Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
File:                     cV2dGCxjrtg5f743LjYA9D2-62o.mft (raw, json)
Hash identifier:          5Rs34rV/QTaaTtNnlPR8cZFxrtTdsZU5VDDgu0h+WDI=
Subject key identifier:   67:62:99:C0:DE:13:4D:E9:C6:9B:2F:AF:4C:13:E6:64:E7:9B:54:0C
Authority key identifier: 71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A
Certificate issuer:       /CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
Certificate serial:       019A4EF57AEF751AFC86137B7ED77864F839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
Manifest number:          169E
Signing time:             Tue 04 Nov 2025 13:01:41 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:41 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:41 +0000
Files and hashes:         1: cV2dGCxjrtg5f743LjYA9D2-62o.crl (hash: GFAIQn//ADEiZ7lYdUjCbQh/zpy9MZRChbRh9cNoJfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:7a:ef:75:1a:fc:86:13:7b:7e:d7:78:64:f8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715d9d182c63aed8397fbe372e3600f43dbeeb6a
        Validity
            Not Before: Nov  4 13:01:41 2025 GMT
            Not After : Nov  5 13:01:41 2025 GMT
        Subject: CN=676299c0de134de9c69b2faf4c13e664e79b540c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:ea:4d:37:5c:80:4f:cc:af:46:9a:ee:3d:
                    63:9a:02:2d:6d:b4:c7:97:45:87:e5:23:63:8b:42:
                    ca:6e:9d:aa:a4:92:2d:57:f4:8c:b0:b9:34:a4:9b:
                    5b:a5:f4:2b:13:5e:53:94:88:89:79:8f:39:59:81:
                    d8:c7:bd:11:18:55:fd:9d:6d:20:62:ee:e0:e4:59:
                    2a:e2:bd:30:06:f5:4b:e0:17:5b:38:52:d5:eb:b7:
                    59:c2:82:1a:72:6a:1d:c1:06:e5:8f:b5:8a:75:8d:
                    aa:26:0e:28:af:ea:4c:49:13:f4:14:69:a9:a8:89:
                    7d:84:bc:62:76:2c:79:a9:2a:37:b5:ac:9e:f1:cd:
                    68:b4:2c:c3:b7:12:f7:d9:be:5f:59:b3:dc:b6:03:
                    90:11:49:ef:d7:1a:06:fe:ae:78:50:d4:51:83:01:
                    4f:7f:d8:90:81:06:5a:6c:5c:01:7f:ea:37:de:c5:
                    2c:15:3b:de:67:05:73:71:42:77:70:2c:98:39:ee:
                    6c:d4:07:1e:e5:be:ff:5f:b2:11:7b:61:d2:46:31:
                    16:66:77:65:96:02:2c:bc:17:3b:cf:03:25:a2:ef:
                    1c:de:b9:2b:2d:e6:10:55:fe:0f:45:0e:12:f2:a3:
                    ce:3a:9c:e2:22:8d:0c:b8:49:2f:31:18:4a:b1:d2:
                    2f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:62:99:C0:DE:13:4D:E9:C6:9B:2F:AF:4C:13:E6:64:E7:9B:54:0C
            X509v3 Authority Key Identifier:
                keyid:71:5D:9D:18:2C:63:AE:D8:39:7F:BE:37:2E:36:00:F4:3D:BE:EB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV2dGCxjrtg5f743LjYA9D2-62o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bba1a-ed08-4fd6-9fb8-e433cfc72477/1/cV2dGCxjrtg5f743LjYA9D2-62o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6b:12:cc:83:eb:fa:dc:25:8d:53:ff:04:b0:d8:c3:50:f7:
         ff:91:5f:e2:99:eb:2b:af:ce:a2:cf:65:44:1c:10:47:a8:bf:
         de:90:c9:20:35:2f:33:bd:f6:a6:63:7d:d6:5c:f1:f7:7f:15:
         44:da:e1:bd:45:f4:c2:1e:17:07:a8:3e:a2:fa:51:c2:0c:28:
         18:d9:0b:9d:fc:a6:9c:6f:fa:80:da:3d:4d:56:37:be:f7:78:
         20:db:d1:46:20:f5:3d:05:d7:b2:75:9c:14:72:f0:fd:ad:a7:
         9e:f3:4d:38:59:bc:83:41:1e:46:84:53:77:e3:90:21:3b:61:
         d3:85:8d:d9:59:f1:bb:2d:78:94:9a:f3:19:8c:91:f8:e5:69:
         49:05:70:e6:a1:d9:96:ef:89:69:17:f1:2e:17:89:26:5b:fc:
         71:a1:2c:ce:62:c3:31:f2:69:bf:b2:5e:0e:6e:d2:92:9c:86:
         f9:46:47:01:e0:1d:07:c7:4e:0d:be:0f:0b:e4:ae:05:26:44:
         54:a7:eb:73:45:83:28:5a:98:d0:3e:b3:0f:d0:90:97:ce:50:
         49:65:a2:9e:38:7a:cf:e3:89:ff:e1:47:5b:a0:cb:9a:54:64:
         e7:8a:82:e7:81:16:d6:5e:8c:72:8a:e0:9b:fb:ea:73:55:f4:
         32:e8:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:51:13 2025 by rpki-client