Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
File:                     FyROqUT-mGNME2MDjuMdVDVpkmE.mft (raw, json)
Hash identifier:          aG3Gf7TPBd9iDPlmVzVs02UYZL4cQfWuDhxGjX1qKlo=
Subject key identifier:   39:D2:73:C8:70:3C:20:C7:FB:61:0B:81:96:12:C4:64:A2:11:F2:1D
Authority key identifier: 17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61
Certificate issuer:       /CN=17244ea944fe98634c1363038ee31d5435699261
Certificate serial:       0198469B3EE602C08AC369C1D0170CF2B0E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
Manifest number:          01F3
Signing time:             Sat 26 Jul 2025 12:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:35 +0000
Files and hashes:         1: FyROqUT-mGNME2MDjuMdVDVpkmE.crl (hash: rP1QU04KI4x3DuKfv91gNS1RLH/TSg3yt6YYKC9G7xE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:3e:e6:02:c0:8a:c3:69:c1:d0:17:0c:f2:b0:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17244ea944fe98634c1363038ee31d5435699261
        Validity
            Not Before: Jul 26 12:00:35 2025 GMT
            Not After : Jul 27 12:00:35 2025 GMT
        Subject: CN=39d273c8703c20c7fb610b819612c464a211f21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:75:12:87:1f:4d:e7:d8:0a:79:b7:9e:7f:
                    5d:14:3f:cb:d8:75:1b:5d:87:01:2b:a1:c6:2b:46:
                    0b:81:6a:7c:3b:c8:53:0d:15:04:22:3b:5f:6f:5e:
                    2c:c5:dc:7f:04:4b:cf:de:f1:79:28:b8:51:1d:a9:
                    f0:bb:2f:1f:15:0f:51:d4:22:f4:2a:56:de:39:06:
                    55:6c:32:d6:14:b1:14:8d:0e:a6:9f:c3:d1:e0:ee:
                    0b:f8:2b:9a:bb:40:88:1e:c7:91:1d:7f:4f:c6:c5:
                    ef:93:82:11:d5:6e:d4:f9:a4:7e:78:7e:29:1e:35:
                    a8:46:73:9a:46:33:e9:99:41:9a:1d:40:df:5a:78:
                    e6:53:4c:17:6c:69:b3:ec:6d:26:79:91:c9:15:b8:
                    be:06:f5:74:6f:07:c4:3e:97:27:72:fb:06:85:68:
                    19:ef:3f:64:bf:09:92:ad:6e:92:23:19:ca:ad:14:
                    6f:a5:22:cb:f8:15:43:d7:bf:93:e3:76:db:0b:8b:
                    fd:ba:3c:e4:bc:0c:8b:ee:ce:fb:49:69:7f:0f:e5:
                    d6:22:cf:d1:a6:aa:1b:13:bb:da:e3:ca:ac:bc:98:
                    e4:44:de:d3:f2:d3:89:c3:1d:8c:fe:ef:63:48:b9:
                    8c:61:20:5e:fd:5d:c6:0c:97:bf:71:41:95:dc:17:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D2:73:C8:70:3C:20:C7:FB:61:0B:81:96:12:C4:64:A2:11:F2:1D
            X509v3 Authority Key Identifier:
                keyid:17:24:4E:A9:44:FE:98:63:4C:13:63:03:8E:E3:1D:54:35:69:92:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyROqUT-mGNME2MDjuMdVDVpkmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/872a44-132a-4e97-8229-e26deb3bbdc2/1/FyROqUT-mGNME2MDjuMdVDVpkmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:20:12:05:8f:ae:2b:e6:a2:cd:04:eb:40:c9:77:97:13:fa:
         f3:fe:09:a6:4b:17:76:d7:9a:24:be:aa:2f:ba:4e:bd:a3:7f:
         df:04:01:8e:12:9d:5c:b2:84:dc:23:dc:be:0e:6b:04:b8:73:
         a0:03:13:34:53:07:85:ea:76:d2:98:64:4a:14:07:a4:44:38:
         93:e6:f0:b7:28:d2:8b:0a:3f:e1:5f:92:50:71:a7:00:49:47:
         a8:c9:b9:9a:3e:bd:9c:e1:59:c7:08:10:b0:c3:7c:a3:f3:00:
         7f:3f:db:bf:d3:56:d4:9c:f6:67:0c:5a:73:fc:93:02:ff:55:
         5d:ef:76:7b:e9:40:d6:dc:31:5d:92:ea:93:27:59:05:35:94:
         80:0a:bc:05:6d:7d:30:33:00:07:f3:5d:5a:17:ef:3a:65:a3:
         7a:39:e7:e6:13:6b:f6:51:35:24:6c:97:e4:3f:dd:72:20:b1:
         8d:d9:29:60:3d:ca:ea:73:5e:55:28:d1:6d:56:c5:36:66:e5:
         7f:1f:c6:28:1a:15:50:f9:8e:0c:9e:ee:3b:5b:5e:e9:a7:88:
         b6:0e:91:97:4c:db:5d:dd:5a:89:7e:9b:79:9e:ad:a9:ae:eb:
         63:15:66:1c:c5:31:91:2b:08:d7:49:0f:d4:f2:e9:6b:8a:df:
         e4:d1:49:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:43 2025 by rpki-client