Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
File:                     adEXVt0Db1nuEef4Gkh6b90jE20.mft (raw, json)
Hash identifier:          Bugp2O6pqWfnyyMyZWOD+BwZVpYAibYvsX40omLfklo=
Subject key identifier:   1C:97:5C:71:E8:B4:67:61:DF:38:63:71:C9:C4:31:43:3D:6D:A1:EF
Authority key identifier: 69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D
Certificate issuer:       /CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
Certificate serial:       019A4EF4446AD5B2D1FBF48DE8F6BBA6160A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
Manifest number:          091F
Signing time:             Tue 04 Nov 2025 13:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:22 +0000
Files and hashes:         1: adEXVt0Db1nuEef4Gkh6b90jE20.crl (hash: RHZPsp+In9M0XkXoD5e2lhWvPbSTbY+yjRhSNy5tRHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:44:6a:d5:b2:d1:fb:f4:8d:e8:f6:bb:a6:16:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d11756dd036f59ee11e7f81a487a6fdd23136d
        Validity
            Not Before: Nov  4 13:00:22 2025 GMT
            Not After : Nov  5 13:00:22 2025 GMT
        Subject: CN=1c975c71e8b46761df386371c9c431433d6da1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:d8:da:f8:10:22:c4:48:6c:44:32:2f:bb:
                    e5:e1:f7:32:fd:41:31:d6:53:c3:05:16:ee:c0:9c:
                    e4:56:2a:88:8d:fc:b2:60:1f:1b:ac:37:9d:3c:3e:
                    3c:3c:95:9a:ac:35:b8:bf:3c:35:18:93:cb:92:d6:
                    cd:e9:33:ba:1b:e4:70:57:95:59:cf:05:12:de:28:
                    4b:1a:01:93:8b:ab:6b:3e:6c:20:59:d4:15:f8:f2:
                    af:34:ac:1f:73:ce:1d:c0:23:0f:88:2a:87:8c:6d:
                    52:1e:d3:57:93:3e:11:03:5c:21:f9:6a:b4:79:ce:
                    76:f2:5f:c8:b7:c7:8e:25:b5:56:e3:a3:0e:6a:4f:
                    a2:1c:a2:a4:e1:c0:df:db:a5:6f:4f:d7:c2:a0:7f:
                    1f:23:cc:45:ae:84:3d:48:80:19:f3:71:45:47:d8:
                    87:23:95:d1:07:d6:78:d5:3c:f3:8a:c5:e4:ce:83:
                    80:af:d9:cf:84:6a:ea:47:1e:6c:aa:29:92:d7:2a:
                    de:66:69:8c:ac:8b:f2:c6:8b:78:26:2a:42:0d:22:
                    71:b1:ce:00:1c:b6:df:6c:c3:33:34:cb:16:69:d8:
                    16:11:75:d7:de:88:74:00:fe:1b:88:f8:9b:4f:98:
                    5e:54:32:09:4b:77:98:cc:e2:e8:50:9a:b8:0a:30:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:97:5C:71:E8:B4:67:61:DF:38:63:71:C9:C4:31:43:3D:6D:A1:EF
            X509v3 Authority Key Identifier:
                keyid:69:D1:17:56:DD:03:6F:59:EE:11:E7:F8:1A:48:7A:6F:DD:23:13:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adEXVt0Db1nuEef4Gkh6b90jE20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/4fe287-0987-420b-a855-cfb4729c8994/1/adEXVt0Db1nuEef4Gkh6b90jE20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:3e:fb:66:d0:29:0f:4b:0f:3b:55:8f:b1:c9:88:01:ba:6a:
         c7:35:7d:d8:39:d5:95:c1:71:15:57:af:4d:8f:23:03:24:49:
         91:25:bf:a8:78:c6:88:70:82:cc:55:a6:89:c8:ca:31:c9:14:
         7b:1f:59:0e:31:90:af:8e:1e:45:b3:b2:b9:a5:f9:f4:78:7e:
         ac:95:22:31:f5:7c:35:9e:7a:01:1b:69:c8:64:6b:60:ca:64:
         f7:aa:83:15:ab:a9:72:b5:56:fd:17:40:08:af:4c:da:93:49:
         bc:b6:80:3f:09:a2:f5:88:32:8e:1d:26:1e:53:a7:71:b3:21:
         d9:3d:21:35:a8:cc:a4:28:b9:d2:02:94:a3:58:67:32:79:26:
         0c:3c:ea:b0:e3:cb:cc:68:e0:c0:34:e0:44:b4:98:ce:89:d7:
         9e:0a:c9:77:e2:c3:e6:ec:be:b0:45:7f:65:89:d5:f7:7e:3f:
         a6:8d:14:8d:79:05:46:3b:f0:4d:53:bd:3c:23:f4:f2:1c:9d:
         9d:cb:bd:aa:ac:1f:77:c9:60:a5:c5:6b:66:fe:0c:8f:f2:25:
         06:57:b3:43:18:35:dd:e2:89:8d:6f:36:83:00:4b:19:30:fb:
         41:d9:0a:55:33:52:e7:f7:80:df:96:45:49:b8:15:2e:35:46:
         51:5c:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:36 2025 by rpki-client