Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File:                     m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier:          txWOgBLz818CK+27QBJpSv6/74LY0NXlcJeizOc1Nqc=
Subject key identifier:   FA:1B:08:3F:88:06:3A:36:6E:1C:DC:1A:7A:1E:59:FE:73:EB:33:9A
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer:       /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial:       01989ECCFAA04CDD9F131372A055BCEFF657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number:          14AE
Signing time:             Tue 12 Aug 2025 15:01:30 +0000
Manifest this update:     Tue 12 Aug 2025 15:01:30 +0000
Manifest next update:     Wed 13 Aug 2025 15:01:30 +0000
Files and hashes:         1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: WQL2+Ev00DXbwHO0SxAybBAkcPQVbVedaTHeDhnandE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 13:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9e:cc:fa:a0:4c:dd:9f:13:13:72:a0:55:bc:ef:f6:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
        Validity
            Not Before: Aug 12 15:01:30 2025 GMT
            Not After : Aug 13 15:01:30 2025 GMT
        Subject: CN=fa1b083f88063a366e1cdc1a7a1e59fe73eb339a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1e:bb:7b:fe:c4:78:b7:50:0a:51:55:b4:91:
                    b0:b6:3c:ac:6a:ab:56:53:e3:f6:1b:0a:26:c8:f5:
                    a4:09:e8:87:1d:d4:ef:38:d4:55:5f:9b:bc:cc:fd:
                    f2:44:2a:96:57:cc:57:52:18:49:9f:aa:cd:66:8c:
                    e9:29:13:8c:62:ad:87:e3:0d:7e:aa:d6:ea:34:52:
                    d5:d8:59:7e:5c:20:b3:3e:d9:4a:70:0b:d3:ef:8b:
                    ba:68:ef:b0:26:48:a7:4e:4d:77:17:bb:1a:ef:cc:
                    de:d5:6e:3f:da:9d:4c:ef:ef:8f:cb:5c:e7:02:0a:
                    8c:9c:9c:53:72:87:f6:37:a6:b2:a2:c3:59:96:eb:
                    e5:27:98:d8:9c:6d:c1:4a:a2:21:07:6e:36:01:43:
                    6c:0e:81:c2:a0:51:1f:cf:bd:5e:13:cd:a2:cc:c9:
                    7f:00:96:85:18:ff:7b:9f:fe:ab:56:0f:16:1c:32:
                    b1:db:67:c9:49:b8:65:ca:c0:7b:74:b9:59:e8:64:
                    c5:fe:84:a7:c1:89:44:e3:a7:41:b7:5e:41:15:69:
                    ad:aa:cc:32:9d:f8:73:d9:d6:7c:65:30:dc:bd:28:
                    78:3a:3b:6d:ef:71:19:37:36:c1:53:90:bf:6a:4e:
                    00:88:7c:29:f7:a2:b4:61:fa:0d:40:4f:14:af:a0:
                    df:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:08:3F:88:06:3A:36:6E:1C:DC:1A:7A:1E:59:FE:73:EB:33:9A
            X509v3 Authority Key Identifier:
                keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5f:2a:00:9c:df:eb:43:6a:cb:89:75:9e:f9:02:8b:7e:1c:
         f3:23:26:8b:03:31:95:6c:d5:99:61:dc:7f:43:f7:a8:ff:d5:
         a5:21:31:e7:d2:c8:ca:9f:7f:44:ab:f9:e4:e0:a6:73:58:f3:
         ab:b9:dc:69:cf:78:a9:2d:11:48:de:d6:db:cc:d3:7c:ba:2c:
         96:4b:db:90:b8:14:e4:ae:ad:ed:10:57:4c:b9:c1:c2:90:07:
         40:66:61:be:95:47:7a:fe:2c:62:d5:72:92:e9:ba:e7:f4:d6:
         dc:ef:35:88:83:06:a0:1f:a7:8c:a3:4d:13:ea:b1:2c:ba:dc:
         e3:6a:08:d4:53:76:ed:de:49:ad:07:06:2a:69:3f:62:43:0f:
         82:c4:e6:42:e3:f9:92:d7:c8:27:14:86:ec:b2:3d:10:5c:53:
         35:27:ef:dd:80:86:f4:40:44:30:7b:90:51:37:ca:ed:08:44:
         6c:7c:81:d8:d0:55:ed:e5:32:bb:7e:f8:33:76:cd:52:b6:a1:
         a6:0a:dc:11:ef:f3:b2:9a:3d:95:b9:ca:ea:0e:39:4b:83:ce:
         ed:80:56:e0:3f:2d:9d:07:97:b7:fd:02:36:70:2a:2e:fd:23:
         b9:a3:54:96:c6:04:68:e6:fe:1b:50:57:04:4d:2c:bf:e2:ce:
         1f:77:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:22 2025 by rpki-client