e:46:ac:c5:09:da:cf:e6:23:5b:82:3f:dd:4b:5d:e9:ee:
         35:50:38:77:da:c4:ab:e1:30:97:b0:33:8d:f3:ba:5d:6c:21:
         93:51:77:a4:a9:e1:1e:29:60:83:89:ce:7f:35:f5:a3:a6:55:
         e9:fb:92:85:69:e8:3a:6f:08:9d:58:e4:da:1b:c4:95:e5:99:
         8d:2f:ab:91:95:ca:d6:34:ee:87:ad:23:4e:f1:3e:b4:55:7f:
         aa:cd:21:70:47:7a:fe:c8:8f:fc:bd:ea:de:f3:d4:eb:20:96:
         b6:77:b1:8a:d7:29:38:27:76:d1:ad:45:41:27:d4:5e:c9:42:
         fb:83:64:9b:2a:ff:60:71:5a:73:e7:85:91:25:be:c8:ad:57:
         1a:4e:d8:d8:b8:98:52:27:2f:66:c2:0e:5b:0b:9b:87:71:88:
         43:1b:1a:55:e2:c3:4e:5f:c3:d2:47:45:7e:bd:69:81:2d:a9:
         b5:8f:dd:69:88:a5:eb:4b:36:79:c7:15:ab:76:7b:36:9a:c9:
         ef:e8:8f:ea:ac:da:41:87:0a:06:5a:59:41:44:d0:7f:dc:e3:
         5f:e6:5b:e5:ae:77:7c:5c:e7:f2:73:8e:70:0d:6d:ec:0c:81:
         fa:c2:ee:e4:9d:f6:08:89:a1:91:0f:bf:f8:d4:8b:a8:c0:11:
         d8:ac:37:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:30:22 2025 by rpki-client