Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          Vruy79mid/SvBNSyKwHtf5lGMoTyIjtO+xGQkIhpCAc=
Subject key identifier:   E0:13:CF:2F:FA:10:05:89:07:68:68:AC:16:1D:75:30:AB:D9:42:6F
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       019A21E4C3EEB7DEA5A0F58A2BB86EF5D299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          09AF
Signing time:             Sun 26 Oct 2025 19:00:31 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:31 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:31 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: qiLrA/4jrmSfvwbAa8SNfpopUSPlZvNpd8JYwhXldD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e4:c3:ee:b7:de:a5:a0:f5:8a:2b:b8:6e:f5:d2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: Oct 26 19:00:31 2025 GMT
            Not After : Oct 27 19:00:31 2025 GMT
        Subject: CN=e013cf2ffa100589076868ac161d7530abd9426f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a5:5f:19:b4:b8:5b:7e:a5:03:3c:08:2f:ae:
                    dd:71:63:7b:9c:b2:b7:12:12:39:f9:74:27:0b:a3:
                    09:48:d0:42:ac:17:cc:57:85:cd:36:d4:28:4c:67:
                    05:ac:57:51:c7:ff:5e:3e:f9:94:b7:36:f7:7c:ff:
                    b9:fd:80:e1:64:18:59:0d:4f:fa:48:61:08:47:82:
                    07:de:9f:d3:82:f5:af:20:d0:2d:1e:ef:04:82:a6:
                    72:e4:1a:56:fb:b4:c8:40:bb:62:00:63:79:e3:e2:
                    be:ea:b8:75:94:04:4d:9f:da:64:c6:61:91:23:47:
                    64:6d:1b:54:c4:a4:24:7a:a5:45:cc:28:f3:cf:5f:
                    19:07:eb:fb:09:c3:be:04:13:b3:0f:51:c1:7a:04:
                    91:39:7d:5f:81:9b:1a:32:65:31:eb:88:64:ff:79:
                    fa:7d:70:4a:a1:73:5c:9a:37:47:b4:28:78:24:2e:
                    c1:d0:04:81:cd:d0:eb:9d:f1:70:fb:4c:bf:2d:a4:
                    46:70:df:cb:5e:44:68:7b:6f:d7:38:bd:83:9d:62:
                    dd:be:56:6e:d2:df:35:a0:1f:37:0b:6b:b9:80:26:
                    22:ac:2c:82:68:e2:f8:89:44:33:e2:60:ca:a4:d6:
                    1d:d7:9f:71:11:d0:38:73:8a:eb:d3:b2:ea:82:2c:
                    84:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:13:CF:2F:FA:10:05:89:07:68:68:AC:16:1D:75:30:AB:D9:42:6F
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:87:70:53:8c:6b:b0:84:4a:10:db:e2:e8:0d:b5:8a:6e:6e:
         fe:a4:8d:4e:35:b2:05:c5:3f:ab:1b:13:03:54:74:9f:58:48:
         84:c0:98:52:a3:8e:97:f8:03:19:6f:26:62:02:42:99:68:4c:
         05:dd:fc:ce:ac:88:ac:7f:f3:d1:c4:a3:47:5a:8c:86:bb:dd:
         56:2e:75:2a:8d:ae:40:1e:3e:b2:50:72:1e:a2:f6:f6:f5:25:
         a7:a1:e7:6b:3c:f9:22:05:e8:ed:23:be:07:df:ab:d0:cd:94:
         1a:5b:7e:59:a6:51:e6:67:e3:5c:85:e1:b0:02:bf:a6:80:25:
         05:a9:38:b0:29:77:ca:1b:be:6b:3e:6a:a6:68:c2:e0:38:ce:
         da:04:6e:02:a4:ee:47:e4:4a:bc:e0:bb:f4:ae:fd:d9:99:ce:
         05:54:e9:8a:a3:7a:e3:6b:c1:03:bd:00:46:23:2d:d6:a0:82:
         54:d2:07:00:eb:36:7c:fe:cd:c8:95:b5:08:d1:3d:52:7b:eb:
         cd:4e:07:01:25:c8:0f:35:c4:ef:33:3b:6e:fc:e9:0b:fc:9e:
         ec:d7:87:25:c5:bb:ec:68:3e:7e:87:dc:b9:16:f0:47:ce:f7:
         6f:ee:8d:42:a4:10:d6:70:25:a1:9f:52:0b:2c:b0:ce:77:b7:
         a6:85:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:31 2025 by rpki-client