
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          x7vRxBIxVbq8XH14AgqW4vQYV3tRk7FnrGGVhlOmI1o=
Subject key identifier:   D2:7C:05:2A:CC:C1:0C:A4:2A:17:DB:9E:98:1B:FA:30:9D:1C:DC:0F
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       019A4C61924FCA4BD570574A4DEC60FF2A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          11F3
Signing time:             Tue 04 Nov 2025 01:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 01:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 01:00:54 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: Hqio0Sap6Hy99nO59y/XjFDwuTuIbSKf6FRaryyX7Gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 01:00:54 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:61:92:4f:ca:4b:d5:70:57:4a:4d:ec:60:ff:2a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Nov  4 01:00:54 2025 GMT
            Not After : Nov  5 01:00:54 2025 GMT
        Subject: CN=d27c052accc10ca42a17db9e981bfa309d1cdc0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:b7:0e:4a:79:58:46:72:9e:5d:ee:b4:b2:
                    1f:8d:62:13:9b:17:24:d9:cf:18:b2:28:24:bb:f6:
                    1d:d4:e8:b1:2e:e1:c9:9c:23:6c:c4:73:bf:48:0a:
                    76:cc:51:f0:0e:06:46:95:c7:3b:46:48:32:60:c2:
                    69:87:12:88:78:72:09:89:15:ad:dc:23:2e:09:fd:
                    26:55:87:fc:fc:dc:fa:5b:56:ba:ee:3e:72:a9:38:
                    df:05:3a:53:c5:9c:2c:a6:6b:cd:66:73:34:7f:11:
                    30:06:bb:43:2a:6d:48:64:e9:0a:07:fc:9a:16:19:
                    0c:d9:d0:4d:9a:c3:5f:25:49:a2:d0:88:db:9b:64:
                    d2:a0:5b:ec:82:ae:36:8a:12:ec:4b:9e:c2:bf:e7:
                    f2:36:bb:9e:1f:3a:0e:06:df:3d:cc:7f:5e:b6:73:
                    18:67:d2:80:7f:75:d8:5b:5c:69:8d:07:b8:c1:0a:
                    fb:7e:4b:a5:5b:ef:5d:28:fb:18:79:18:d0:e7:24:
                    c9:3a:13:d7:f2:80:ed:72:a6:50:14:c0:ec:d8:13:
                    9c:9c:27:d6:45:f1:d0:cd:9c:af:54:5f:3b:4b:1a:
                    5e:43:92:5b:d1:11:d1:06:99:93:22:ca:59:79:bb:
                    fe:24:41:c9:a7:5a:3f:93:ea:f1:91:e6:d6:8b:07:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:7C:05:2A:CC:C1:0C:A4:2A:17:DB:9E:98:1B:FA:30:9D:1C:DC:0F
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         39:ee:df:28:36:b4:2a:ff:ed:a6:60:2a:20:46:40:57:8e:13:
         0b:32:84:15:a0:f7:22:f0:98:c5:60:0e:4e:e0:ad:42:e7:dd:
         11:78:b0:53:21:a2:e4:9a:26:da:fb:af:cf:e1:6a:cc:0a:0c:
         5a:cd:97:72:44:44:8d:41:b8:11:2a:4a:a6:f7:8d:f3:5e:1f:
         08:9b:e3:e0:b2:ec:ed:e4:17:c6:16:44:ec:94:47:3b:99:63:
         6d:1f:9b:b4:08:32:a8:e2:a3:26:d8:72:ca:60:e6:56:69:9c:
         c7:07:64:c8:33:7a:6b:8c:5f:08:3f:5f:d9:a7:c5:39:1e:66:
         cc:14:3c:06:cd:e0:9e:50:ac:e0:4f:5b:bf:30:05:77:43:6f:
         b2:fd:a2:91:76:d9:1f:a5:8d:df:44:dd:bb:2a:73:e8:11:e3:
         8a:93:87:33:6b:44:12:e9:3b:ac:2a:0b:2b:a1:f3:38:60:53:
         ec:bc:28:d0:67:e9:ee:41:e1:68:2d:8e:18:26:56:2b:66:4f:
         b0:09:f4:5e:cc:b2:3e:92:c8:ca:65:3d:bc:f5:3c:67:56:cd:
         ab:5f:46:d1:d6:93:56:ac:81:91:5f:d1:28:cd:0b:a6:d7:20:
         ae:78:e0:a4:8f:8e:b5:35:05:f6:32:73:fa:92:73:4a:6e:d0:
         2a:fc:ab:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:52:17 2025 by rpki-client