Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
File:                     0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft (raw, json)
Hash identifier:          2bNeQObxW+LDGCnHCYC3qtpIss7UK1zUXP21hLAQJxE=
Subject key identifier:   81:3E:9E:9A:5A:F7:BD:52:0B:40:73:DB:68:29:2C:12:B7:66:E3:B2
Authority key identifier: D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58
Certificate issuer:       /CN=d0f793969a6c8483cc3667934450f6678fd19758
Certificate serial:       0199228C5B4DF1927A2857F1C8933CDF1BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
Manifest number:          069D
Signing time:             Sun 07 Sep 2025 05:00:47 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:47 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:47 +0000
Files and hashes:         1: 0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl (hash: Xiczca99XIZB3Jy/TRxdmV+DzrGg0WzWj5f/jmoVuaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:5b:4d:f1:92:7a:28:57:f1:c8:93:3c:df:1b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f793969a6c8483cc3667934450f6678fd19758
        Validity
            Not Before: Sep  7 05:00:47 2025 GMT
            Not After : Sep  8 05:00:47 2025 GMT
        Subject: CN=813e9e9a5af7bd520b4073db68292c12b766e3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:3a:e5:32:15:a1:7c:7f:00:d1:79:aa:62:
                    d4:24:b1:a4:40:1f:ec:d3:e4:17:d9:c7:1f:f0:e9:
                    10:ff:5c:6f:d9:71:68:2f:8e:3c:ad:7b:2e:12:b2:
                    9c:56:a9:a6:64:d3:ae:19:10:e3:85:e4:20:8b:f8:
                    fa:78:99:c0:a1:43:f6:76:f5:db:5d:36:06:a7:29:
                    c6:a2:14:ca:ac:06:56:50:2e:5e:87:e7:52:6a:c1:
                    c9:3a:5b:2f:44:b3:4e:2e:4b:6d:67:ef:38:13:80:
                    eb:ef:66:ca:54:3e:5a:80:72:c5:75:7e:84:90:a4:
                    45:cc:80:d0:f5:51:99:04:da:7f:24:af:c2:17:53:
                    a6:07:f9:66:fe:d6:f3:b7:ea:1c:c0:2d:47:52:8d:
                    24:7a:a9:9d:21:ad:ae:06:4e:57:59:40:b8:93:bf:
                    7c:de:a5:5b:55:aa:e2:79:53:b9:74:9c:aa:60:5a:
                    bb:16:fb:3b:f8:a6:25:57:db:20:4f:d5:42:48:b6:
                    7c:77:ca:ae:dd:19:54:69:d0:6b:4e:23:d6:1c:87:
                    59:50:00:bf:0b:d0:4d:e8:f3:1b:1c:4e:9c:5b:79:
                    20:5b:02:8f:ae:34:4a:f5:a3:48:16:59:6e:51:18:
                    81:ea:dd:8b:b4:3b:a9:41:7f:89:20:d5:25:e2:0c:
                    b1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3E:9E:9A:5A:F7:BD:52:0B:40:73:DB:68:29:2C:12:B7:66:E3:B2
            X509v3 Authority Key Identifier:
                keyid:D0:F7:93:96:9A:6C:84:83:CC:36:67:93:44:50:F6:67:8F:D1:97:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PeTlppshIPMNmeTRFD2Z4_Rl1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a6f608-3203-47f7-bbca-0a75749f7148/1/0PeTlppshIPMNmeTRFD2Z4_Rl1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:82:b7:fc:d9:93:0d:4c:bc:e6:26:a6:e7:56:aa:c3:fa:0b:
         10:37:67:ae:9e:53:33:5b:1b:71:bf:0c:26:18:7d:86:c2:ac:
         ff:3a:8d:8c:78:e0:fa:9e:41:57:d6:37:a1:72:da:e0:fd:ab:
         7c:4d:9e:1f:50:17:46:5a:5c:02:a4:ec:d1:10:b1:ee:7f:6b:
         94:c6:5f:b9:7d:69:c6:5a:94:7b:80:fc:d5:8d:00:8e:54:7f:
         6b:9c:a7:22:b8:e4:8a:7d:87:f3:ba:bb:f3:da:fa:f4:8c:48:
         74:99:15:9e:e7:b0:42:d4:90:7b:95:cb:c0:27:9d:bd:15:e6:
         f4:cb:23:3d:f8:17:a3:f2:b6:6e:37:32:22:48:fa:0b:84:2d:
         e0:6a:2e:98:db:e0:0b:4d:22:c8:98:49:98:28:47:cd:7a:27:
         c1:d6:ad:f3:cb:06:3a:b7:a7:cb:13:37:84:65:a0:58:5a:26:
         85:c8:1f:1c:49:84:a5:9b:f3:6c:f9:f3:08:5d:be:9b:f0:7e:
         65:1f:22:2c:55:5d:90:58:ee:85:ee:f2:d2:5c:ca:40:09:05:
         a0:9e:1a:f6:bc:8d:f1:b9:ff:3f:16:24:1a:98:18:c7:3b:0a:
         0b:65:cb:e7:48:8f:f2:11:dc:8a:bc:ac:90:06:1a:3c:3c:76:
         2e:af:91:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:50:44 2025 by rpki-client