Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
File:                     fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json)
Hash identifier:          TXoB5hCOJ7qOXGlUMvqYwEsaHMOwbgYi/iXUOvhrx4I=
Subject key identifier:   8D:CD:1B:4E:5D:6D:28:AE:BB:3D:D7:8D:FE:8B:C8:6A:18:C7:C1:5E
Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9
Certificate issuer:       /CN=7efa2e705d233fff345a912b2f239b5ace372bb9
Certificate serial:       01987C4064934B74DE91A6DEC2FF89C0FDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
Manifest number:          0558
Signing time:             Tue 05 Aug 2025 22:00:51 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:51 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:51 +0000
Files and hashes:         1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: 329XDxsstYPTbolzfyD8NZUkT767xMhk7To954r1Zjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:64:93:4b:74:de:91:a6:de:c2:ff:89:c0:fd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9
        Validity
            Not Before: Aug  5 22:00:51 2025 GMT
            Not After : Aug  6 22:00:51 2025 GMT
        Subject: CN=8dcd1b4e5d6d28aebb3dd78dfe8bc86a18c7c15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:14:4b:7a:f9:1e:9c:c2:62:d8:80:5f:40:
                    ff:97:05:bd:00:67:f1:d7:ea:2e:54:69:a0:2e:d9:
                    84:1c:57:51:24:22:11:64:a2:a5:17:e7:48:87:4a:
                    a6:fb:b7:61:9f:01:96:45:85:e8:7d:d9:2d:06:79:
                    34:8d:13:c3:47:1a:3b:17:2c:aa:03:34:30:02:66:
                    2c:55:5d:14:0a:d0:e9:bd:13:af:60:e6:08:93:1a:
                    8b:73:10:86:a0:7b:53:52:c4:77:3a:54:5a:7a:ff:
                    07:0b:7b:46:27:5d:98:e0:6b:84:13:27:3c:ee:2b:
                    0b:d7:6a:92:17:8d:8a:bf:ae:e4:bd:1c:9c:b2:a9:
                    ec:ee:ec:8e:e6:35:3c:68:44:d6:92:cf:ba:ca:35:
                    99:49:d6:65:d3:43:dc:79:fc:0c:4d:19:60:87:39:
                    ae:5c:c2:1a:37:13:8c:99:21:9a:fa:63:3f:00:07:
                    ac:40:cd:71:44:d9:77:44:77:d9:4f:ea:71:6b:9c:
                    f4:e4:96:83:39:e8:cc:61:3c:13:e7:83:b8:2e:0b:
                    81:2b:1d:72:4a:4b:4b:56:09:78:27:f9:53:70:77:
                    7e:55:05:c3:84:9e:3d:a9:c2:cb:38:87:84:8d:7a:
                    60:0b:63:ef:26:31:f2:24:c9:95:28:5f:42:ef:b1:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CD:1B:4E:5D:6D:28:AE:BB:3D:D7:8D:FE:8B:C8:6A:18:C7:C1:5E
            X509v3 Authority Key Identifier:
                keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:2b:58:d6:6c:29:08:be:4c:24:52:df:eb:7b:26:0c:e1:
         34:f9:9f:e2:5e:0c:5b:6e:8c:27:80:00:6e:fc:52:58:4c:fd:
         4b:73:cd:f4:17:f6:3e:93:47:55:85:05:87:91:56:b8:f4:b9:
         f9:f2:eb:52:7c:4d:0f:32:68:42:9a:0f:08:30:24:a8:49:93:
         a4:93:35:44:1e:d6:33:dd:c9:6d:0a:3a:59:72:02:5f:8c:14:
         40:b1:d9:b2:1c:18:8a:3e:a3:f4:f0:8c:4e:9c:f2:65:9c:53:
         ad:1e:3c:5b:f7:51:32:ad:02:bd:bd:30:a3:50:73:b5:17:ff:
         1d:7a:c4:d1:c0:b0:7c:0e:e6:07:3e:44:8c:71:0f:4a:64:98:
         15:1f:3a:96:e8:fe:70:9a:f0:5e:84:50:ae:b7:70:7a:fe:46:
         e0:5c:65:a5:0e:40:26:36:b2:e4:17:41:5c:6c:c3:ae:19:51:
         f6:81:71:5b:af:71:a8:55:ad:0f:23:9d:e1:33:89:da:05:df:
         28:c8:d0:b5:20:8e:a9:f6:67:d0:48:5e:2b:ab:e6:6f:29:75:
         66:2d:6f:46:a7:fe:b4:40:f7:6f:3a:92:f1:5c:bd:fb:22:9c:
         de:28:0d:03:16:43:88:76:01:ed:87:5f:52:16:96:26:30:f3:
         5c:28:3c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:46 2025 by rpki-client