Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
File:                     FZVEc2Bfo00pH7dD2kFeVdaSINY.mft (raw, json)
Hash identifier:          aRgXAY0U2/5+UPVpNtz0zGKIc+TfDFi/cbbr6UjoU5w=
Subject key identifier:   56:9D:7D:09:1B:6D:E1:E7:0B:02:5F:93:C8:F2:CF:FD:B2:6A:1E:13
Authority key identifier: 15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6
Certificate issuer:       /CN=15954473605fa34d291fb743da415e55d69220d6
Certificate serial:       019A4EF57510140F747F203C0F355235205A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
Manifest number:          08ED
Signing time:             Tue 04 Nov 2025 13:01:40 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:40 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:40 +0000
Files and hashes:         1: FZVEc2Bfo00pH7dD2kFeVdaSINY.crl (hash: 5v/8Pgkd8Fm+kdWpaw74XKB+tgBJ2nHbCyARJ/sAgCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:75:10:14:0f:74:7f:20:3c:0f:35:52:35:20:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15954473605fa34d291fb743da415e55d69220d6
        Validity
            Not Before: Nov  4 13:01:40 2025 GMT
            Not After : Nov  5 13:01:40 2025 GMT
        Subject: CN=569d7d091b6de1e70b025f93c8f2cffdb26a1e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:8d:3e:b4:d7:e6:81:bc:d9:d8:f3:55:d2:
                    26:ef:1f:b7:ad:27:ad:3d:e3:d3:fd:ca:09:3f:ca:
                    0c:3d:e4:37:b8:82:94:a4:28:64:e2:ae:50:38:0a:
                    7c:72:35:24:8d:d7:ac:ae:e4:b4:64:16:15:88:ab:
                    f9:b5:b7:dc:7c:83:87:c9:04:ac:e4:05:ad:4d:6b:
                    d7:b3:81:5e:b4:d0:e8:4d:69:9b:36:cb:b6:49:8e:
                    23:bd:86:7e:89:4d:71:89:9f:16:6e:ab:ea:cd:40:
                    88:45:2f:f3:c7:4d:75:40:d0:c2:12:28:44:1b:73:
                    b0:32:3a:71:46:98:c5:15:c1:b8:03:2a:bb:02:92:
                    4c:64:2f:c4:5d:97:38:f9:9c:64:02:44:00:84:dc:
                    a9:61:65:f6:96:f9:81:1b:c8:8e:55:74:ac:e2:60:
                    7f:ef:94:25:12:66:90:92:40:db:88:13:fe:f0:86:
                    13:e4:d7:3e:c1:37:b8:21:3b:f8:6b:ee:77:55:63:
                    82:3d:dc:12:53:6d:5d:31:19:ca:a6:0f:f2:2f:10:
                    cd:ac:f2:45:c0:80:b3:e5:ab:00:54:12:3e:3a:97:
                    8c:16:69:f7:0b:28:eb:03:a2:e5:02:72:67:98:5e:
                    6e:9d:c7:f9:33:76:97:81:71:31:e1:8b:67:a8:4a:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9D:7D:09:1B:6D:E1:E7:0B:02:5F:93:C8:F2:CF:FD:B2:6A:1E:13
            X509v3 Authority Key Identifier:
                keyid:15:95:44:73:60:5F:A3:4D:29:1F:B7:43:DA:41:5E:55:D6:92:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZVEc2Bfo00pH7dD2kFeVdaSINY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8e3406-633c-4f29-98f4-ad6f6a693ac6/1/FZVEc2Bfo00pH7dD2kFeVdaSINY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:cb:48:f9:97:7a:53:d8:c6:24:0c:ec:4a:5e:09:4d:ff:
         e6:29:3e:cc:e4:34:d6:59:37:77:1d:ac:1f:ba:17:a3:16:dd:
         9d:d8:cb:91:0a:50:03:de:87:dc:e0:a0:bb:92:f4:0c:c1:39:
         a0:f2:08:32:78:16:39:1d:ae:26:2e:aa:e3:fd:b2:cf:22:3f:
         f4:04:a6:3b:98:be:c0:7f:d8:4c:ac:29:49:82:26:0e:0e:51:
         d2:14:fd:1c:bb:cb:58:c3:fa:cc:c6:8d:40:37:4f:43:48:12:
         45:56:28:c2:b7:01:6e:a3:cb:31:87:41:78:38:2f:a7:10:d3:
         08:ee:25:d2:62:0c:67:93:b9:4e:82:b6:c5:d6:da:8b:23:2c:
         5c:78:2a:d1:7b:f3:57:ba:bf:bc:b0:c8:91:31:0e:39:54:05:
         93:2d:80:e9:4d:25:ac:90:35:40:78:fd:bc:28:80:b8:a7:e9:
         a7:18:ed:cb:51:4a:da:83:73:7f:cc:3b:f2:cf:b7:2e:35:41:
         fb:e7:fc:f3:54:0e:da:0b:22:22:90:bd:43:ef:61:bb:8d:46:
         8a:5b:c0:e1:41:2b:7c:ee:46:a8:c8:65:69:54:1c:97:0d:ab:
         0d:61:ae:3c:13:eb:22:59:94:c1:83:4c:31:69:72:3c:eb:a4:
         72:62:96:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:22 2025 by rpki-client