Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File:                     n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier:          mjbxkQyep16Z9t7ye7oMdkNoSlcA4OCwu62dDwYVQPI=
Subject key identifier:   76:C8:A9:E5:54:42:E6:FE:E2:D9:D2:2F:61:F5:1F:92:1A:AF:1D:6A
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer:       /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial:       019922FAE6201CBCF4731DA35D3222B8F3A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number:          1435
Signing time:             Sun 07 Sep 2025 07:01:32 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:32 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:32 +0000
Files and hashes:         1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: w2tZWKRVswYTbjTjHZjFFlhA9OHYHxWUdtt18KRkm1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:e6:20:1c:bc:f4:73:1d:a3:5d:32:22:b8:f3:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
        Validity
            Not Before: Sep  7 07:01:32 2025 GMT
            Not After : Sep  8 07:01:32 2025 GMT
        Subject: CN=76c8a9e55442e6fee2d9d22f61f51f921aaf1d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:d6:ed:7a:87:09:a4:76:a8:56:0e:23:62:
                    b8:55:2d:b5:8f:7c:04:ca:ca:61:e5:8b:e8:e3:12:
                    34:47:69:ee:26:8d:a3:8c:15:e2:88:e2:6c:f8:b5:
                    43:63:f6:9b:3c:77:46:e7:65:00:41:35:26:33:4b:
                    98:7c:18:e9:6c:da:cf:17:b7:17:6f:db:ac:da:4a:
                    0a:42:92:b9:5c:d5:8d:68:05:6a:26:ba:f6:fd:52:
                    94:1c:14:3c:01:c4:37:aa:9f:f9:60:f2:c1:13:cb:
                    ba:88:b2:d6:2c:bc:02:07:e9:2f:be:4d:c3:2c:64:
                    c4:cf:3e:d9:c8:7e:bb:e5:41:c2:77:bf:5e:32:1d:
                    a1:6d:64:b1:9d:bf:65:1c:ae:4e:d3:73:b9:d2:6d:
                    f6:fe:54:9e:bd:51:3d:9f:f7:ef:4e:77:f7:a5:a2:
                    6a:be:84:3e:37:81:84:a0:3e:38:80:a5:41:52:16:
                    52:19:2a:72:2d:70:03:3b:09:30:fc:7b:ea:f0:63:
                    d5:44:ec:5f:fe:9e:e2:1a:4f:29:8b:2f:e3:d9:34:
                    e6:4c:bd:16:05:bd:82:c2:ca:d0:c0:50:76:c0:e6:
                    b8:05:a1:85:cb:5f:9b:dd:94:24:b4:6d:4d:f7:5c:
                    aa:25:e8:ca:6d:15:a0:3c:a0:87:d9:f6:0b:66:a4:
                    40:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:A9:E5:54:42:E6:FE:E2:D9:D2:2F:61:F5:1F:92:1A:AF:1D:6A
            X509v3 Authority Key Identifier:
                keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:a2:42:78:1c:16:4c:12:84:a1:3d:c1:b9:f3:13:d2:12:
         ab:1b:a6:1f:ff:22:72:f8:e1:e9:45:6c:52:11:10:aa:3a:c5:
         6d:76:dd:75:2a:f2:38:26:6b:7f:d8:21:be:6e:ac:0b:1f:a9:
         10:d7:0b:3b:05:8f:97:57:ab:41:4c:ec:20:99:50:85:4d:52:
         6c:77:97:75:96:5b:66:98:2f:53:16:b5:f5:b3:00:ed:ad:49:
         46:ba:de:5f:62:2b:0b:9d:50:e5:36:de:6a:4d:16:67:ce:b2:
         a2:96:e8:a3:19:bd:f0:d0:7c:0d:2d:c7:53:b2:9a:76:ea:8c:
         0e:78:a3:17:e2:01:27:1d:2b:0d:f0:b2:1e:c9:72:a4:66:3d:
         a9:a9:61:97:3c:63:af:37:5d:6c:cd:cd:0d:b2:78:3f:66:a4:
         3b:19:f1:9b:39:74:2a:52:fa:ff:da:89:ae:a6:7d:17:5e:5b:
         00:83:0c:23:ec:d3:60:a2:56:7d:d6:e8:db:d2:e9:43:35:ae:
         d3:13:01:07:02:72:d4:3d:e2:c9:18:d4:73:1c:58:8d:d6:c5:
         39:8e:21:e4:28:19:a0:b3:42:cd:f2:1a:da:29:18:23:b5:25:
         12:5f:43:ee:ce:5f:7c:70:24:ea:89:8c:a4:e3:bc:4e:4b:38:
         83:0d:50:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:16 2025 by rpki-client