Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File:                     FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier:          F7pk7D2RFnK7lvkRPxOIRN4ZkDiCfVlS1BMMWE2Nn7s=
Subject key identifier:   92:D0:96:42:27:30:99:17:B7:90:7A:E2:6A:36:55:BB:2F:1C:10:A1
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer:       /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial:       019873E3C3EBFA24F1BBE6F4175140D05985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number:          07F7
Signing time:             Mon 04 Aug 2025 07:02:43 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:43 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:43 +0000
Files and hashes:         1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: 84679xKa1TB0b446vvt2NjouYmLQ9ZPL52UsnKGPByU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:c3:eb:fa:24:f1:bb:e6:f4:17:51:40:d0:59:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
        Validity
            Not Before: Aug  4 07:02:43 2025 GMT
            Not After : Aug  5 07:02:43 2025 GMT
        Subject: CN=92d0964227309917b7907ae26a3655bb2f1c10a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:05:88:f2:e8:05:6c:4d:14:61:4d:fa:db:
                    0a:06:45:66:f1:18:ca:26:41:dd:b7:fa:2e:21:d9:
                    90:40:a8:9f:8e:64:3b:47:25:90:4d:48:17:ec:92:
                    1d:49:7a:71:fa:41:16:04:c8:ae:dd:c8:11:e7:bc:
                    e5:46:24:29:03:10:a2:10:48:1b:f6:ec:ef:55:dc:
                    c6:7a:ee:07:36:9c:38:40:b7:0a:20:7a:d7:8a:01:
                    fe:ad:30:6e:8e:c9:9c:b1:60:ec:f2:d7:9d:ae:92:
                    50:56:a5:c2:87:b9:72:2b:09:e9:0c:94:a9:01:6f:
                    04:aa:e4:17:48:22:ed:37:02:88:6e:45:2c:5d:0c:
                    f0:ad:44:ed:c1:e4:7e:4f:16:4e:92:39:af:69:9c:
                    80:40:ac:27:ad:87:57:45:43:99:bf:48:68:34:32:
                    1c:79:ba:f0:2a:04:6a:45:cc:c2:8f:7b:20:68:2e:
                    d9:50:da:a0:cb:65:77:a4:0d:5e:25:d1:b9:b2:39:
                    17:b7:72:4d:08:ac:b3:42:e2:15:19:96:92:eb:64:
                    ac:56:86:ec:5e:5e:43:59:9c:da:d6:a1:cf:1a:fc:
                    c5:3c:f5:c4:db:12:b5:18:f7:83:3b:aa:a0:bc:34:
                    73:d4:bd:e0:6a:6d:32:02:a5:3d:0d:78:36:ff:db:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D0:96:42:27:30:99:17:B7:90:7A:E2:6A:36:55:BB:2F:1C:10:A1
            X509v3 Authority Key Identifier:
                keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bf:e4:99:87:fa:ca:07:2f:e8:d0:d7:27:4e:3b:03:4a:bc:
         ae:3d:48:f3:b8:b8:bd:47:7a:0a:cc:7f:0a:39:3c:8a:e7:21:
         62:eb:11:0a:c2:64:e7:b1:0e:2d:33:14:ae:db:f3:ed:c3:a8:
         54:19:7d:1b:27:b7:1a:24:ad:7e:37:88:ea:8f:a8:4d:f0:79:
         26:7d:a5:a2:14:0e:17:01:c0:4d:ce:cd:2d:87:a5:64:42:12:
         d2:79:66:99:db:3f:40:97:3c:f1:4c:71:f0:eb:53:c3:7b:2f:
         c2:b2:6f:c8:98:b0:4a:d6:06:47:82:5f:b8:ba:08:ae:32:93:
         96:6f:eb:ff:c5:f6:90:46:05:f1:01:24:9b:49:42:a9:ef:94:
         92:d1:00:62:39:02:fe:40:19:e9:3b:34:dd:8e:15:46:89:d1:
         2f:a6:38:95:d6:ca:58:43:a6:42:7e:6b:b6:06:eb:e5:47:61:
         73:1d:7d:c5:de:a0:ee:59:90:50:f0:89:46:cf:f1:61:7f:8b:
         ba:53:08:cd:85:f8:b3:9e:d1:dc:e2:0b:9a:eb:43:89:16:21:
         70:02:5b:ff:3b:bd:a3:79:85:92:f5:14:a5:bd:af:e5:83:ce:
         e4:77:63:48:cd:7e:d3:d7:22:bf:16:a5:d6:fe:73:c1:ff:45:
         ce:08:17:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:38 2025 by rpki-client