Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File:                     fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier:          5st2uOGiYTbulfiN64Dr3Clp9a9OxmeqgkKCDe0aR7s=
Subject key identifier:   5E:2A:FD:EF:24:92:56:43:E7:E6:C8:0F:42:FA:5F:26:BF:97:74:AD
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer:       /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial:       0199228C7262C7EA7C8E77F63E0C45669BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number:          1388
Signing time:             Sun 07 Sep 2025 05:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:53 +0000
Files and hashes:         1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: DMdxNpwSp3+MfMYSPIGTApX3NMQucflHeEgEoK0yIz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:72:62:c7:ea:7c:8e:77:f6:3e:0c:45:66:9b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
        Validity
            Not Before: Sep  7 05:00:53 2025 GMT
            Not After : Sep  8 05:00:53 2025 GMT
        Subject: CN=5e2afdef24925643e7e6c80f42fa5f26bf9774ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:6a:1d:9c:5d:ec:2f:50:c0:f6:d4:6c:a9:
                    fe:9f:51:18:4f:8e:d6:37:b3:ce:4c:a9:85:76:23:
                    56:b1:ef:8c:27:8b:5e:a3:d0:10:1c:40:f3:30:28:
                    18:ac:0e:d9:64:ca:fc:41:5c:d9:d8:eb:ec:70:d6:
                    eb:65:5b:22:2c:48:88:96:7b:89:07:5d:c4:bd:4c:
                    65:4f:da:01:a7:ae:c8:3c:42:37:a2:a4:71:ed:ae:
                    0b:87:18:18:03:50:3b:b0:8e:af:1f:ae:e4:64:45:
                    50:78:06:86:13:91:37:99:79:15:2c:95:4f:35:c0:
                    01:e0:ac:9f:57:e1:b6:db:08:2b:d8:cd:27:33:9d:
                    a0:ec:a5:93:1c:aa:ed:de:5e:09:39:a4:f4:29:fc:
                    59:36:e3:2b:63:8f:2c:b6:da:20:c6:f2:a3:53:a3:
                    e1:2b:6f:f2:d0:59:e4:20:3b:fe:c7:ef:c6:ca:b0:
                    cf:15:47:f6:9c:37:bc:16:ad:ea:8e:71:47:c5:6c:
                    d9:a5:f1:18:d0:30:29:62:c0:4a:d3:c2:87:91:a8:
                    a2:80:55:44:ff:7c:45:ab:d4:ba:01:89:fd:6d:c1:
                    11:3e:82:7b:24:2c:79:78:20:c4:1b:ff:a4:55:a8:
                    02:b8:98:3c:f8:43:65:f4:00:33:b4:a4:62:90:4c:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2A:FD:EF:24:92:56:43:E7:E6:C8:0F:42:FA:5F:26:BF:97:74:AD
            X509v3 Authority Key Identifier:
                keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:a5:a2:aa:fa:ae:50:10:58:3b:2c:bc:e6:f0:49:36:4e:0f:
         03:d8:bf:39:09:2f:18:f0:8c:70:83:5f:bf:f3:7a:c9:bd:be:
         60:79:09:56:df:3f:ee:ba:cf:11:3f:3e:fd:bc:38:ec:ff:64:
         b7:94:8e:8a:e8:91:f4:85:65:bb:c8:dd:a3:5d:b4:a3:60:86:
         7d:00:bb:1b:60:1c:b1:a6:d2:6c:70:df:27:ba:89:4e:e9:54:
         ac:97:19:6b:57:7a:f5:df:7a:6f:b3:8e:83:a2:73:a0:16:77:
         63:7b:5c:c5:dd:a4:2e:62:42:ec:4a:8c:65:f8:ff:43:6c:e7:
         78:d4:7b:25:42:9a:d6:f4:1a:c6:80:2d:03:f0:32:97:e6:35:
         c7:ee:48:3f:42:82:b5:12:5a:13:bb:a6:a0:d4:39:2b:8c:a0:
         1e:cb:c5:52:67:f8:7f:b1:cb:f0:b6:5e:d1:5b:5e:b9:fb:9f:
         c9:1e:d8:7d:8d:7b:8f:c7:34:1a:03:86:16:bf:a5:02:56:f4:
         30:3a:9f:46:fc:19:8f:8d:d1:6e:03:47:b9:27:54:f6:f2:a3:
         c8:99:19:a5:57:c8:8d:70:b8:20:29:37:45:2a:35:f8:12:b5:
         a4:81:a2:9a:9a:4a:66:78:c9:69:d0:d5:d9:7d:c4:38:80:fb:
         7d:61:42:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijHJix+p8jnf2PgxFZpvGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjQ3Yjk4MWQzNDRmNmJjNGMxZWI0MjMzMWQyMzI4Mzgx
NjEzN2MwHhcNMjUwOTA3MDUwMDUzWhcNMjUwOTA4MDUwMDUzWjAzMTEwLwYDVQQD
Eyg1ZTJhZmRlZjI0OTI1NjQzZTdlNmM4MGY0MmZhNWYyNmJmOTc3NGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVxqHZxd7C9QwPbUbKn+n1EYT47W
N7POTKmFdiNWse+MJ4teo9AQHEDzMCgYrA7ZZMr8QVzZ2OvscNbrZVsiLEiIlnuJ
B13EvUxlT9oBp67IPEI3oqRx7a4LhxgYA1A7sI6vH67kZEVQeAaGE5E3mXkVLJVP
NcAB4KyfV+G22wgr2M0nM52g7KWTHKrt3l4JOaT0KfxZNuMrY48sttogxvKjU6Ph
K2/y0FnkIDv+x+/GyrDPFUf2nDe8Fq3qjnFHxWzZpfEY0DApYsBK08KHkaiigFVE
/3xFq9S6AYn9bcERPoJ7JCx5eCDEG/+kVagCuJg8+ENl9AAztKRikEwjgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4q/e8kklZD5+bID0L6Xya/l3StMB8GA1UdIwQY
MBaAFH4ke5gdNE9rxMHrQjMdIyg4FhN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlSN21CMDBUMnZFd2V0Q014MGpLRGdXRTN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny84M2ZlMDktYjUwZi00MmUwLTk5NWQt
NGRhZmY0MzUwMDAxLzEvZmlSN21CMDBUMnZFd2V0Q014MGpLRGdXRTN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny84M2ZlMDktYjUwZi00MmUwLTk5NWQtNGRhZmY0MzUwMDAx
LzEvZmlSN21CMDBUMnZFd2V0Q014MGpLRGdXRTN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfKWiqvqu
UBBYOyy85vBJNk4PA9i/OQkvGPCMcINfv/N6yb2+YHkJVt8/7rrPET8+/bw47P9k
t5SOiuiR9IVlu8jdo120o2CGfQC7G2AcsabSbHDfJ7qJTulUrJcZa1d69d96b7OO
g6JzoBZ3Y3tcxd2kLmJC7EqMZfj/Q2zneNR7JUKa1vQaxoAtA/Ayl+Y1x+5IP0KC
tRJaE7umoNQ5K4ygHsvFUmf4f7HL8LZe0VteufufyR7YfY17j8c0GgOGFr+lAlb0
MDqfRvwZj43RbgNHuSdU9vKjyJkZpVfIjXC4ICk3RSo1+BK1pIGimppKZnjJadDV
2X3EOID7fWFCzQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:27 2025 by rpki-client