Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
File:                     FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json)
Hash identifier:          fQuokkxRfxOKzTSqMKNhLGAzsZI7WUqCJHdM4nGYKCQ=
Subject key identifier:   C4:CD:72:8D:23:7F:B0:06:88:E4:C9:E8:79:1F:74:84:B1:0A:BD:89
Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
Certificate issuer:       /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Certificate serial:       01988BEA37CD23A87AD97E8526F3E94103DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
Manifest number:          1111
Signing time:             Fri 08 Aug 2025 23:00:39 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:39 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:39 +0000
Files and hashes:         1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: Y/UFtZdABhysAt6KgiHVuraOzZ7sdk7RNXbzcwTlvoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:37:cd:23:a8:7a:d9:7e:85:26:f3:e9:41:03:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
        Validity
            Not Before: Aug  8 23:00:39 2025 GMT
            Not After : Aug  9 23:00:39 2025 GMT
        Subject: CN=c4cd728d237fb00688e4c9e8791f7484b10abd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:00:c1:c0:98:20:2d:58:53:8b:e1:3f:68:
                    7f:34:ec:07:0c:1f:bf:ff:cf:50:6d:d6:59:6c:4d:
                    28:30:a8:c4:e1:f7:93:ee:72:ac:f6:0d:6d:2b:bb:
                    50:9f:6e:8d:73:9c:f4:f9:93:ba:58:49:dd:18:d8:
                    56:d1:0f:a8:1d:f6:18:26:44:09:32:7c:b9:c8:88:
                    ca:2c:7a:d7:9b:ac:ca:9a:57:2b:0a:ad:02:38:d0:
                    b4:04:da:5f:c2:7b:1a:56:63:0a:a7:57:27:0d:c8:
                    48:c2:52:1c:1a:65:2c:5d:5e:61:4a:c5:7b:17:45:
                    ba:3a:71:bb:42:e6:43:83:e9:7c:de:c8:56:24:69:
                    3a:10:87:20:ee:30:0b:4e:4d:e3:7f:00:4c:bf:61:
                    b3:2f:29:bb:79:a8:04:63:d4:8c:6e:22:5c:e0:57:
                    d3:97:a7:90:b9:6f:6a:d8:8c:af:b8:eb:8c:ab:a0:
                    49:a3:da:77:fb:91:82:01:01:ee:83:1a:f0:bd:9e:
                    a8:78:03:71:bd:61:64:f9:7b:9a:0a:09:52:99:29:
                    db:c6:8b:62:12:5f:f2:13:41:3a:69:a5:77:65:a2:
                    11:cb:dc:d7:51:ed:10:6c:12:5a:88:4f:6e:f5:6d:
                    22:52:ba:b4:c4:c2:eb:a7:f3:5b:4f:ed:36:58:e0:
                    09:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CD:72:8D:23:7F:B0:06:88:E4:C9:E8:79:1F:74:84:B1:0A:BD:89
            X509v3 Authority Key Identifier:
                keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7b:4a:8e:e4:26:c0:c0:5a:6f:bc:ae:e3:fc:e8:ad:e6:7a:
         2b:47:4a:f1:35:3f:aa:33:38:a7:67:00:45:92:11:90:35:43:
         bb:00:a1:cb:0e:b1:cb:56:a6:c5:57:62:db:5c:21:bf:1b:06:
         11:56:12:b6:52:2d:b0:3e:3f:44:2e:06:12:ec:5d:71:fe:54:
         50:99:91:80:8f:14:f2:9c:1e:e4:0c:d6:ac:35:10:60:de:a9:
         4c:14:9d:b5:2d:c8:69:9a:66:9b:5e:13:38:3f:ec:72:36:f5:
         92:b7:d8:85:65:4a:62:17:d9:c2:08:a0:3f:18:75:20:a6:b6:
         fc:14:72:6b:9d:8e:ba:9a:a5:2b:27:a0:b9:4f:12:ed:27:eb:
         b0:18:9f:4c:06:1c:f3:99:80:ff:1f:9e:d6:b4:3a:0b:03:86:
         87:b5:18:ba:bf:03:4e:a9:56:17:88:e0:4e:8f:69:dc:6b:df:
         5f:7d:19:7e:7c:25:ad:82:71:af:f8:9f:34:1d:5e:38:18:b9:
         22:ec:1e:f6:19:54:10:ef:d6:48:9d:44:66:63:20:58:6f:b3:
         69:2e:77:17:5c:99:2e:19:55:99:5c:ab:67:62:b4:bd:b7:55:
         5c:dd:a3:fd:96:2d:6e:40:7b:31:1d:46:82:6f:14:51:80:e7:
         75:86:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:27 2025 by rpki-client