Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File:                     fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier:          ZEB9RXPpVeoaWbN8BBiMCf1Ku41XZ0xGA6UjKqe/+so=
Subject key identifier:   62:64:E1:1D:93:47:4C:93:19:67:23:CF:CA:70:D7:97:A3:5F:F0:2F
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer:       /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial:       0199179B0C9C4B35F6863E2E1B594A149919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number:          0378
Signing time:             Fri 05 Sep 2025 02:01:01 +0000
Manifest this update:     Fri 05 Sep 2025 02:01:01 +0000
Manifest next update:     Sat 06 Sep 2025 02:01:01 +0000
Files and hashes:         1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: aCj8KXfZejiWwhXiDFlL/IwYpSbri7+qeyXcSNdtOVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:9b:0c:9c:4b:35:f6:86:3e:2e:1b:59:4a:14:99:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
        Validity
            Not Before: Sep  5 02:01:01 2025 GMT
            Not After : Sep  6 02:01:01 2025 GMT
        Subject: CN=6264e11d93474c93196723cfca70d797a35ff02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:83:bf:c1:53:99:ff:ca:6c:35:a6:09:34:
                    32:47:d0:d5:41:63:d9:4c:be:1f:0e:ae:61:6f:37:
                    d1:47:1c:e7:1c:7b:f5:29:9c:31:7c:a0:16:2b:87:
                    a5:f8:90:da:d5:c4:75:db:e2:dd:f0:51:cb:c5:ea:
                    ec:82:d2:10:2f:af:43:ca:f6:85:06:07:79:5a:34:
                    e8:22:e5:b4:38:7b:f7:a0:65:6f:c1:81:b6:31:3b:
                    be:70:72:28:69:a3:cd:13:50:82:bc:65:c7:c9:ef:
                    c3:9e:8f:a0:41:5b:98:a0:b6:c5:71:2f:6f:d7:c7:
                    8e:70:ad:7f:1a:3e:8c:6e:8f:8e:74:a9:5b:e7:6b:
                    75:c5:a6:f0:a4:a0:3e:f8:b3:9d:ad:f7:18:27:cd:
                    30:f3:fc:21:d1:bc:f7:2e:8c:4c:89:2e:2d:ab:1e:
                    1b:98:eb:56:f4:ca:94:94:44:e8:b9:88:13:49:e1:
                    fa:b7:5f:1c:63:ef:a5:3d:22:23:fc:9a:b6:51:6d:
                    29:be:64:24:ab:04:57:f0:cd:7a:42:59:19:f8:f0:
                    b2:01:64:d6:01:ca:38:e1:05:ad:35:6b:b2:86:27:
                    a5:07:6a:ea:9a:87:c6:65:4d:f1:d1:56:b7:95:94:
                    94:03:02:20:cf:6b:c3:1c:b6:88:6d:73:7c:43:28:
                    10:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:E1:1D:93:47:4C:93:19:67:23:CF:CA:70:D7:97:A3:5F:F0:2F
            X509v3 Authority Key Identifier:
                keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:73:18:71:25:fa:ca:6d:20:7f:22:d7:74:31:f5:3a:86:9f:
         f1:32:5f:7c:73:17:bb:8b:19:8f:b5:51:7c:e3:75:a0:92:6a:
         c9:1a:66:e5:3b:ad:b4:d9:40:e9:fe:bf:87:63:aa:2b:63:bf:
         66:16:39:65:72:be:be:86:ce:91:78:08:43:88:f6:3c:84:2a:
         6f:b6:33:3a:e7:c7:1b:6b:73:c4:e1:75:87:87:ce:1a:a4:91:
         40:8b:37:8e:e2:1c:28:d7:b2:d1:96:18:c0:c0:67:68:c9:49:
         3b:20:a6:ca:4e:c1:86:53:7c:82:fc:b4:2b:a4:07:a8:b8:23:
         e6:87:fa:53:37:3b:b3:f9:71:b8:e7:92:dc:d4:e2:3b:71:55:
         e8:79:e3:a6:06:f1:3e:a1:71:b6:f1:0b:5e:ac:98:d0:cf:94:
         87:55:46:9a:58:f5:23:00:01:2d:1c:42:19:b1:28:72:87:5d:
         98:3b:fa:8f:97:01:bc:5e:d5:4e:34:09:e8:66:1a:c6:ac:9a:
         b5:38:d8:83:2f:f8:b5:9e:9e:e3:89:00:8c:07:84:39:f9:c3:
         27:7b:83:33:7e:93:db:d4:47:87:25:04:be:78:7f:7b:f3:0b:
         4c:d9:cc:08:94:3f:60:69:c1:fa:1c:34:6a:c2:c0:ef:0d:95:
         a8:b7:43:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:39:24 2025 by rpki-client