Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
File:                     FycWA_qPBq-kSoeCBl81-WWcft0.mft (raw, json)
Hash identifier:          KU/Mb+qD8fyAEqDmh4bPncfYQ4I5svb0K5Cqxmf0LhU=
Subject key identifier:   9C:7B:8C:A8:A8:6C:13:C1:C3:30:C2:DC:F2:97:A9:9B:7F:C9:A7:92
Authority key identifier: 17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD
Certificate issuer:       /CN=17271603fa8f06afa44a8782065f35f9659c7edd
Certificate serial:       0199228C658270652A4B600E3D00E67E68F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
Manifest number:          020D
Signing time:             Sun 07 Sep 2025 05:00:50 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:50 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:50 +0000
Files and hashes:         1: FycWA_qPBq-kSoeCBl81-WWcft0.crl (hash: BwXzhLsmPg74sSOL5012vqI7mVBkY4MMUgAmHhHm3Is=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:65:82:70:65:2a:4b:60:0e:3d:00:e6:7e:68:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17271603fa8f06afa44a8782065f35f9659c7edd
        Validity
            Not Before: Sep  7 05:00:50 2025 GMT
            Not After : Sep  8 05:00:50 2025 GMT
        Subject: CN=9c7b8ca8a86c13c1c330c2dcf297a99b7fc9a792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:17:b1:fd:c8:5b:4e:8e:a3:ee:82:ab:17:87:
                    c5:ef:fd:aa:2e:42:18:ac:f0:86:cb:be:47:4c:11:
                    e8:1b:f4:c8:99:dc:d4:05:f1:96:7f:23:23:fc:37:
                    5b:40:9e:ba:25:89:db:b8:10:7b:93:a3:8e:85:50:
                    cb:d3:3f:01:2d:44:1e:35:26:51:ac:f8:01:d4:51:
                    29:f2:d3:4a:19:1b:db:6e:e6:c9:d7:d8:53:33:93:
                    fd:31:1a:d5:08:ed:ea:06:0a:a8:cc:ff:33:02:b6:
                    da:c6:3b:29:b8:09:0d:68:78:1a:d4:90:ac:5c:c1:
                    d4:6d:5a:75:1f:1e:19:0e:98:a8:16:eb:d0:16:74:
                    fd:73:9c:5a:3c:be:7b:db:89:f6:83:e9:76:11:e9:
                    14:6e:ec:4e:b3:54:28:c0:c6:4b:f5:ee:84:34:a4:
                    99:31:0d:35:1d:61:79:b2:1d:e0:aa:c5:b2:4d:6c:
                    b1:20:95:bd:8c:bf:5f:b2:df:1d:4d:b2:d0:da:58:
                    ce:10:e0:5c:4f:4f:98:44:1d:df:a1:b8:e0:0e:d3:
                    fc:d8:92:67:61:5f:b2:ea:6e:33:42:ce:0c:8f:18:
                    8f:1b:d9:09:b9:33:23:7e:dc:e1:9c:4c:8b:c6:ac:
                    6f:be:1f:38:88:e5:1f:88:05:01:16:cf:e1:fb:9e:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7B:8C:A8:A8:6C:13:C1:C3:30:C2:DC:F2:97:A9:9B:7F:C9:A7:92
            X509v3 Authority Key Identifier:
                keyid:17:27:16:03:FA:8F:06:AF:A4:4A:87:82:06:5F:35:F9:65:9C:7E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycWA_qPBq-kSoeCBl81-WWcft0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/37e884-b99e-4298-9789-53ce01655322/1/FycWA_qPBq-kSoeCBl81-WWcft0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ce:3c:26:79:44:ff:33:9a:f6:35:db:f1:8a:a4:a5:43:c2:
         e6:d1:0c:0f:5b:a1:3d:c5:47:54:4e:6d:d8:fa:27:8e:b1:ae:
         9f:51:45:81:38:e3:b9:e1:f7:f4:71:fb:05:9a:42:54:58:ea:
         f9:95:fd:53:bc:6e:f5:25:4c:4b:f4:91:4d:09:9b:80:ec:b8:
         20:27:db:d4:cb:07:d8:5b:92:4c:4d:7d:c9:5d:6d:89:a3:f4:
         81:37:c5:87:a9:f6:92:6b:a4:77:78:7b:71:bb:97:a0:fd:43:
         73:4e:94:cf:8c:b6:0a:e8:31:13:39:45:b6:59:35:f6:99:59:
         7e:ca:e3:3c:d8:b4:d6:5b:1e:b6:6c:d7:fe:77:ab:58:90:5f:
         74:e9:79:0b:63:a6:54:9f:b5:d7:4d:79:c8:b2:7e:6a:1f:89:
         5c:65:2b:9c:03:c7:1c:64:6c:a8:8a:59:b2:ed:a9:fe:c9:11:
         74:26:a8:27:d7:ce:4f:09:1c:ec:db:bd:15:e1:ba:5c:e4:7b:
         f1:f8:44:d8:44:30:68:ea:43:cb:c5:49:14:e3:9e:fa:21:e2:
         6a:7d:d0:82:da:98:86:83:e2:8b:b7:09:8c:c4:f3:92:8d:a7:
         56:3f:9e:b1:af:59:b6:98:64:3a:96:97:7c:f8:e5:37:bd:92:
         7e:39:92:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:02 2025 by rpki-client