Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File:                     FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier:          /5h7crFTKze+AVdj45VUIUFE0z8Ac1/MIohC985vwWo=
Subject key identifier:   5D:65:54:FC:1F:8C:33:19:DA:63:ED:9F:31:38:C6:7F:7C:7F:1F:9E
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer:       /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial:       01984966B093D7ADCBC337CE78D6B2A2CDF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number:          0922
Signing time:             Sun 27 Jul 2025 01:02:03 +0000
Manifest this update:     Sun 27 Jul 2025 01:02:03 +0000
Manifest next update:     Mon 28 Jul 2025 01:02:03 +0000
Files and hashes:         1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: CqzVdWhN7gQra8fRk86pBX7DpLJKz2lRXMxFesVgc0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:b0:93:d7:ad:cb:c3:37:ce:78:d6:b2:a2:cd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
        Validity
            Not Before: Jul 27 01:02:03 2025 GMT
            Not After : Jul 28 01:02:03 2025 GMT
        Subject: CN=5d6554fc1f8c3319da63ed9f3138c67f7c7f1f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:2c:08:3a:2f:04:df:8a:5a:7c:1b:30:ae:
                    00:72:76:bd:be:26:a6:44:17:fa:5c:20:3d:f3:c8:
                    9a:1f:76:9e:13:a5:63:b8:f7:e0:d5:cb:64:a3:2a:
                    56:af:ca:26:70:6e:bf:8b:9e:79:6d:86:7b:09:22:
                    b2:19:2e:46:8c:51:59:89:d1:61:8a:10:7f:19:e4:
                    2c:7a:c8:58:a1:df:53:97:9a:23:7f:8e:42:c2:81:
                    3c:7c:dc:37:c5:b4:25:7c:de:f3:dd:9a:da:96:7f:
                    b2:bd:d7:05:4b:d2:3f:dd:b6:50:df:6a:c3:8d:e0:
                    14:1f:95:c4:46:ed:49:ce:db:78:67:28:91:dd:84:
                    44:00:b6:33:4e:d5:56:d9:28:ac:33:3e:a6:f5:d9:
                    81:26:b2:44:b5:33:53:2f:91:43:a2:52:9b:c4:e0:
                    a8:84:6b:ab:74:ab:24:c5:50:a7:51:1b:2a:a8:1d:
                    98:9b:16:77:11:e4:c0:15:9f:5a:28:b4:5c:f5:2f:
                    6f:03:b6:e4:0b:2e:bc:0f:57:fc:d6:fe:80:7a:3f:
                    0c:ce:9b:0a:cc:22:25:af:a5:d6:ae:a5:e6:d1:da:
                    a6:63:ee:70:38:c3:45:8b:e6:ed:0e:8a:41:bd:79:
                    be:2f:9e:54:bd:1f:d9:e9:a7:ba:40:22:22:bf:2d:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:65:54:FC:1F:8C:33:19:DA:63:ED:9F:31:38:C6:7F:7C:7F:1F:9E
            X509v3 Authority Key Identifier:
                keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:14:9d:c6:cb:cb:46:75:3c:19:5c:3b:45:be:61:69:ce:
         29:81:a7:81:c7:ba:96:4d:a5:97:6f:67:3e:e1:03:80:47:10:
         fa:dd:f0:da:ad:57:a2:7f:57:17:00:d7:ca:c8:88:ab:02:b0:
         ad:f6:e3:33:4a:57:ad:ea:cc:7b:84:63:d3:5b:3c:74:b7:01:
         49:25:58:9e:d9:78:e8:4a:24:aa:b3:1a:b0:d0:6c:68:94:91:
         df:61:a3:47:19:73:88:2a:95:df:af:68:3e:45:f3:65:37:66:
         a8:6b:27:2d:5f:c4:d4:1f:f2:c3:7d:21:91:58:09:fd:56:3e:
         2c:fc:f5:8b:0b:be:c3:7e:87:fb:e7:44:f8:b2:c2:8f:46:d0:
         aa:1f:05:9b:f0:0f:06:4b:59:a7:ca:c9:a1:1f:57:b7:12:19:
         88:04:2c:d6:ae:b4:18:ec:f6:88:09:34:c7:5e:37:b4:02:02:
         32:10:79:d4:43:50:34:2a:5a:d6:ab:04:7e:bf:e9:5c:f1:77:
         16:69:3c:9e:c5:cb:1a:dd:b3:66:29:2a:4c:ff:50:98:d9:ea:
         42:a7:c1:7f:49:72:1a:28:a9:7c:cf:1b:3a:5e:4f:8b:c7:2c:
         bd:41:32:95:81:a3:6e:12:d2:74:95:67:ea:4b:f4:00:9e:f2:
         44:fe:f3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:32:10 2025 by rpki-client