Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File:                     fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier:          ZkDhbYgszmGjjivu7iqdge1hXUekj6OYTtHjsRNk2JA=
Subject key identifier:   1C:7D:22:1C:48:C5:6E:EF:59:52:B6:E7:56:40:DE:5D:38:0E:63:E3
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer:       /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial:       01987D8B51A2DE4B42189046ED6584160C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number:          1619
Signing time:             Wed 06 Aug 2025 04:02:18 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:18 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:18 +0000
Files and hashes:         1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: jKQOM5w3oeJTMLNanyIkkCSVVE7DwiVCY1D3u6hNFVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:51:a2:de:4b:42:18:90:46:ed:65:84:16:0c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
        Validity
            Not Before: Aug  6 04:02:18 2025 GMT
            Not After : Aug  7 04:02:18 2025 GMT
        Subject: CN=1c7d221c48c56eef5952b6e75640de5d380e63e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:0e:74:bd:ec:f0:9c:8a:58:4c:b2:22:37:
                    3e:c9:8b:c0:48:dd:09:6e:93:b3:4c:f8:51:c5:70:
                    4a:b3:19:a9:10:22:1c:86:f9:51:5b:ee:58:ae:a6:
                    66:36:ae:6a:d4:9f:5e:66:40:03:cc:fa:48:50:6d:
                    69:eb:e5:a4:ae:68:ac:31:a8:81:47:f9:c9:0b:d8:
                    db:0e:d0:24:93:52:16:57:5b:49:f8:83:41:8b:6c:
                    74:4e:20:bf:73:81:6d:96:4b:fc:02:c2:8d:ba:28:
                    57:10:20:1e:ff:13:79:3e:64:a3:b2:a1:a8:48:e1:
                    e9:4f:73:96:54:f2:73:c0:e6:a1:e1:0b:3a:99:07:
                    86:96:4b:33:58:42:71:f9:89:4e:6d:d8:9e:12:05:
                    c6:ff:69:4d:f2:86:47:39:89:0d:e6:f0:9f:bf:c8:
                    69:9d:3e:15:3f:00:f5:01:fb:ed:e8:2b:53:a5:cf:
                    c5:6b:65:99:98:70:78:95:bd:ed:5d:07:b8:17:69:
                    fa:f7:e9:ee:6d:c6:56:b3:37:d7:c5:cc:25:bd:01:
                    60:6e:1b:9b:06:42:30:9d:5a:b3:45:5e:5f:a8:84:
                    52:3b:a0:33:c3:27:d9:12:b5:2e:bd:9f:33:36:31:
                    a5:a3:34:f6:f9:4a:8b:c3:d9:72:22:4f:cb:41:48:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7D:22:1C:48:C5:6E:EF:59:52:B6:E7:56:40:DE:5D:38:0E:63:E3
            X509v3 Authority Key Identifier:
                keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:12:bf:eb:4a:d1:d7:0f:f2:50:d9:ab:74:1b:af:58:5f:53:
         3a:59:97:39:3d:b6:94:4b:97:93:60:70:8c:7f:a5:b2:3b:b4:
         67:67:17:0c:64:cb:8d:dd:0a:ea:83:85:cb:6f:28:15:4a:ec:
         39:b7:22:eb:a1:93:af:70:74:3b:5e:f5:a7:5e:57:8e:30:15:
         8a:fc:72:a6:e3:8c:76:0e:ec:c9:1e:43:63:7b:bb:b9:e9:e4:
         08:0c:ad:52:62:53:52:36:50:a1:4b:f3:fe:d8:c6:a9:07:b9:
         5e:e5:d0:bd:bb:54:19:2a:9e:84:41:b3:af:a9:42:5a:9a:74:
         30:e1:2a:41:7c:63:1e:66:e7:1f:45:9e:89:77:d0:e8:05:63:
         56:5f:78:8b:bb:31:c6:6b:95:90:5e:b8:f3:11:db:d1:37:df:
         2f:8f:3e:cb:78:b3:cb:51:64:e8:8f:59:33:99:ae:33:88:9f:
         19:7c:66:be:a8:13:03:ae:e7:03:3f:18:a1:19:d3:80:3a:8f:
         d6:63:8e:82:00:24:93:74:eb:18:69:0e:d1:da:5b:0a:c7:b7:
         1f:69:e4:16:3b:0d:76:fc:fb:23:db:56:cb:fb:ca:d5:5c:3d:
         88:8b:a5:87:ba:dc:19:ac:fd:27:84:d8:49:8f:f1:d8:76:3b:
         0d:08:19:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:19:13 2025 by rpki-client