Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
File:                     _u7-64gyDdP1gKaLWxzwpiQxBcw.mft (raw, json)
Hash identifier:          efY4WYRnhgBVA+Qe1S9LA4SG5tNZMU55/d1+h+mggh0=
Subject key identifier:   6F:45:18:11:34:DD:AD:86:4E:9F:CD:CF:71:A4:61:D1:E6:7C:34:40
Authority key identifier: FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC
Certificate issuer:       /CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
Certificate serial:       019A50E27CA982BEDB4EA225DEAE66125FC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
Manifest number:          0AAC
Signing time:             Tue 04 Nov 2025 22:00:11 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:11 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:11 +0000
Files and hashes:         1: _u7-64gyDdP1gKaLWxzwpiQxBcw.crl (hash: hlyWKQl7MAZzph6NyNr7svyngAO2xHRsA+XJxo8u/Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:7c:a9:82:be:db:4e:a2:25:de:ae:66:12:5f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feeefeeb88320dd3f580a68b5b1cf0a6243105cc
        Validity
            Not Before: Nov  4 22:00:11 2025 GMT
            Not After : Nov  5 22:00:11 2025 GMT
        Subject: CN=6f45181134ddad864e9fcdcf71a461d1e67c3440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:09:7e:21:7a:8b:74:ff:2f:5b:67:b1:f3:
                    c6:a8:55:9e:40:63:ff:e9:f5:4e:9d:75:1e:12:d5:
                    99:d2:05:b6:00:f2:b7:44:cb:2c:c6:1a:30:14:d6:
                    07:eb:e7:90:47:5e:43:8a:85:58:10:d6:83:a7:c6:
                    b1:5a:50:7f:e2:bb:29:df:10:3f:59:bb:b7:a5:1e:
                    76:d7:9b:23:70:02:a4:f7:05:1b:e5:43:46:7c:33:
                    99:6f:57:78:e0:40:5b:30:ac:39:73:59:17:83:5c:
                    2b:98:0f:e4:5d:76:50:5d:e1:fe:6b:f3:5d:81:40:
                    8c:eb:d8:91:f9:55:65:2b:c6:8f:22:d0:75:cc:26:
                    7f:cf:34:9e:b8:81:f0:1d:bf:a0:36:c5:e6:77:10:
                    5d:02:64:09:b2:fa:ec:5a:de:ee:77:28:54:4a:42:
                    32:ed:3c:ce:e0:5e:f1:3f:7f:59:06:29:35:a5:cc:
                    00:c9:0f:50:13:c3:55:ea:94:ab:9e:e7:cf:b5:67:
                    06:27:80:3d:fa:2f:92:80:2d:2d:34:ce:20:8b:ec:
                    22:bf:ae:b6:ec:99:ff:1b:ef:cb:4f:36:5a:21:c1:
                    22:58:b4:50:8e:e2:e6:cb:71:7c:42:fe:48:ce:b7:
                    65:88:25:f9:0c:c4:dd:59:ca:17:0e:c3:4b:b8:66:
                    81:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:45:18:11:34:DD:AD:86:4E:9F:CD:CF:71:A4:61:D1:E6:7C:34:40
            X509v3 Authority Key Identifier:
                keyid:FE:EE:FE:EB:88:32:0D:D3:F5:80:A6:8B:5B:1C:F0:A6:24:31:05:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u7-64gyDdP1gKaLWxzwpiQxBcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/62d9e4-1df7-4201-88b6-6dd74272c4c6/1/_u7-64gyDdP1gKaLWxzwpiQxBcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:d9:9a:25:c7:87:93:d9:3b:93:16:c2:4d:0f:6e:13:d1:
         35:65:55:da:5e:f3:ae:27:26:c6:75:2d:52:90:13:b4:a5:9a:
         07:b8:60:28:f4:cb:f4:ea:0c:44:bc:c5:40:ac:f9:40:84:e3:
         f9:0a:46:2e:7f:ce:32:89:10:ab:2e:ff:17:43:cc:1e:60:a4:
         c3:50:92:cb:b1:8f:37:3a:d9:f8:7e:f2:7b:98:d0:0d:b3:7a:
         92:d8:53:7e:84:e6:30:de:84:b1:4e:d2:bb:16:f0:98:0a:9c:
         ca:b1:6b:c5:57:87:fe:7c:2b:7f:d5:ea:21:70:c7:40:5e:66:
         53:24:72:c3:08:f2:ce:88:db:9c:7a:5d:e2:66:d5:dc:ee:e6:
         c7:89:fc:7c:ef:c1:a3:e1:aa:22:6a:7b:94:20:a5:83:9a:14:
         34:9b:74:8e:e2:26:5b:41:b5:38:08:19:5b:45:a4:20:b8:a3:
         84:ad:39:b0:10:77:56:8a:af:ac:d5:9c:a7:0d:ef:11:aa:86:
         0e:63:48:06:0d:20:1f:72:e0:5e:0e:f9:9d:58:26:60:70:45:
         d3:a1:45:8f:82:ab:fe:4d:fb:df:c2:03:93:89:16:d6:1b:b9:
         9a:36:24:9e:60:a8:7e:f0:1f:81:76:27:cf:ec:2e:bc:e0:3a:
         99:53:ce:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:52 2025 by rpki-client