Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
File:                     Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft (raw, json)
Hash identifier:          ZFtRiTYv8Nw/nFlVzlc1oMJmkMRvW4A2k89UzmPTX14=
Subject key identifier:   6C:8D:8A:01:4B:B4:82:4C:41:3F:90:B2:BF:49:0E:D5:DB:93:5E:B3
Authority key identifier: 16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1
Certificate issuer:       /CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
Certificate serial:       019A50E37BFF3837C0BA997CF9F3338452B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
Manifest number:          170A
Signing time:             Tue 04 Nov 2025 22:01:16 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:16 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:16 +0000
Files and hashes:         1: Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl (hash: RKxQ13+QjOjQH0gDTEvOJjpqm9PVtWwV0DTSkx+8d98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:7b:ff:38:37:c0:ba:99:7c:f9:f3:33:84:52:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f835981e1e789347f47fcc9bbaac6b15d687c1
        Validity
            Not Before: Nov  4 22:01:16 2025 GMT
            Not After : Nov  5 22:01:16 2025 GMT
        Subject: CN=6c8d8a014bb4824c413f90b2bf490ed5db935eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3c:60:74:22:b5:21:59:75:04:07:f5:36:57:
                    b9:ae:d0:bc:42:61:a0:5b:2e:05:78:7d:2d:6e:43:
                    e3:7e:4d:6e:b7:1c:74:dc:34:9b:1b:6f:1e:9f:ac:
                    06:e0:3a:e0:b7:f9:6d:51:20:76:82:30:5f:d3:22:
                    81:28:09:3d:6b:7b:92:da:37:a5:1c:a4:6e:82:66:
                    5a:01:24:39:dd:53:31:e1:07:13:4e:bb:ea:d8:51:
                    0c:9a:7e:ea:4f:a2:40:35:6a:d0:7b:79:03:0e:b6:
                    d5:68:17:b4:5a:1b:f1:55:dd:3b:86:c1:04:44:a8:
                    51:e5:77:ce:bd:d8:c6:e4:cb:85:cd:02:c3:cf:1d:
                    5a:2a:3e:cc:fa:40:d1:48:ee:bb:3a:ce:c1:fe:6d:
                    b4:7a:27:86:35:4c:fd:98:f3:26:95:c4:b0:c4:ae:
                    a0:de:0c:0b:08:49:d2:51:1f:8c:83:a5:ba:9c:79:
                    43:e6:84:8c:09:69:1b:58:6f:c0:ef:be:2f:5e:9e:
                    7f:03:e6:d0:2b:cf:71:59:73:cb:24:56:25:cf:51:
                    43:65:21:5c:f8:f5:11:5e:08:06:c8:86:0c:0a:ba:
                    5b:95:f4:e9:d5:52:ae:ba:bb:b2:88:74:0c:b2:32:
                    a1:c4:f4:98:b2:0f:d5:80:c3:d9:77:74:fe:ac:cc:
                    83:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8D:8A:01:4B:B4:82:4C:41:3F:90:B2:BF:49:0E:D5:DB:93:5E:B3
            X509v3 Authority Key Identifier:
                keyid:16:F8:35:98:1E:1E:78:93:47:F4:7F:CC:9B:BA:AC:6B:15:D6:87:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e8efe-8a15-4c6b-a00b-c1a8e5a6dc56/1/Fvg1mB4eeJNH9H_Mm7qsaxXWh8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d5:f0:79:2f:da:c4:c2:c8:e7:c5:bc:65:88:1d:a7:65:45:
         51:00:f0:fd:21:f0:c2:ab:fb:e2:0b:b1:e5:5e:2a:cd:f9:55:
         a7:71:46:4f:85:0e:9e:e9:05:0f:ad:77:ed:a0:14:d2:3d:f8:
         1e:9b:34:d8:71:5a:ae:ef:1a:59:57:8a:a1:6c:3c:4c:4f:1a:
         b2:c5:bf:b7:9e:2e:ad:39:18:24:54:64:9d:db:50:f8:46:ab:
         fd:5d:17:9b:a6:ff:58:1e:ec:b3:25:6e:0e:15:81:11:f3:63:
         d7:2b:66:ef:7a:4a:e2:3f:98:b8:c7:bd:6b:b0:89:27:c9:52:
         be:05:a0:a6:7c:3b:a3:0e:a1:31:ae:14:89:91:10:5d:7f:bd:
         34:fb:0d:b3:73:dc:0b:94:1f:96:7f:4e:4e:79:f0:b7:b4:e6:
         99:a3:e1:20:8e:99:13:37:e9:7f:a0:6a:68:fe:0f:11:b2:c0:
         f8:e6:59:2f:07:a8:eb:ac:9d:bf:60:96:68:06:92:4c:b7:51:
         99:82:b7:4f:01:7d:0a:06:84:ec:34:47:83:c3:34:10:10:aa:
         43:56:0a:8b:b0:bb:7d:af:e0:06:1a:c6:ed:80:39:ca:45:1e:
         18:e6:ee:60:c1:dc:3d:b9:2b:c5:38:7d:e0:62:46:68:d4:ff:
         dd:58:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:31 2025 by rpki-client