Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File:                     _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier:          gKVkj47Oo7QyT226jKWtTxAYkCAVdOLvtAhvbn5f+x8=
Subject key identifier:   EA:F4:58:A8:DD:C0:3E:A8:EA:63:DD:02:70:D9:BD:D6:F0:DE:36:C5
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer:       /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial:       019A1271C2000B735F53CBF2B59812AE0E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number:          0DF6
Signing time:             Thu 23 Oct 2025 19:00:36 +0000
Manifest this update:     Thu 23 Oct 2025 19:00:36 +0000
Manifest next update:     Fri 24 Oct 2025 19:00:36 +0000
Files and hashes:         1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: M4nhZ16Yn+0hUTQhO5pJ3a1TDNWEzXCBDTJs1A9IaUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:12:71:c2:00:0b:73:5f:53:cb:f2:b5:98:12:ae:0e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
        Validity
            Not Before: Oct 23 19:00:36 2025 GMT
            Not After : Oct 24 19:00:36 2025 GMT
        Subject: CN=eaf458a8ddc03ea8ea63dd0270d9bdd6f0de36c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a8:e6:b5:cd:ca:c1:39:86:18:e9:6f:f4:91:
                    88:a1:f4:be:e1:00:74:c2:55:b7:94:b0:4c:5a:bc:
                    0e:10:59:68:ac:4c:d6:a8:4f:b1:d7:c3:51:38:c2:
                    32:d1:e2:f3:ec:71:81:b2:be:01:ed:18:00:c0:9d:
                    1e:f6:c2:95:2e:90:da:fa:cd:04:89:c7:38:a9:12:
                    56:07:31:d8:af:27:de:f8:95:5e:1a:dc:70:73:8e:
                    bd:80:54:5a:3e:73:29:a4:c6:44:a6:c3:50:f0:30:
                    69:fb:23:19:72:40:4a:0f:fa:0a:59:b5:b1:a9:ce:
                    55:d9:c8:43:94:d1:40:71:77:93:e1:64:31:d8:7e:
                    06:c0:f5:8b:4f:68:85:d5:1c:46:d9:fa:bd:0d:23:
                    ab:25:d8:ac:87:a2:a5:d2:67:71:46:6c:ba:23:8a:
                    7b:26:28:a7:ef:db:73:c9:32:d6:c2:0e:64:7a:bb:
                    4c:78:10:00:3c:1c:84:8b:11:e9:54:65:55:cf:63:
                    d8:d7:b6:1d:28:c2:11:4f:48:ba:6a:c3:14:15:b9:
                    f1:df:fc:1f:af:ef:75:97:1e:e9:9d:88:82:e2:7a:
                    f3:b6:22:83:e9:72:39:35:57:a2:77:25:69:7c:08:
                    ea:0c:fe:8e:d3:2a:41:bd:49:8d:2d:4a:ed:d5:b0:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F4:58:A8:DD:C0:3E:A8:EA:63:DD:02:70:D9:BD:D6:F0:DE:36:C5
            X509v3 Authority Key Identifier:
                keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:88:f1:2b:1f:54:12:95:a8:ce:59:82:48:0b:23:f0:39:01:
         6c:aa:77:72:10:54:1b:55:bd:d2:34:c3:79:94:7b:63:79:28:
         e9:87:b4:22:27:15:42:12:d3:c3:ae:72:5a:e4:cf:12:8b:d2:
         21:b1:47:fa:a2:b5:33:99:29:77:61:4e:2b:0e:2d:68:e5:85:
         e8:f2:34:52:78:7d:81:fa:0f:1b:e6:67:b7:72:23:b4:99:6a:
         49:a7:d7:0c:0e:5f:b3:5e:85:86:91:0b:3a:11:55:f7:17:81:
         d4:a5:57:1e:fb:2c:53:55:68:c3:d2:3a:56:1c:2a:5c:b6:26:
         d3:09:2c:f5:ff:93:75:c8:85:00:5d:9b:2f:83:45:5f:8f:6e:
         7e:b0:86:6c:da:ba:d8:23:18:e4:e3:a4:8e:bd:52:92:f5:70:
         55:28:0b:69:40:c0:5b:7b:e7:12:2d:73:0f:06:5e:51:b0:cd:
         30:c4:01:51:73:2d:98:1b:01:ff:05:cd:2b:da:ae:1e:4b:65:
         43:7c:a6:1a:57:3b:46:6f:b7:bc:09:d5:39:68:2b:6e:42:c6:
         31:3d:46:7f:9c:14:2c:45:fa:83:cb:21:05:2d:62:8e:93:73:
         06:6b:16:87:cc:76:06:20:81:5f:77:b3:02:87:5c:05:25:c0:
         3e:18:00:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 03:16:03 2025 by rpki-client