Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File:                     FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier:          +3j9lTrfEPgdz0UGJM32LwT+6T/bBW/H/hEQdDVbuvE=
Subject key identifier:   FB:48:26:3C:88:78:BA:6B:40:1F:78:46:DB:FD:A4:54:B9:36:92:8F
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer:       /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial:       01987B9BE6BB05FE39BF35846098E1748988
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number:          093C
Signing time:             Tue 05 Aug 2025 19:01:11 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:11 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:11 +0000
Files and hashes:         1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: B0MMEoR4Z5uQ748M2Rc8p+zUjLmupPhIS0FGeuiBLL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9b:e6:bb:05:fe:39:bf:35:84:60:98:e1:74:89:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
        Validity
            Not Before: Aug  5 19:01:11 2025 GMT
            Not After : Aug  6 19:01:11 2025 GMT
        Subject: CN=fb48263c8878ba6b401f7846dbfda454b936928f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:51:30:83:85:d9:dd:f3:58:96:56:02:ce:2d:
                    4c:c7:94:83:80:0c:ee:fe:96:33:76:92:28:78:e3:
                    f5:10:2f:ee:d5:8a:93:75:be:2f:5c:56:b5:25:51:
                    eb:12:7b:72:ba:f5:9f:c7:be:37:24:a0:00:e1:13:
                    87:ed:5b:e6:c6:1c:63:67:b7:f8:f3:09:35:d2:9b:
                    f1:1d:75:a6:dc:a9:5d:c2:47:44:e7:15:08:41:a2:
                    4f:c8:80:c0:9e:da:94:11:e0:b7:29:41:70:52:a3:
                    07:39:a8:94:6b:00:c4:1a:02:ce:2d:fc:b2:e1:0a:
                    9b:b2:2e:48:cf:b4:b1:19:d7:61:3d:38:74:66:75:
                    80:96:e6:a2:93:e2:b7:d0:66:42:83:ce:1a:5a:39:
                    9f:af:77:d0:ba:8d:3b:06:25:ca:d7:2c:8a:5a:07:
                    49:9e:16:b4:e1:17:ee:02:8a:1c:48:31:99:1e:7d:
                    bb:cf:8d:a4:0c:f6:84:59:aa:d5:99:6c:3e:cc:8f:
                    c6:b3:00:70:d1:1b:f2:d5:54:cc:55:a2:da:64:18:
                    78:93:7e:38:c5:ed:6d:e0:9a:61:e5:d4:9c:06:82:
                    38:ae:80:8f:d8:d6:a1:16:ea:07:36:97:39:34:f5:
                    66:1a:6b:6a:ff:28:17:32:89:80:b9:50:5b:62:3e:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:48:26:3C:88:78:BA:6B:40:1F:78:46:DB:FD:A4:54:B9:36:92:8F
            X509v3 Authority Key Identifier:
                keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:41:75:b1:02:6c:cf:85:ae:3f:6b:62:e0:2a:46:77:18:b4:
         27:e1:60:c9:7b:ea:7c:5a:e4:3a:59:94:b4:ac:06:86:86:10:
         0b:01:8d:5a:b1:c2:86:c5:01:4d:7f:10:d8:9a:fc:44:11:2c:
         1d:ca:ac:e0:2c:14:a7:3a:c2:52:bd:65:67:83:53:c3:97:c8:
         dc:a3:2c:e7:62:ee:8b:36:fd:ca:84:f3:f0:4c:b9:b8:34:10:
         ab:69:f2:b6:59:bd:4e:d5:45:a8:a2:0f:4e:6a:0a:fc:be:9a:
         a6:b0:f4:47:bb:95:75:bb:dd:d6:05:f9:3b:02:76:ba:dc:ce:
         3e:05:5c:74:48:52:61:3a:a9:6f:87:05:f4:b8:4a:e2:be:eb:
         dc:e8:cc:54:b9:62:dd:f9:80:9e:fb:da:28:d4:ed:4a:c5:bc:
         a7:a5:ae:54:a8:4c:67:3b:14:b6:28:7f:02:86:d0:50:4b:82:
         79:9d:0b:de:aa:95:7d:dc:57:36:97:ea:2d:c1:44:6e:70:ca:
         de:bf:8a:be:3f:3c:7f:c1:8c:08:d8:88:07:5b:03:77:d9:39:
         4e:77:c1:75:3b:1b:3b:8d:7f:bb:a4:65:fb:ac:d5:fa:37:92:
         80:50:8b:7b:c6:4c:71:69:bb:48:36:3c:0e:45:03:e8:69:b0:
         51:38:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:18 2025 by rpki-client