Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File:                     fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier:          ZsscBE8CyozI4CZM9l0RtmxWBT+GTVVBK10pB1APoyU=
Subject key identifier:   20:EE:7F:64:50:70:8D:84:66:CB:2C:0E:98:B1:D0:2F:EA:0C:27:46
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer:       /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial:       0199240D516CD992C429700C889560E1CE8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number:          0FEE
Signing time:             Sun 07 Sep 2025 12:01:16 +0000
Manifest this update:     Sun 07 Sep 2025 12:01:16 +0000
Manifest next update:     Mon 08 Sep 2025 12:01:16 +0000
Files and hashes:         1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: 1+RqA3lAomXo9tcrM8roXjkRauBASvEYlEMJ6SENMDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:51:6c:d9:92:c4:29:70:0c:88:95:60:e1:ce:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
        Validity
            Not Before: Sep  7 12:01:16 2025 GMT
            Not After : Sep  8 12:01:16 2025 GMT
        Subject: CN=20ee7f6450708d8466cb2c0e98b1d02fea0c2746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:13:bf:60:15:c8:ac:17:b1:8c:f7:58:9d:9c:
                    6f:b9:e1:6f:d1:b3:72:64:16:8c:c6:bc:61:2a:6d:
                    07:12:80:1c:42:41:25:bd:01:37:c7:16:92:ed:7f:
                    7c:a7:9d:46:7b:c6:18:9c:c5:f7:bc:61:07:4f:f1:
                    23:db:5c:5c:9e:ba:17:5b:a7:f4:61:0e:1f:cc:4f:
                    5b:48:e1:e0:47:95:05:c0:e7:7b:00:bf:fa:41:ba:
                    13:a2:9c:08:5b:3f:2b:a0:48:56:81:87:94:a7:05:
                    06:6c:b8:c4:d8:b2:bf:0e:36:9b:8c:4f:4d:92:ce:
                    45:64:b2:8b:0e:89:89:87:80:69:1c:c2:db:a6:53:
                    36:dc:c2:03:70:52:d9:65:ad:3f:71:17:96:ed:17:
                    31:67:1c:a5:93:d0:e7:ed:3d:7e:df:af:3e:8d:02:
                    58:b3:16:1e:18:3c:7c:5f:f9:d6:52:ad:80:57:16:
                    2a:35:05:ce:03:01:71:75:e4:ed:3e:64:40:3c:b7:
                    c4:38:b5:04:09:3d:7d:b3:99:c1:bb:5e:26:58:51:
                    65:3f:3a:5e:bd:1c:73:a2:70:77:a7:eb:67:6e:98:
                    3d:22:8c:ae:1c:40:56:06:5b:47:c1:80:26:e8:c4:
                    fe:a1:46:e8:c7:4e:e6:0e:e9:a1:e1:95:89:c0:b9:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EE:7F:64:50:70:8D:84:66:CB:2C:0E:98:B1:D0:2F:EA:0C:27:46
            X509v3 Authority Key Identifier:
                keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:9f:e9:fc:6d:5b:c9:7b:1a:cd:4c:84:09:92:c5:96:f6:3d:
         65:d8:37:d2:77:5b:6e:fa:9a:3b:fc:48:62:c3:f5:f9:dc:d8:
         3b:f4:81:86:8e:90:5e:a5:4c:42:38:0a:6b:ca:17:e6:2e:36:
         c1:e9:2a:83:6c:ee:7d:4a:ad:c9:90:3e:00:39:b7:8c:65:2e:
         01:70:3a:de:31:56:10:88:5e:dd:92:0e:24:10:34:ec:17:69:
         c4:a4:20:13:dd:b1:38:c1:c7:a4:76:89:c2:b6:d5:3d:1a:b8:
         0a:65:d1:8f:da:8c:45:32:3f:85:38:16:d7:16:13:db:bc:ea:
         fb:8c:f2:bb:9d:3b:2c:17:0a:99:b5:0c:94:7c:7b:06:a3:dd:
         64:c6:24:5c:12:e5:b4:39:6a:a2:54:70:16:26:31:65:91:9b:
         fb:b7:a2:b2:76:d6:65:5b:48:bc:15:09:6b:2a:ca:f2:e5:d0:
         e8:c6:be:fb:aa:15:c2:f8:f9:ea:a5:8f:e3:4c:08:72:1c:5d:
         ab:04:d1:ae:41:af:29:90:f8:85:76:6c:52:a1:53:06:11:56:
         f7:2d:be:e6:27:a0:ee:47:24:57:4b:a0:56:c8:40:0a:8c:a9:
         1a:51:0b:13:65:0e:ea:cc:6e:c6:cd:2f:e0:2d:f2:52:1a:b9:
         e3:77:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:15 2025 by rpki-client