Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File:                     fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier:          p5ZnDAOMs6TDGvPIiCY5BjXYnIVGL0qpDDu3d5vBA4w=
Subject key identifier:   48:86:2A:D9:26:BE:61:C2:AD:8F:BE:C1:09:A4:5E:C4:D2:D1:65:BB
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer:       /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial:       019881D48C58586DA2A5D229C019307076EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number:          0F9A
Signing time:             Thu 07 Aug 2025 00:00:46 +0000
Manifest this update:     Thu 07 Aug 2025 00:00:46 +0000
Manifest next update:     Fri 08 Aug 2025 00:00:46 +0000
Files and hashes:         1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: 47YWasSgbIbXB6RRbd6TDf9ipMml1m920wWHrGIV0Ds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d4:8c:58:58:6d:a2:a5:d2:29:c0:19:30:70:76:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
        Validity
            Not Before: Aug  7 00:00:46 2025 GMT
            Not After : Aug  8 00:00:46 2025 GMT
        Subject: CN=48862ad926be61c2ad8fbec109a45ec4d2d165bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:72:c2:35:18:28:21:14:d1:75:8f:b7:c9:
                    5f:fe:55:68:64:74:5e:36:68:af:23:80:f0:de:45:
                    84:9f:38:83:d0:d9:c6:fe:e1:6b:56:a0:cc:f9:3f:
                    df:bf:3d:02:ec:9f:e9:60:9d:a4:6b:a3:d6:db:ed:
                    f2:83:19:bf:6e:68:86:ad:a7:20:95:a0:c7:38:4e:
                    6c:5f:a0:27:21:e5:e7:b5:a4:9d:da:77:f4:4c:fd:
                    3f:27:76:a9:56:7d:ce:c1:34:6f:9f:a3:fb:07:a5:
                    04:7b:8d:7c:be:4d:89:7b:d4:a2:78:7c:5c:92:43:
                    87:55:16:a0:68:bb:b6:e1:36:f0:04:ad:ad:18:40:
                    79:d0:f9:78:42:45:c7:bb:f5:32:7c:ea:96:f8:40:
                    ed:ec:60:da:f8:fd:a4:e8:c3:2c:28:fc:1c:51:d5:
                    fb:b5:99:c4:d7:b9:14:de:20:87:86:1e:41:fa:0d:
                    3b:b0:79:93:f5:42:26:20:14:b3:fb:ee:cb:cb:36:
                    c0:bd:f7:4d:e3:2b:fe:78:8d:31:30:4c:8f:89:61:
                    8c:94:77:93:04:58:0b:6d:ec:74:eb:06:8e:f6:20:
                    72:7a:8a:4b:cf:b8:d5:a3:fe:18:59:dc:8b:31:59:
                    f8:e0:c5:5a:50:c2:8a:b3:d9:bd:cb:57:25:2b:05:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:86:2A:D9:26:BE:61:C2:AD:8F:BE:C1:09:A4:5E:C4:D2:D1:65:BB
            X509v3 Authority Key Identifier:
                keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:99:66:b8:95:b0:90:98:26:d8:f1:10:9f:5b:d8:37:71:
         8f:af:6f:04:ed:f0:28:70:c9:4c:a7:a1:77:79:5b:d4:a4:f5:
         c4:a5:b2:7c:ec:3a:94:b4:84:46:13:1b:bd:24:d2:db:6a:68:
         7c:e1:d3:16:67:a1:4a:25:ee:a4:3f:ff:50:5b:36:c4:14:77:
         94:96:f4:7c:be:34:0a:4a:85:41:33:61:d3:17:a8:1a:6f:27:
         c9:19:42:35:0d:c2:46:62:e6:77:eb:2a:b1:49:e2:1c:77:27:
         e0:a6:ee:00:02:5a:c6:cd:22:31:2f:8a:9e:63:ea:48:e9:e6:
         66:07:71:b6:20:06:a1:d5:94:70:30:0b:d8:e0:22:1f:c1:a1:
         dc:79:c2:0e:95:49:6b:0d:a6:0e:9c:16:c1:81:bc:e3:62:6a:
         41:8d:90:6e:0b:29:cd:43:f6:65:95:f1:51:ea:8c:92:75:29:
         98:07:3a:1d:bb:df:e5:ed:fb:17:da:14:43:36:90:8d:cb:4e:
         96:55:06:c2:74:ae:f5:ff:c8:3e:1a:99:57:22:84:83:e4:bb:
         8b:70:21:71:78:85:c5:ca:c4:c2:e6:43:68:01:0d:1b:0e:27:
         10:e3:07:5d:d4:ae:cd:92:e6:a5:d4:f1:ed:91:da:50:85:8c:
         aa:25:47:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:28:52 2025 by rpki-client