Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File:                     fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier:          pimB2xof2rdoedSEzws+5JBWrcteAVn1SuLxZgAXL+0=
Subject key identifier:   98:F2:A4:E5:88:FD:BC:69:D7:D1:EB:02:8D:04:3B:D1:A2:19:D8:B6
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer:       /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial:       01992255AE96F8569BC6356C575EC2EFAF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number:          05AE
Signing time:             Sun 07 Sep 2025 04:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:04 +0000
Files and hashes:         1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: qvCZ4u6slD75djWnDfeOIPaHoCZq/erXf5OfCAZBFEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:ae:96:f8:56:9b:c6:35:6c:57:5e:c2:ef:af:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
        Validity
            Not Before: Sep  7 04:01:04 2025 GMT
            Not After : Sep  8 04:01:04 2025 GMT
        Subject: CN=98f2a4e588fdbc69d7d1eb028d043bd1a219d8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:66:8c:5f:3f:3f:7e:6b:6f:1f:74:47:0f:
                    35:f4:81:30:f6:70:8b:0e:96:49:b4:15:23:68:b4:
                    62:12:4c:0c:9e:4c:ad:77:15:d5:81:00:1e:2b:f7:
                    e1:cf:14:b3:6a:d5:a4:ef:0f:84:6a:d2:80:ac:24:
                    a5:de:c8:70:8e:de:09:a3:35:4e:61:4e:3a:51:03:
                    3c:85:c3:50:8a:b4:ea:5d:21:36:0c:1c:96:de:c1:
                    f9:7c:ad:32:b9:a6:36:42:eb:f5:b6:11:aa:41:56:
                    c4:5d:4d:78:05:2f:29:ea:3e:c5:f3:87:71:46:20:
                    8e:43:27:a6:a5:4c:0c:3d:73:b4:32:e4:a9:a9:0b:
                    76:23:2b:4d:6b:13:28:7f:d0:7d:5e:de:9d:76:2d:
                    f9:4c:85:26:35:e3:9f:6d:c8:1f:7e:f6:4e:d8:b5:
                    89:aa:2c:cc:d0:83:18:81:86:ba:a5:b9:c2:61:61:
                    d7:1f:0f:1b:1c:6e:27:d9:30:bd:50:5b:b2:2a:33:
                    f5:02:50:35:5d:66:c0:32:1f:78:6e:b6:42:63:f9:
                    a6:b8:04:20:84:56:b4:5e:e8:57:a2:02:f4:31:ac:
                    bd:aa:d2:98:b7:f3:38:39:c3:04:a4:92:03:62:fe:
                    63:b0:cd:d8:a2:67:35:0d:77:59:80:a3:e3:1f:e7:
                    e7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F2:A4:E5:88:FD:BC:69:D7:D1:EB:02:8D:04:3B:D1:A2:19:D8:B6
            X509v3 Authority Key Identifier:
                keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c1:ef:05:f3:44:ed:a8:b3:06:b4:4b:ad:d5:43:0e:84:22:
         ec:04:a8:94:21:e1:88:a8:f5:a2:2f:06:43:e5:6f:02:1c:40:
         40:3c:0d:d5:07:04:83:b3:0a:15:03:00:03:99:d6:d8:7c:63:
         41:86:11:ae:6d:55:49:07:c7:d7:bf:43:e7:3e:26:9c:d4:ae:
         d2:34:45:c7:01:06:46:09:b7:ac:50:56:a0:60:a9:8f:4f:aa:
         63:5f:e2:5d:47:64:ff:a0:50:27:7f:1e:81:cb:95:8d:46:39:
         a5:b7:ba:d4:03:69:f5:99:fe:c6:17:c7:a2:c7:ae:e0:25:da:
         4e:dd:28:e8:45:34:42:cc:5a:03:de:06:cf:0a:3a:69:e4:00:
         f0:3d:1d:04:33:d4:0a:39:c7:c8:76:a0:b3:64:15:05:d9:9d:
         3c:d2:f3:44:8f:3a:dd:a5:cd:40:ad:c0:fd:ed:98:34:f0:a0:
         a6:b6:81:3e:7e:74:25:ad:c5:c7:5f:5f:dd:ed:18:66:8b:33:
         01:7f:06:41:87:b2:72:f0:37:21:82:42:c5:2c:5f:dd:74:dc:
         3a:54:c9:1e:eb:d5:30:2e:44:70:45:84:2f:ce:f0:14:7b:0e:
         6f:36:bf:d8:d6:5f:11:7f:ac:f6:22:25:10:c7:99:34:29:ee:
         bd:97:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:33:01 2025 by rpki-client