Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
File:                     fSiu_AZob_0_snjG3lKXc-2r3p4.mft (raw, json)
Hash identifier:          paF+JXCLhnXDhxi42ayzSijjVSqOCGoFK6XUTFDy46E=
Subject key identifier:   FC:FC:B5:A1:00:BC:7B:0B:A9:76:F0:3D:3E:8E:93:0C:17:50:0E:B3
Authority key identifier: 7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E
Certificate issuer:       /CN=7d28aefc06686ffd3fb278c6de529773edabde9e
Certificate serial:       019916514C0D1F5DA7904BE6A3C30BEF4882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
Manifest number:          3C
Signing time:             Thu 04 Sep 2025 20:00:50 +0000
Manifest this update:     Thu 04 Sep 2025 20:00:50 +0000
Manifest next update:     Fri 05 Sep 2025 20:00:50 +0000
Files and hashes:         1: fSiu_AZob_0_snjG3lKXc-2r3p4.crl (hash: B/sqEfn6kelh6gtjbBVTYAS1wfpnA6l9x0pkdYJ4VwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:51:4c:0d:1f:5d:a7:90:4b:e6:a3:c3:0b:ef:48:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d28aefc06686ffd3fb278c6de529773edabde9e
        Validity
            Not Before: Sep  4 20:00:50 2025 GMT
            Not After : Sep  5 20:00:50 2025 GMT
        Subject: CN=fcfcb5a100bc7b0ba976f03d3e8e930c17500eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:84:41:c8:5e:45:a0:2a:d3:b7:5c:69:07:
                    14:65:33:9d:95:35:78:23:25:2d:4b:19:a2:8c:eb:
                    f5:71:35:c9:f6:25:d6:6c:96:b2:fa:ff:b7:b5:43:
                    be:28:04:d1:ee:7f:8c:8f:de:82:33:54:ce:d0:cf:
                    db:78:d9:a8:4e:09:d9:dd:ae:f4:ca:76:e0:34:9f:
                    25:93:1c:4c:fa:7e:ac:1d:e3:a0:a7:6d:33:2d:68:
                    c7:34:52:94:08:d7:2f:75:ab:df:65:21:9f:34:85:
                    a8:7f:34:f9:ec:b1:39:e2:24:92:8b:d5:b4:85:63:
                    f9:37:b5:3c:53:d5:d9:6d:2e:59:ae:9a:54:a4:a9:
                    2e:01:ea:40:f2:5b:e8:f9:f0:2a:c2:64:94:53:1e:
                    cf:bb:7d:9c:4a:1f:d3:22:9d:6b:77:7a:56:25:8b:
                    8c:02:36:99:14:4c:cc:81:17:a7:d9:41:8b:3d:3e:
                    22:82:34:77:06:93:66:80:10:df:06:01:fe:61:71:
                    62:5f:23:72:47:a8:ee:6b:de:23:83:3a:9e:7b:27:
                    44:e6:75:ae:85:3f:b9:b0:3c:c2:2e:81:3d:45:e7:
                    55:b5:64:97:f2:9e:2c:5b:64:99:75:2d:22:f6:5d:
                    99:06:1f:ff:14:d2:03:04:4e:14:eb:b1:fc:55:99:
                    36:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:B5:A1:00:BC:7B:0B:A9:76:F0:3D:3E:8E:93:0C:17:50:0E:B3
            X509v3 Authority Key Identifier:
                keyid:7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:84:6c:9d:ee:8f:c6:fe:5c:92:e7:9e:30:03:f1:c0:77:
         a0:2b:45:7f:3c:2c:c5:99:c7:c6:fe:c0:a9:6e:bc:5b:82:0b:
         8a:58:f0:c9:d2:e6:d9:58:48:45:0c:cb:e8:be:dd:68:e5:57:
         1f:7c:c6:b3:c1:d4:d3:e5:75:01:e3:44:84:0e:20:9d:e9:b7:
         35:3e:ce:e9:49:d3:40:43:78:3e:fb:d4:c3:77:df:f6:b9:1c:
         27:0c:12:c2:aa:b6:a5:a1:3b:85:2c:61:e5:65:c5:6a:24:be:
         b3:db:1f:5f:95:19:04:d6:bb:6c:89:7f:e2:77:ea:3d:a0:57:
         eb:6b:e8:ea:88:69:cc:54:ae:d5:dd:ba:73:cc:2b:11:5b:89:
         78:fe:c8:c1:79:ef:1d:4e:13:e7:84:f5:d3:da:7d:b4:17:11:
         34:9e:09:b0:40:c3:2b:05:c7:60:b0:17:e1:5d:a3:64:35:8f:
         4e:9f:ae:ba:69:a3:c8:d6:bc:1a:2d:85:c2:e7:df:05:59:0f:
         fc:77:ff:56:a2:fa:f4:64:9d:9b:16:89:15:10:6a:64:90:32:
         68:be:cd:3b:73:1b:08:f5:2b:2c:9c:b5:86:26:f4:99:fb:f4:
         3f:e4:d6:d9:6c:9b:66:0a:f5:4d:62:a5:b1:cb:80:33:e0:87:
         d3:20:76:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:13 2025 by rpki-client