
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
File:                     FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json)
Hash identifier:          PrTJGG4T/NwpxJXm9e+6wknnCdu0qO00cbByGQ13oj8=
Subject key identifier:   0B:1B:8D:70:D9:3E:D2:C8:58:9A:CC:AD:9D:36:6D:2E:68:8D:3E:77
Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
Certificate issuer:       /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Certificate serial:       019A4DE152C88579820E188AE34180D88995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
Manifest number:          11FA
Signing time:             Tue 04 Nov 2025 08:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:03 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:03 +0000
Files and hashes:         1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: ob4MavxLgNCir6hoLl3h2+e60nyoN39wusrySfbIm2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:52:c8:85:79:82:0e:18:8a:e3:41:80:d8:89:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
        Validity
            Not Before: Nov  4 08:00:03 2025 GMT
            Not After : Nov  5 08:00:03 2025 GMT
        Subject: CN=0b1b8d70d93ed2c8589accad9d366d2e688d3e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:27:8e:11:a3:c0:2a:37:e9:ef:1f:58:43:3e:
                    3c:d4:8e:45:25:51:38:1e:4d:c8:49:af:36:d2:1d:
                    ee:95:30:54:cf:7c:c0:2e:4f:ec:21:ca:25:20:6e:
                    bb:6c:77:4a:b7:49:27:f5:71:dd:ec:36:73:63:92:
                    7d:1d:c3:2f:23:4c:20:82:55:ba:d7:3f:e9:a2:08:
                    3f:02:21:04:74:d4:36:3e:9d:60:ff:50:8a:d2:36:
                    7e:e5:6a:f6:28:c7:ca:59:4e:da:0e:fc:49:89:97:
                    13:2b:11:ff:63:7c:74:4a:0b:23:46:e7:35:96:53:
                    5d:33:58:80:82:8d:8e:bd:85:ef:4d:e1:5d:d4:92:
                    09:56:f1:86:b1:27:c0:b4:d5:7a:3f:d7:35:73:f9:
                    c0:cc:f0:15:08:64:a8:77:1e:1a:3a:5a:b5:6f:50:
                    de:cd:eb:f8:20:e7:32:c1:f0:ee:fb:51:1a:05:7a:
                    7a:f8:11:ba:a6:25:fb:e3:b7:bc:e7:20:bc:cf:32:
                    c7:16:d1:02:8d:a9:92:86:1b:69:eb:3e:f1:63:fa:
                    07:13:26:76:99:2b:6b:0d:c8:f3:69:06:61:40:1b:
                    d2:5d:50:75:9f:08:86:88:70:f1:82:ec:b9:22:ff:
                    84:08:4c:84:25:60:1c:58:8e:55:05:24:31:4f:4c:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1B:8D:70:D9:3E:D2:C8:58:9A:CC:AD:9D:36:6D:2E:68:8D:3E:77
            X509v3 Authority Key Identifier:
                keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:7b:71:d5:70:9b:5a:ab:cc:ac:6c:ba:e2:d4:10:27:e1:
         c0:49:65:2d:1f:6e:da:ed:1d:95:de:ac:f8:60:6e:f2:85:e6:
         36:e6:e0:71:32:88:50:80:67:4e:a7:1f:74:47:e0:52:a5:35:
         16:df:48:98:96:b1:0f:2a:36:d6:b7:54:92:a3:a4:e3:19:68:
         e3:be:42:58:cc:fa:71:bb:79:53:e2:06:4d:a6:f6:73:88:5d:
         e0:31:f5:ba:0f:1c:f6:c9:16:b1:3d:81:87:d3:de:a6:1f:04:
         66:28:81:02:d0:a1:ac:66:1e:80:aa:11:a7:0f:8e:cb:ae:88:
         38:99:67:fa:bf:63:7a:02:34:64:f5:82:9c:8f:31:09:bd:6a:
         f2:0c:55:01:40:79:a1:69:0c:19:be:3d:f5:43:1f:53:26:90:
         b9:60:a0:ad:d5:82:05:4b:a5:0a:d5:79:c3:88:0e:70:66:f4:
         5d:68:26:8c:24:95:40:07:89:9b:2d:ea:92:e3:f8:96:da:98:
         ea:11:d7:db:9d:28:44:74:6d:09:53:65:b2:aa:6c:58:4e:91:
         c7:20:cf:22:3f:a7:34:1f:37:77:f6:a4:ce:79:94:8f:71:8c:
         fa:b7:ae:18:ae:82:ae:24:60:ce:64:94:1f:46:71:85:15:ae:
         59:48:57:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:26:13 2025 by rpki-client