Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File:                     FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier:          jL2gOW66CXhctUCDPfWt0hhWbHcHfI08V/u7JVLq010=
Subject key identifier:   BC:82:9C:C6:24:D0:EB:D8:F4:24:E5:31:19:3D:53:70:88:23:FA:4D
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer:       /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial:       01988B0FA20C9254A958F87CD24F43B1B158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number:          0D83
Signing time:             Fri 08 Aug 2025 19:01:54 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:54 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:54 +0000
Files and hashes:         1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: /MsPy/uL0EVNGTREJ78LkmoL8Ps2hgriPxc0BCNGdfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:a2:0c:92:54:a9:58:f8:7c:d2:4f:43:b1:b1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
        Validity
            Not Before: Aug  8 19:01:54 2025 GMT
            Not After : Aug  9 19:01:54 2025 GMT
        Subject: CN=bc829cc624d0ebd8f424e531193d53708823fa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:97:73:0d:2c:bc:53:83:7e:84:4d:eb:fc:
                    a4:fe:2c:fe:19:44:38:68:89:a3:fb:f6:d9:9d:78:
                    c7:d3:9e:b6:9d:11:7a:bb:ac:89:8d:97:09:07:24:
                    c4:4e:fc:c2:86:97:91:c7:cd:0c:6a:33:16:e0:a3:
                    3f:97:19:82:fd:d8:06:6e:51:19:ee:60:90:5f:87:
                    00:2b:80:94:47:99:9c:ca:a3:85:83:50:b0:fd:f6:
                    fb:4b:d2:14:9b:99:1d:52:c1:6b:da:ae:54:e6:87:
                    9f:98:ee:8e:06:eb:0a:14:cc:52:76:e5:de:68:e2:
                    45:af:80:bc:dc:5b:6b:89:de:76:99:08:2e:f1:55:
                    0a:de:cb:36:3d:bd:b5:60:0e:15:87:ba:d8:f4:14:
                    73:f0:59:53:58:56:f2:62:32:b9:ad:52:a9:b8:c1:
                    52:20:3d:b0:ae:d1:a2:ba:6e:a5:66:41:59:3d:0f:
                    ff:13:c5:08:96:8e:2c:ea:90:1b:cf:da:75:f8:4f:
                    4b:2b:19:5d:a3:fd:81:f8:d4:3e:41:a5:88:c1:0b:
                    f5:7f:2e:48:72:28:2d:8f:7f:39:15:26:3f:2a:bc:
                    34:78:e9:f6:77:c9:cc:e0:7b:5d:d5:d6:fc:7b:43:
                    80:4c:bb:43:07:4f:0c:d3:3b:ad:3f:6d:fb:0c:73:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:82:9C:C6:24:D0:EB:D8:F4:24:E5:31:19:3D:53:70:88:23:FA:4D
            X509v3 Authority Key Identifier:
                keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:42:04:39:2c:57:d5:a6:e1:74:87:3f:42:22:5c:2f:de:3f:
         cc:3e:23:42:3a:00:0e:be:10:1d:7c:2c:95:52:a8:26:82:1b:
         dd:39:30:4a:49:0b:a3:56:48:a4:ce:7a:50:fc:12:c5:c6:9e:
         20:a2:1d:f5:ad:b6:e2:fc:b9:23:ac:7b:e8:20:6d:77:7c:7b:
         57:c3:f1:89:1a:e2:7f:dc:e8:8d:f4:32:14:6f:8a:4d:e5:02:
         44:c7:a6:73:b2:9c:1f:92:60:48:d1:d3:47:59:10:ea:6c:00:
         fa:a2:e9:d4:88:56:0f:90:aa:f1:a3:60:95:cd:93:4d:d1:51:
         69:d6:45:26:97:23:41:8d:bd:9e:85:9d:84:53:5c:c0:6e:1d:
         e6:34:a5:92:bf:6a:fb:9f:bd:ee:29:00:fe:c8:f2:27:14:50:
         71:d7:83:e5:36:f9:6d:19:36:28:80:18:0d:20:4a:ff:88:51:
         cc:64:43:0c:e2:32:71:e6:fc:56:ee:e9:2e:b9:38:31:f5:a8:
         d3:b2:85:40:b9:9d:0f:d3:3b:38:b7:a6:0a:95:8b:30:80:50:
         d2:c6:72:f2:64:15:6c:06:ec:d9:a2:dc:8e:1e:1e:6a:7e:a4:
         6b:79:5b:12:01:89:5a:12:3c:09:ca:31:c5:1b:71:79:69:b8:
         93:55:b3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:30 2025 by rpki-client