Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
File:                     9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json)
Hash identifier:          MrLUrVweo1ph+v8EsQFbqYDWYl46o5BrfcM1fq85fVc=
Subject key identifier:   94:8E:9C:1F:E7:FC:3E:21:A2:39:0D:9D:91:E4:E8:1C:C6:D1:DE:C0
Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C
Certificate issuer:       /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
Certificate serial:       019A4F991DE6EC386D761274837C6899851E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
Manifest number:          0669
Signing time:             Tue 04 Nov 2025 16:00:25 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:25 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:25 +0000
Files and hashes:         1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: yvPZw0kZUICEHhvPY3901Fpo0HEYVWbWkXo23P/zkzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:1d:e6:ec:38:6d:76:12:74:83:7c:68:99:85:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c
        Validity
            Not Before: Nov  4 16:00:25 2025 GMT
            Not After : Nov  5 16:00:25 2025 GMT
        Subject: CN=948e9c1fe7fc3e21a2390d9d91e4e81cc6d1dec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:71:fe:d7:08:ba:9a:d4:e0:01:d5:a3:72:0a:
                    ab:24:0e:73:f1:e3:ef:b5:a2:5f:f1:3d:1b:fa:d1:
                    fa:8e:22:34:eb:72:86:bd:fa:c8:e4:99:57:38:e8:
                    e0:78:a6:91:67:82:fb:75:5c:e5:9f:38:40:cd:9f:
                    6e:c0:5d:68:a3:01:f3:5c:02:d8:1f:f9:e7:d6:33:
                    3f:5e:fc:fb:af:bd:b1:2c:0a:db:9a:cb:41:42:26:
                    cb:8d:df:8b:e1:3c:3c:61:13:e4:6f:72:77:76:9b:
                    26:48:d7:f8:9d:a1:b2:5a:ae:9f:26:cd:8a:a5:43:
                    68:74:93:11:13:5a:d7:71:c3:8a:e2:20:48:8f:c0:
                    e2:8c:8e:7e:71:62:58:9b:22:f4:f5:0f:b6:de:94:
                    06:5f:0e:46:8b:55:58:20:f1:a4:71:2e:74:18:d4:
                    c8:0f:00:c7:c1:94:ee:2a:9c:d5:d8:0e:bb:87:7b:
                    07:01:c5:4c:b5:8f:f6:58:e1:7f:7c:4f:0f:2e:b4:
                    9b:a5:09:49:24:c6:3f:f1:ea:ca:d4:2c:63:79:39:
                    73:36:ae:92:7a:ef:87:4c:6d:1f:ed:2b:1e:9c:4f:
                    ad:9c:90:2c:a0:85:1a:45:a4:1f:d6:c2:09:2b:b6:
                    da:c4:5b:4c:8e:5c:b0:b1:df:8b:79:55:fc:8e:7d:
                    77:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8E:9C:1F:E7:FC:3E:21:A2:39:0D:9D:91:E4:E8:1C:C6:D1:DE:C0
            X509v3 Authority Key Identifier:
                keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cb:c1:5f:65:73:a0:32:c6:2d:69:f1:a4:b2:30:06:d3:ee:
         87:5d:32:88:7c:5d:49:af:7e:44:ad:17:b0:48:32:3f:2e:9d:
         e2:73:0c:a2:0b:66:05:14:9d:d1:f7:1d:c8:00:f4:70:dd:18:
         5c:ec:bf:05:63:f0:ce:56:13:70:a4:94:cd:be:c2:7b:eb:de:
         49:20:81:89:4b:71:b4:59:01:04:b9:d8:d5:0c:36:5c:a3:04:
         0e:21:51:d2:51:ea:89:e8:b4:4b:68:06:58:e7:52:06:79:2f:
         06:a8:32:75:2c:7d:fb:99:14:20:5e:9f:89:c3:7d:20:19:62:
         11:54:20:35:8f:67:d4:4e:52:05:76:46:af:a7:62:24:ed:b5:
         8b:78:77:d5:68:5f:f1:88:7b:d7:23:0b:01:c8:c7:4d:ea:e4:
         97:95:af:92:e8:d0:0e:77:50:6d:a8:bd:32:e7:59:e7:47:d6:
         59:f7:df:9e:57:62:0a:b5:91:20:c1:2f:b5:1b:56:77:1f:0c:
         63:18:68:9d:11:cf:a5:c8:9f:de:ab:02:37:64:42:0a:f9:27:
         24:22:96:6a:7b:e2:24:34:cf:a9:b5:7b:55:ce:0a:8f:54:81:
         10:2a:02:aa:33:a9:33:df:23:c5:b2:80:12:86:eb:6b:be:63:
         7f:a1:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:47 2025 by rpki-client