Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
File:                     Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft (raw, json)
Hash identifier:          xwY2KKR5k4qU6BWnIP/tK04ToxKxL6DywDdu2uFna7A=
Subject key identifier:   F7:A9:F5:C1:68:E3:AF:89:B2:4D:F6:62:32:1E:64:6A:4C:93:5B:E9
Authority key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56
Certificate issuer:       /CN=1686f7be9ba171c32746ab4ed20be882bd304356
Certificate serial:       019922FAEC12A8DCF19E804DD229F8292C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
Manifest number:          0401
Signing time:             Sun 07 Sep 2025 07:01:33 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:33 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:33 +0000
Files and hashes:         1: Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl (hash: 1JPHiVnFM+lg0WmJZgBiYAXCUr2bBNu+R/if0qtJYMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:ec:12:a8:dc:f1:9e:80:4d:d2:29:f8:29:2c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1686f7be9ba171c32746ab4ed20be882bd304356
        Validity
            Not Before: Sep  7 07:01:33 2025 GMT
            Not After : Sep  8 07:01:33 2025 GMT
        Subject: CN=f7a9f5c168e3af89b24df662321e646a4c935be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:50:67:6d:d6:a7:58:7c:c8:b1:b1:1a:1f:
                    8a:95:f8:de:83:53:76:33:9b:fb:7e:da:73:b8:88:
                    0b:0a:4f:29:13:39:50:be:ff:a4:46:96:53:ae:28:
                    ce:15:4d:2f:2a:cc:2b:9e:85:20:97:79:ea:e3:d3:
                    cf:07:97:f2:bb:da:1c:81:b9:e9:94:53:21:4c:05:
                    e0:62:f1:05:9c:74:d5:05:93:fe:26:8d:26:6c:ad:
                    40:f4:fe:e2:b6:7e:12:16:9c:35:20:9c:69:aa:f5:
                    4d:60:9b:2e:81:b8:21:1f:bf:57:bf:63:c4:b0:b2:
                    63:2f:79:50:6f:a8:14:41:52:5f:ee:35:a5:1d:69:
                    db:cc:68:70:81:b2:d2:b8:fd:91:39:37:7a:21:2a:
                    f6:bd:bc:96:4e:1d:69:42:9e:e0:2d:bc:bb:3b:24:
                    46:0d:48:8c:a5:e4:f9:5e:4e:ca:fb:ed:c3:bf:2f:
                    d0:63:01:26:fe:d9:bb:04:35:9c:68:18:93:a1:ba:
                    e7:e0:80:bb:f2:80:26:27:83:9a:ae:fc:a9:e5:2e:
                    c9:80:8a:a5:31:e8:9c:4c:05:3d:72:a3:ee:e4:2e:
                    f5:b2:e1:9f:b6:d2:a4:c4:9c:1d:75:11:00:65:f7:
                    1c:d6:f1:62:84:0e:7c:0e:5b:15:a2:60:6b:69:3e:
                    16:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A9:F5:C1:68:E3:AF:89:B2:4D:F6:62:32:1E:64:6A:4C:93:5B:E9
            X509v3 Authority Key Identifier:
                keyid:16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:68:f0:00:9e:8f:af:15:84:da:75:2b:4e:e0:26:66:cd:8c:
         bf:85:2c:4d:ce:73:c2:5b:c9:cc:b7:28:54:7e:8b:87:b9:da:
         aa:cd:e0:a8:40:d1:30:d2:b2:e8:3b:6e:ee:76:9c:db:d8:20:
         5d:81:c0:f3:b5:4c:33:69:f7:3e:b6:6d:d3:9b:25:68:48:19:
         68:ea:a3:e6:40:71:1c:e3:f4:41:75:f7:6a:39:82:ff:db:d1:
         8e:1b:f8:28:2d:c6:01:a9:26:91:66:40:e1:14:71:67:94:8b:
         57:df:f0:db:a9:1b:c4:39:7e:fb:9a:8e:a4:97:8e:85:66:31:
         fa:6b:a1:bf:22:6b:23:ff:6a:17:23:9a:a2:28:25:03:6f:be:
         16:b8:f4:c6:13:bf:ce:f9:5e:48:87:90:47:c4:51:85:81:9b:
         45:e9:55:8d:d0:bc:36:b2:88:c8:d9:ab:b9:d9:6f:64:2a:a4:
         ae:e1:36:71:81:ca:76:16:d2:86:7d:bc:c0:3f:3f:ae:4d:48:
         cb:63:5e:bb:4d:38:f3:dc:e8:e8:3a:8e:c1:a1:8d:b8:35:db:
         7b:e0:18:24:45:82:c9:fd:70:32:de:01:b6:c2:32:0b:cb:76:
         58:5a:8d:18:24:a3:eb:2c:8d:d7:72:c6:6c:80:88:c9:9b:1f:
         b2:7b:76:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:09 2025 by rpki-client