Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          G3GPNGpqM5F0YOOJbR2775Db6jYVx8citPmnmyn/2p8=
Subject key identifier:   57:58:13:40:ED:11:39:58:AE:2E:C9:4F:55:A6:9A:FA:1C:A5:F5:F8
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       019A4EF579BD6006EB7F411E3B7BD964C743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          170B
Signing time:             Tue 04 Nov 2025 13:01:41 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:41 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:41 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: dIcPp77AgrCgpnmFVhRzmglBccG/efHEjy2gXbqQ6Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:79:bd:60:06:eb:7f:41:1e:3b:7b:d9:64:c7:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Nov  4 13:01:41 2025 GMT
            Not After : Nov  5 13:01:41 2025 GMT
        Subject: CN=57581340ed113958ae2ec94f55a69afa1ca5f5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:f9:93:6a:c6:86:6e:5c:98:d9:5c:f3:8c:
                    9b:86:75:c5:02:74:f6:e7:3f:20:3c:9b:04:0e:d7:
                    d9:21:f7:bd:3a:28:0f:9b:bc:98:4f:dd:78:7b:8c:
                    90:06:44:70:6a:9d:2b:e8:3b:a6:61:f0:06:e0:15:
                    97:74:37:18:54:51:15:c3:4e:12:29:61:3d:25:79:
                    3e:99:0f:68:5c:a8:75:b8:5d:86:bc:59:f7:d6:43:
                    05:b3:1c:00:14:2d:b8:ae:12:0a:ae:79:a0:4e:6b:
                    df:aa:fc:28:d2:4a:1d:4c:19:5f:65:95:6d:a7:14:
                    e5:2c:cc:c7:08:5b:db:00:63:f2:72:b8:f7:31:3f:
                    97:a3:57:d6:7c:b0:fd:58:ae:0a:ad:2b:ff:9d:d7:
                    9e:f2:2c:42:bf:0f:90:ec:30:0f:40:ec:bf:6a:54:
                    a0:37:6a:24:95:17:f4:2e:88:2a:d4:0e:98:fc:cf:
                    0f:14:f5:9c:ff:11:3a:ff:05:a8:b6:a4:b4:51:37:
                    77:5e:72:9c:c6:23:c0:a7:56:fe:f4:af:95:ff:c7:
                    4f:41:2b:91:df:2f:84:f6:fb:ab:cb:c5:64:ea:1f:
                    47:26:35:a0:a1:53:ba:46:81:62:13:bb:37:2b:30:
                    05:6b:4f:78:81:17:fd:7d:26:e2:3c:08:19:97:5f:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:58:13:40:ED:11:39:58:AE:2E:C9:4F:55:A6:9A:FA:1C:A5:F5:F8
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:66:30:3c:69:12:77:53:45:47:f1:08:22:d4:91:62:11:4c:
         65:49:86:2a:0e:6f:b4:2c:5f:5a:5d:33:e4:26:6d:ab:0f:92:
         a8:71:92:ae:5a:79:0d:75:d4:b4:e9:a9:79:41:eb:af:b5:07:
         e2:31:02:e4:93:8e:11:7a:e3:e2:bf:11:4d:83:9e:fc:86:11:
         9f:bb:91:3c:76:84:19:7a:0c:c4:04:de:01:63:de:33:16:b2:
         6c:dc:88:32:64:ca:5a:d9:e1:64:95:0f:b1:d6:59:48:79:23:
         0f:a9:1f:89:21:0c:dd:39:f9:18:28:42:14:6b:b3:00:0b:3d:
         ca:dc:7a:d1:01:f2:87:51:55:3d:ab:92:98:6f:fe:5f:0c:bf:
         7e:6c:7b:ff:9b:f8:bb:eb:1e:e6:b0:0e:6f:80:b9:3c:2c:71:
         e0:ec:13:9f:d7:c2:1f:f5:ed:b0:59:71:c4:ff:4a:37:e5:68:
         7c:c8:b8:c6:77:c2:4e:32:d5:b2:a5:31:fc:0f:33:b2:96:17:
         fe:3d:72:94:59:9d:5a:ee:9a:6c:59:17:79:60:44:d7:cb:bb:
         55:4b:33:ca:c5:6f:94:7d:72:43:34:2f:42:68:7c:58:2d:6b:
         93:f3:e9:60:83:d7:86:8b:57:c8:11:c1:df:3e:50:24:4f:6a:
         b7:f9:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:32 2025 by rpki-client