Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
File:                     m263eIMkLPw4ZQB4iNCt7-s-cYs.mft (raw, json)
Hash identifier:          TU471w/SKwvlt5IaVdB7llaLpoyQHpCXAvm70m9Eqfs=
Subject key identifier:   39:F4:C5:EE:BB:76:E7:02:80:CE:D6:68:E6:B6:75:87:8A:50:C1:70
Authority key identifier: 9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B
Certificate issuer:       /CN=9b6eb77883242cfc3865007888d0adefeb3e718b
Certificate serial:       019A7293DD7309F5377F33263517E504484C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
Manifest number:          040E
Signing time:             Tue 11 Nov 2025 11:01:24 +0000
Manifest this update:     Tue 11 Nov 2025 11:01:24 +0000
Manifest next update:     Wed 12 Nov 2025 11:01:24 +0000
Files and hashes:         1: m263eIMkLPw4ZQB4iNCt7-s-cYs.crl (hash: SyAHmkKVKnKWFWhQnKsALsmwozUeiDsRXpx05eZAkNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:93:dd:73:09:f5:37:7f:33:26:35:17:e5:04:48:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6eb77883242cfc3865007888d0adefeb3e718b
        Validity
            Not Before: Nov 11 11:01:24 2025 GMT
            Not After : Nov 12 11:01:24 2025 GMT
        Subject: CN=39f4c5eebb76e70280ced668e6b675878a50c170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:cd:1c:80:5b:a3:94:ef:62:3f:f9:26:c1:
                    c7:07:d3:5e:1a:50:5d:61:4e:0a:21:b1:43:ff:bd:
                    ca:7b:1f:5d:8a:73:56:19:35:e2:c0:b6:27:af:c7:
                    31:e1:9a:03:4e:cf:8e:82:98:af:b5:2d:4f:08:7a:
                    be:65:8b:7b:de:d0:04:65:c2:76:b4:3d:8d:6d:4c:
                    22:cf:98:85:75:8f:6f:68:7d:78:c4:42:6e:2e:61:
                    85:35:c8:2c:eb:da:ef:bd:95:ad:4b:aa:98:63:be:
                    ef:67:a9:8d:6a:fa:3e:af:da:d8:11:0a:cd:4f:24:
                    3e:30:72:0a:be:db:d9:35:b8:7c:c1:61:59:1a:34:
                    57:dc:f5:c2:14:ac:d8:f5:06:64:18:34:07:40:6c:
                    7f:ad:e4:9a:1b:7c:e0:0c:83:16:1c:f5:44:f3:98:
                    18:3e:bc:09:4a:e9:82:cb:f6:b3:3c:36:b1:9a:09:
                    d6:9f:65:7c:65:25:d4:6b:99:3c:7f:fa:6f:45:3d:
                    a1:27:e8:bb:0b:fb:83:05:d2:d9:d9:c9:d7:a3:d2:
                    02:46:cb:2d:95:00:47:9d:8a:1d:63:7e:54:09:f8:
                    f6:4c:11:32:0b:a2:e9:f7:29:48:b4:40:2f:55:b6:
                    9a:4e:fe:74:02:72:74:1b:6e:45:d4:ef:7f:58:2c:
                    f3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F4:C5:EE:BB:76:E7:02:80:CE:D6:68:E6:B6:75:87:8A:50:C1:70
            X509v3 Authority Key Identifier:
                keyid:9B:6E:B7:78:83:24:2C:FC:38:65:00:78:88:D0:AD:EF:EB:3E:71:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m263eIMkLPw4ZQB4iNCt7-s-cYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c079d-d57e-4cd7-a365-556e22099b71/1/m263eIMkLPw4ZQB4iNCt7-s-cYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:18:6c:52:0e:e1:59:4c:84:80:58:12:2e:65:1d:f8:f4:
         1e:21:d1:51:fb:1a:1e:c6:08:0f:2e:68:2f:33:6c:eb:50:bf:
         74:71:a1:c1:1b:96:3d:8b:08:eb:dd:58:fa:10:f6:4b:87:e3:
         3a:0b:50:29:7f:64:11:6c:9e:30:b2:67:4a:39:1f:66:b5:aa:
         c4:bf:7e:8b:42:c8:f9:81:f0:45:d9:3e:16:e3:0e:87:9f:a8:
         19:07:8f:6c:46:be:61:fd:9e:b0:0e:ad:de:03:bc:6e:3b:2b:
         30:49:ba:f4:41:bb:93:b6:5a:e5:ca:ed:c4:4a:79:6c:36:04:
         2b:d1:bd:8a:eb:af:0f:02:65:73:64:61:e0:0b:aa:98:8a:41:
         9d:41:48:e8:00:fa:84:aa:03:a5:2d:bb:8a:fe:9a:df:e7:56:
         34:d7:0f:73:b7:b2:49:4d:85:52:45:b5:c8:c4:b7:b4:01:08:
         c8:6d:12:fc:8b:9f:63:97:b4:93:cc:14:1a:d9:7f:f0:b2:b5:
         4a:4f:3b:99:04:af:51:aa:75:a8:14:10:f7:6e:db:24:a5:68:
         c4:04:e8:be:96:c2:5e:74:61:6f:ea:b8:64:db:18:97:65:96:
         24:bc:8f:40:9c:f1:76:07:6a:6a:1c:32:47:e9:68:68:bf:7a:
         da:fe:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:49 2025 by rpki-client