Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File:                     0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier:          nW+D8E2ljR1CnKB5t2ojRv8IwCWeBALfHDqB5RddcqE=
Subject key identifier:   11:4C:87:59:22:BF:08:1E:2F:C7:20:53:49:B3:36:5F:BB:86:BA:3B
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer:       /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial:       019A71B87CFBC7F3F60EE738ABBF4CBF2113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number:          118E
Signing time:             Tue 11 Nov 2025 07:01:47 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:47 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:47 +0000
Files and hashes:         1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: KhqNrg+ByNC07FdwgPh4HZO1JjGqEENfhnRUmy1q2DM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:7c:fb:c7:f3:f6:0e:e7:38:ab:bf:4c:bf:21:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
        Validity
            Not Before: Nov 11 07:01:47 2025 GMT
            Not After : Nov 12 07:01:47 2025 GMT
        Subject: CN=114c875922bf081e2fc7205349b3365fbb86ba3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d3:d6:1e:ed:7e:15:5c:2f:9c:71:7f:ab:e4:
                    30:5b:70:64:46:2a:ae:e6:f5:c1:33:ae:9d:9e:13:
                    1c:c0:d1:31:18:8e:9b:d2:8c:c6:d9:d0:27:8d:64:
                    74:0f:06:a0:d9:82:53:40:bc:83:4a:83:f9:7d:66:
                    f9:8e:a6:4d:19:ef:02:fa:57:fe:01:d6:45:12:60:
                    19:e5:bc:c9:79:8f:97:6b:0b:61:41:e5:b6:10:f0:
                    b2:de:16:03:b2:e0:0f:93:6b:47:0c:8c:e3:1a:a0:
                    a6:d9:7b:bb:c7:ce:16:fe:0f:6a:e5:11:e4:a6:79:
                    b5:4e:0d:7d:8a:95:1b:af:09:c1:8a:16:cf:01:02:
                    99:f6:66:11:ce:29:10:17:dc:5d:d8:f3:b3:e7:ce:
                    ea:2f:77:d6:a5:e0:dc:c6:45:d4:3a:7d:35:ae:9b:
                    7f:a9:bb:f1:77:72:c6:9b:1c:29:68:3b:0e:e9:fa:
                    cc:fd:64:dc:1c:2b:a4:14:0f:7d:8b:39:7e:b4:3a:
                    57:70:7a:e0:17:3d:9e:84:61:a0:d4:c8:c7:87:14:
                    3a:74:16:93:ea:56:7b:54:ef:8d:b5:b2:22:65:2f:
                    cb:6b:96:65:05:24:0c:51:d6:18:8c:cb:c7:78:1b:
                    d0:14:99:44:3b:3f:ce:07:86:59:7c:f4:17:c4:5a:
                    c9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4C:87:59:22:BF:08:1E:2F:C7:20:53:49:B3:36:5F:BB:86:BA:3B
            X509v3 Authority Key Identifier:
                keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f5:83:79:b9:89:1d:36:5c:31:85:1c:4d:13:a5:cb:68:0a:
         5f:84:d3:fe:61:31:8a:2a:a8:44:23:c2:7f:22:be:a8:ec:0a:
         13:dd:f1:c1:90:42:df:b5:10:8f:40:ce:2f:bb:ce:75:86:63:
         ec:f8:6d:11:db:75:e7:0b:e7:8f:ad:26:a7:56:28:26:04:d0:
         19:f5:68:5a:a3:83:68:e4:53:76:21:5e:05:7b:2a:28:f9:35:
         ef:49:e8:18:4b:df:b5:56:4d:76:b5:95:45:2f:44:3e:c5:91:
         49:ad:a5:98:a3:f5:a8:a6:d8:3e:d7:d4:50:7f:87:67:07:51:
         ef:99:d4:eb:ab:b5:48:f1:68:cd:24:dd:ad:dc:19:b4:0f:59:
         00:2b:e2:cd:20:97:59:68:d1:01:d2:e7:27:cb:8f:88:f8:89:
         22:9a:b6:08:e4:ef:ba:bb:02:f2:ad:10:bd:d3:a0:db:74:c2:
         4c:1d:37:c1:1b:b3:ca:e2:1c:20:03:ab:bd:a4:a7:a9:9b:3e:
         50:38:7a:c6:be:a8:6c:31:65:6a:da:f3:cb:ca:41:55:3c:b8:
         d2:bd:a9:db:86:90:7c:b3:54:cb:fb:05:29:04:6c:0b:61:f9:
         03:f1:bd:a1:e5:c2:9b:ba:ff:2d:9d:b6:c7:3d:e2:3f:f5:a1:
         b8:be:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:20 2025 by rpki-client