Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
File:                     txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json)
Hash identifier:          xo7xY4R4BSSXgMDhQQ1pFoT0OxqEveJMZ/0B/4KqRxo=
Subject key identifier:   1E:4C:C1:80:75:5C:CC:60:73:FA:56:60:5D:14:83:70:4E:B2:0D:8D
Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B
Certificate issuer:       /CN=b718859d412f9b5872a58977320d2d083bd7a04b
Certificate serial:       019A71B817226EE7E03B61AEAD90E7E174B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
Manifest number:          1108
Signing time:             Tue 11 Nov 2025 07:01:21 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:21 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:21 +0000
Files and hashes:         1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: 5cFYQf/pwHBD8LrPfA4zx0OWWl4BdiWEX5Xq+gqatOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:17:22:6e:e7:e0:3b:61:ae:ad:90:e7:e1:74:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b
        Validity
            Not Before: Nov 11 07:01:21 2025 GMT
            Not After : Nov 12 07:01:21 2025 GMT
        Subject: CN=1e4cc180755ccc6073fa56605d1483704eb20d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:50:53:e5:3f:d7:d5:ee:75:96:41:ed:4f:
                    71:a9:d6:78:4b:6b:3b:7a:1f:3c:e6:c8:1c:67:af:
                    6f:88:79:dd:fc:15:fd:9a:65:92:55:c4:23:e5:ff:
                    82:1b:93:05:5f:b5:02:78:84:37:16:81:17:4e:d4:
                    84:c3:5a:da:0a:27:16:8c:0f:e8:b3:ff:c6:04:c6:
                    8f:15:27:60:d7:59:91:61:75:94:0f:bf:b4:a5:44:
                    e8:aa:87:4b:91:e8:d4:a3:24:6d:66:90:26:be:ae:
                    81:d8:0d:1b:67:34:17:ca:e9:2e:bd:97:59:f9:c9:
                    03:5b:d2:c4:6f:2f:12:a8:4d:06:e0:94:12:de:de:
                    ba:d9:8c:8e:c5:97:f2:38:3e:52:c0:f5:30:e7:58:
                    9c:e9:b3:6b:70:2d:22:e1:16:62:b1:36:9f:45:59:
                    80:1a:0f:c0:35:ba:fb:ea:43:83:0f:27:5b:06:ee:
                    e4:ce:06:30:cb:ac:77:79:c4:09:5a:af:46:af:b6:
                    a5:05:61:05:5b:06:07:6f:ba:c9:ad:8b:a4:70:14:
                    58:3c:10:ae:5d:da:0a:46:30:db:51:83:26:e5:30:
                    45:bf:4e:8a:f6:9d:81:71:55:03:b9:66:f4:b2:65:
                    58:6b:a3:c5:38:e7:0b:d9:22:d3:ea:4e:02:10:5c:
                    b8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4C:C1:80:75:5C:CC:60:73:FA:56:60:5D:14:83:70:4E:B2:0D:8D
            X509v3 Authority Key Identifier:
                keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:05:77:31:a2:35:53:04:f3:1e:1f:c9:62:8f:f7:30:8f:48:
         4f:b4:c9:e8:66:f3:d4:b6:e6:2b:64:e3:aa:70:cf:81:4e:83:
         4f:0d:ba:a7:78:6a:9e:27:91:eb:1d:5c:77:62:7f:1f:0c:e8:
         31:9c:20:8d:23:a2:99:16:3b:cd:cf:63:86:ca:8b:d5:a0:c4:
         c2:31:49:60:65:fa:9f:5c:c1:a4:c4:79:d3:63:a0:27:9a:8e:
         a2:bd:36:60:94:0e:55:73:57:97:0e:cc:74:f9:b1:41:08:d5:
         af:07:94:bb:f2:e8:1d:ef:0e:b1:8e:b9:26:f0:5c:00:38:04:
         c7:e8:7a:ca:25:a2:ea:27:d6:ed:b2:cf:68:38:20:8b:27:17:
         f3:82:68:f3:e3:85:89:b7:dc:f9:a8:f7:dd:ea:97:c8:53:79:
         66:eb:ef:bd:1e:ad:d6:d3:c5:13:80:a2:f5:2e:47:7c:74:e3:
         e2:f5:78:71:38:25:42:df:f1:19:1b:77:5f:34:29:a5:c9:3c:
         fb:eb:2d:dc:7c:e4:62:dc:55:b7:49:69:27:45:85:a2:b6:3d:
         31:74:c7:a5:d1:c4:74:91:3f:43:20:4d:2e:e5:c1:24:e1:54:
         0d:e3:7a:9d:f3:2d:fd:b9:bb:21:6a:1a:c5:66:30:2d:88:aa:
         6a:65:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:01:33 2025 by rpki-client