Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
File:                     H65TutIFt6PYV3Frsky_DVW_D2w.mft (raw, json)
Hash identifier:          jIPcvITI8eNzWerOF5nHzSrfmnhko/zaU1ytPZxbZ6Q=
Subject key identifier:   7E:FF:0A:B6:D2:3E:02:B7:04:69:D5:18:F8:4B:06:4F:8F:CD:A7:27
Authority key identifier: 1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C
Certificate issuer:       /CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
Certificate serial:       019A71B78F992B0EA1F68B694EA26787602E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
Manifest number:          0AD4
Signing time:             Tue 11 Nov 2025 07:00:46 +0000
Manifest this update:     Tue 11 Nov 2025 07:00:46 +0000
Manifest next update:     Wed 12 Nov 2025 07:00:46 +0000
Files and hashes:         1: H65TutIFt6PYV3Frsky_DVW_D2w.crl (hash: GonwYK/5bmslNqCNIShuy45/CxFL+ixxasfoMrlIalA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:8f:99:2b:0e:a1:f6:8b:69:4e:a2:67:87:60:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
        Validity
            Not Before: Nov 11 07:00:46 2025 GMT
            Not After : Nov 12 07:00:46 2025 GMT
        Subject: CN=7eff0ab6d23e02b70469d518f84b064f8fcda727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9c:6e:4a:5f:41:a2:da:41:f5:7f:de:d4:65:
                    fc:8d:f0:79:26:3f:52:53:64:3e:35:8a:a3:5c:f1:
                    a2:c7:90:86:f0:e2:7c:9e:d3:e1:af:cf:93:ea:65:
                    62:c8:3c:f5:70:51:dc:1d:3f:9b:e4:5c:14:93:ac:
                    47:52:28:a3:ff:8f:1a:02:3c:2f:34:a6:05:b4:e0:
                    3a:4a:e6:ef:57:b1:5a:57:c5:98:b9:0d:c0:e6:99:
                    db:ed:8f:2b:a8:a7:c4:8f:57:0d:06:29:42:69:97:
                    b4:9c:1d:c8:9a:5b:82:31:c7:1b:c9:8c:e4:dd:57:
                    cf:37:71:c6:81:a1:63:5d:fd:39:5d:05:06:79:fe:
                    eb:3d:00:7c:e1:a7:91:13:32:e6:d2:2a:ad:f5:a0:
                    22:49:18:16:7d:f0:e0:ec:82:f8:0b:a6:61:83:58:
                    65:85:c5:70:2a:8d:47:10:66:fe:d5:62:07:b0:50:
                    ec:31:b2:e9:ab:e8:32:7f:e8:54:27:d1:ba:6e:0f:
                    b5:28:8e:71:a6:03:0c:81:a8:fe:78:0d:1a:1d:89:
                    00:5c:ca:c1:1f:45:58:a4:3b:39:d7:ad:1d:83:f4:
                    72:77:41:fd:a4:73:b5:53:ef:76:3d:42:41:f6:67:
                    cc:de:b5:47:02:b7:5e:70:06:52:e6:95:91:a5:ca:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FF:0A:B6:D2:3E:02:B7:04:69:D5:18:F8:4B:06:4F:8F:CD:A7:27
            X509v3 Authority Key Identifier:
                keyid:1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:21:cb:ef:fb:fb:90:fd:ca:05:0c:0d:84:a2:aa:0e:96:fc:
         01:ae:21:90:ce:47:d7:92:c1:c5:cc:79:6e:5a:11:a4:c1:3d:
         bd:cd:85:b6:3f:89:69:9c:12:f7:0c:87:9f:e1:00:4d:de:18:
         01:5d:0a:08:1a:38:41:63:dd:aa:21:8a:5f:32:c2:ed:3f:09:
         1a:09:0b:bd:44:6a:69:f9:9b:10:5b:92:db:31:56:a9:41:7d:
         42:f0:38:dd:6e:3c:e5:c8:a1:d4:29:df:40:91:76:c7:b3:28:
         58:69:27:e0:c9:c0:42:ac:80:9c:55:3a:03:69:71:88:ac:b1:
         d1:39:39:94:9a:b9:9a:e2:53:bf:85:71:be:d9:f3:98:6a:a4:
         92:2e:e0:64:be:0f:a6:6a:0b:cc:09:b4:19:98:9c:19:14:bf:
         14:b0:b6:90:0f:dd:92:61:e5:da:6e:fc:76:9b:69:47:b9:55:
         c7:cd:e2:40:ec:15:4e:87:07:7e:6d:c3:4f:a1:7a:ef:79:92:
         ce:79:90:0b:a7:4e:e0:14:b4:0d:b1:b4:2c:99:b4:14:79:cd:
         0c:bd:cc:c1:7c:3e:fc:f6:9e:37:cf:40:c0:f9:a2:34:d3:01:
         b4:3d:7f:2b:52:b8:56:db:53:72:71:02:7a:be:c2:f5:90:05:
         82:02:51:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:00 2025 by rpki-client