Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File:                     fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier:          PvrU/PY1e36nZlo9R/EMCUJj4cZVAgo3AhrplnS2qiM=
Subject key identifier:   E1:1F:9E:A1:D3:7E:D0:DC:BF:28:71:DF:C0:35:D3:C5:36:87:12:93
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer:       /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial:       0199FB0F104B85BAC3A762898C18CB9F5D2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number:          078E
Signing time:             Sun 19 Oct 2025 06:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:32 +0000
Files and hashes:         1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: F1M4DolR141r9TnjBE5tj3oWfndEmBN9qc3i3boHuwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:10:4b:85:ba:c3:a7:62:89:8c:18:cb:9f:5d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
        Validity
            Not Before: Oct 19 06:01:32 2025 GMT
            Not After : Oct 20 06:01:32 2025 GMT
        Subject: CN=e11f9ea1d37ed0dcbf2871dfc035d3c536871293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:b1:d4:55:c4:ac:31:26:14:5d:39:3f:2b:
                    54:7e:96:6f:e6:07:19:fb:ae:7d:10:9c:45:ef:8b:
                    5b:1d:bd:d6:e2:0d:e7:4f:d1:5f:ef:4e:b2:1f:90:
                    2f:6b:0f:83:37:7d:ad:0d:c4:fd:14:5f:e4:78:bc:
                    41:4c:b0:bf:20:0e:c9:f5:44:cc:b0:3a:4f:9b:d4:
                    c9:44:c6:79:e2:ab:28:9d:c8:48:0e:cb:94:01:85:
                    e5:25:f1:a2:e7:8e:ff:77:ce:6d:e0:62:0d:31:bd:
                    1b:e1:c0:9c:28:ea:4f:9b:ab:2c:62:4c:92:8c:7d:
                    1f:09:e8:76:5f:de:91:c7:ad:76:f7:44:86:75:0e:
                    2b:62:01:06:d6:60:8b:58:c7:52:43:8e:57:b6:45:
                    83:e0:71:36:b1:b8:e2:e9:d6:a9:1d:b4:cd:18:2f:
                    c2:6c:d7:94:55:20:9d:66:d6:69:dd:ec:41:18:a1:
                    60:6e:6f:17:c7:29:e6:12:21:dc:08:90:2c:6f:8b:
                    8d:7e:bc:30:a7:9a:72:33:c6:bb:59:b0:d1:e8:f3:
                    86:1b:8e:86:b2:b1:0f:13:fa:df:df:bb:18:83:c3:
                    4e:34:4f:1c:05:3a:76:13:f1:e1:ca:6a:41:47:d1:
                    95:10:28:4f:69:7e:72:f4:5f:90:fa:56:4c:6f:8a:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:9E:A1:D3:7E:D0:DC:BF:28:71:DF:C0:35:D3:C5:36:87:12:93
            X509v3 Authority Key Identifier:
                keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:e4:11:bc:b7:4d:ef:5b:1a:62:f6:d3:aa:b1:b0:ec:7c:74:
         9b:b9:1e:8e:de:63:ff:5f:35:3f:b4:92:d4:e6:a6:b4:ab:cf:
         65:ca:fb:eb:a8:82:d7:10:d7:e1:50:75:37:2a:be:20:0c:55:
         55:74:8d:05:bf:67:e9:64:92:79:a6:c7:93:16:69:9a:d7:60:
         52:48:c1:bb:55:27:fe:ad:79:b5:53:7b:18:4a:bd:d8:71:4f:
         ea:92:e6:ea:18:f9:da:58:33:12:83:51:de:25:db:a0:80:be:
         f9:3d:af:87:df:e2:a5:92:3b:ad:56:b2:a7:e6:81:ce:12:cc:
         01:e9:ce:7f:72:55:ed:da:b4:aa:5b:85:61:e8:4b:75:d4:44:
         f3:21:17:f6:69:cb:eb:d1:ae:1d:b1:d3:17:07:3b:c0:b3:13:
         26:c1:45:62:13:ed:5b:c2:c4:a2:de:63:f0:08:57:81:02:33:
         13:97:70:db:5d:e7:15:1c:84:f4:6c:eb:aa:97:d5:75:e4:a4:
         65:f0:b3:69:49:0d:97:e6:95:d0:72:d4:ce:ef:be:73:53:ab:
         9b:83:42:50:5c:48:d6:83:83:04:6c:4a:5c:45:ed:06:1b:c1:
         19:b6:a2:1c:63:64:43:5e:fc:c3:6f:82:f0:18:38:2f:fe:cf:
         ab:1e:4b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:35 2025 by rpki-client