Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
File:                     mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json)
Hash identifier:          aA+Y1LMTHyxlC5oAWyS3U2Hc36lCBMHG5IJb5FmlnaY=
Subject key identifier:   FA:BC:3F:45:DF:6C:9E:61:39:90:F2:EC:37:AF:15:F5:F9:4C:B7:60
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Certificate issuer:       /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial:       019922FAC3F001EB9A64AF21126FE1227F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
Manifest number:          038F
Signing time:             Sun 07 Sep 2025 07:01:23 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:23 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:23 +0000
Files and hashes:         1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: I2pmiIlQwU0cLzdXeuKs2MQkSZ5Jp8lEVoYdertk45I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:c3:f0:01:eb:9a:64:af:21:12:6f:e1:22:7f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
        Validity
            Not Before: Sep  7 07:01:23 2025 GMT
            Not After : Sep  8 07:01:23 2025 GMT
        Subject: CN=fabc3f45df6c9e613990f2ec37af15f5f94cb760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:39:78:d5:21:31:f0:5b:f1:ec:32:db:3b:a2:
                    11:a1:ba:ba:f2:98:2f:8c:5b:f0:83:c2:97:e9:99:
                    3d:f0:1b:51:8b:f8:bc:e7:9b:f9:87:05:89:84:1c:
                    85:b0:88:17:43:8c:fb:21:6f:f5:47:f2:95:aa:36:
                    55:9a:10:b4:7d:c0:35:6b:c0:2f:2b:28:13:21:b5:
                    6f:d4:bb:25:8c:4f:b6:99:6c:e2:c9:45:96:75:52:
                    7e:e7:6b:e9:68:6f:28:b3:e5:83:b2:42:b6:11:17:
                    df:20:70:64:1a:18:b9:a5:59:09:4b:ab:45:19:1e:
                    68:13:6f:16:80:39:1a:e6:71:de:11:3b:10:3b:1e:
                    74:d2:93:b0:c9:8a:73:28:07:09:29:15:c7:62:dc:
                    d3:77:7a:20:cb:be:7c:ff:7a:ad:42:75:00:41:ea:
                    b7:8e:fb:79:72:26:f4:a0:48:20:42:09:84:60:cf:
                    49:18:92:b1:75:8d:88:78:e6:c3:da:ed:0d:04:e1:
                    8c:f5:14:b3:42:b5:ec:a8:81:48:91:9e:b7:03:c6:
                    40:f3:5b:d4:40:ce:61:ec:49:67:6d:72:80:48:84:
                    9d:11:49:86:97:0e:b4:f3:2a:9e:75:46:76:16:98:
                    1b:f2:fb:28:21:63:35:b1:05:8d:53:62:8a:6e:7e:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BC:3F:45:DF:6C:9E:61:39:90:F2:EC:37:AF:15:F5:F9:4C:B7:60
            X509v3 Authority Key Identifier:
                keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:e8:e4:8e:f4:64:b8:6d:bc:5b:27:7b:19:2a:5b:e4:fd:
         4c:37:23:69:ef:b9:02:1b:ac:8f:13:cb:96:83:3d:a3:45:de:
         e2:99:0d:47:7c:64:b6:37:51:30:9f:a8:bd:ed:fd:e8:81:13:
         2b:b1:ee:13:90:db:02:89:b5:27:be:39:6d:ae:e3:19:70:bb:
         5b:27:a5:24:64:14:82:fc:39:37:39:91:5a:14:85:4a:ba:e3:
         5a:88:45:33:43:0d:34:ce:d7:54:8c:4e:67:fa:45:43:07:01:
         2e:d2:9c:1e:17:93:7b:7b:35:d3:90:c7:59:04:c4:a9:8e:58:
         3e:8a:72:c9:af:88:e5:d0:b5:99:f3:9f:b3:c6:b1:fc:77:38:
         cf:7e:47:69:21:84:21:f9:17:57:d6:7a:98:93:0d:fd:4e:d5:
         5c:b8:3d:28:02:05:b9:51:dd:05:3e:33:bd:d8:ce:ae:b4:82:
         53:58:45:41:ca:b6:58:7d:14:b5:27:fd:7a:40:77:b4:97:74:
         d1:ce:27:db:ae:91:41:19:77:bc:fb:8d:68:1c:be:cf:63:a8:
         28:43:1a:6f:44:33:60:cd:43:21:b9:53:e9:b4:bf:34:f5:e8:
         23:6b:4c:18:3b:aa:32:93:9c:67:bd:58:c1:39:e6:89:2c:94:
         a7:2e:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:52:42 2025 by rpki-client