Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
File:                     cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json)
Hash identifier:          VrXRXTNdN0WvNq3/HSOL0/6Mr8ORNT7D1w2Qz470V6E=
Subject key identifier:   07:70:25:BF:06:3C:12:9D:02:4F:23:88:F2:6D:08:04:AC:51:B6:63
Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B
Certificate issuer:       /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
Certificate serial:       019A71EE6DAE0D3F4CC60D059E0073E82406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
Manifest number:          117E
Signing time:             Tue 11 Nov 2025 08:00:42 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:42 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:42 +0000
Files and hashes:         1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: Y8jEOJm8f95DlKz2sflFPC6ZZFw/Wbx1swYCqgFsWuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:6d:ae:0d:3f:4c:c6:0d:05:9e:00:73:e8:24:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b
        Validity
            Not Before: Nov 11 08:00:42 2025 GMT
            Not After : Nov 12 08:00:42 2025 GMT
        Subject: CN=077025bf063c129d024f2388f26d0804ac51b663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a1:03:e2:d4:85:36:a4:eb:43:61:09:f0:77:
                    5c:c0:98:03:7d:a6:31:37:09:03:4b:6f:1e:a6:6b:
                    12:63:36:78:78:39:7c:4a:a9:10:1e:a1:11:d9:5a:
                    ce:56:7c:86:fb:ac:fd:d3:f3:fe:c1:94:51:ac:c2:
                    cb:78:00:28:5e:51:0c:d0:c8:1a:a5:16:78:6d:a0:
                    21:c1:44:2e:e6:19:28:58:3c:b4:9e:3a:f6:00:d4:
                    43:44:1d:fa:b2:2f:dd:44:2f:5e:4b:03:a7:43:08:
                    29:98:4b:21:ab:2a:50:84:03:da:a6:4a:43:d6:0a:
                    23:b4:98:e9:8f:91:c6:5c:57:c4:77:7f:1f:ae:f3:
                    f0:e2:a6:64:15:04:72:52:c7:95:4b:e2:0e:58:50:
                    49:65:ff:13:c8:90:8e:86:79:ea:33:1b:f5:42:0d:
                    02:91:44:40:41:6d:66:5c:69:9c:3b:0e:59:d3:84:
                    a8:52:0c:9b:3d:29:f3:f2:52:57:77:f3:63:1a:56:
                    ce:fb:41:94:1a:34:af:53:0d:30:e0:47:35:3d:b9:
                    49:cd:08:3b:43:86:db:d1:49:2f:ea:77:3c:1b:05:
                    f3:38:89:15:d2:cc:3c:13:2d:43:77:57:04:9c:12:
                    54:fa:50:49:8e:4b:92:c2:86:6c:54:0a:d2:fe:e1:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:70:25:BF:06:3C:12:9D:02:4F:23:88:F2:6D:08:04:AC:51:B6:63
            X509v3 Authority Key Identifier:
                keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9e:e6:5f:96:b2:9c:11:40:75:ea:46:11:37:fe:ef:c2:e9:
         38:6b:e1:15:aa:c3:89:00:92:a8:c3:16:48:c6:76:1d:8a:25:
         2a:6b:41:88:5a:e7:94:31:9d:95:90:f1:14:0a:7f:08:b1:c4:
         da:cc:2c:b3:35:ab:58:ec:2f:25:37:86:77:ad:ea:5c:87:0f:
         63:0e:1b:be:cd:a7:8c:fc:f2:80:23:08:a2:ff:bd:fc:04:68:
         f0:72:22:5a:18:f1:c8:19:a8:3c:5b:9b:50:5f:74:b0:91:ea:
         bb:24:47:21:8c:9d:de:34:60:4a:b9:97:93:6e:98:41:97:9a:
         8e:a1:23:01:cc:3e:b2:2d:c9:10:4a:f3:c9:73:aa:2f:d2:4e:
         da:b1:6a:a4:23:06:3e:ff:c7:66:53:2b:3e:87:0f:c6:46:b3:
         2d:60:26:b4:2f:39:2e:72:aa:57:15:f3:eb:9e:1c:2a:36:ed:
         15:78:4d:cf:cd:44:b8:4f:99:b6:1b:7d:93:2b:a0:86:5f:ba:
         a4:46:3d:19:ed:d2:b1:20:4d:23:b1:bd:d7:11:10:ea:4b:76:
         f0:20:d5:f5:90:ab:96:c5:21:f3:14:50:26:7e:4a:19:a5:0b:
         56:02:4d:a1:61:48:91:00:f3:cf:35:c3:34:0d:2b:17:32:14:
         4c:61:1e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:08 2025 by rpki-client