Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File:                     _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier:          1p8EGN9STItzdyC6ZRtsINib8Dzpg9Elpjys2cr+xn4=
Subject key identifier:   76:A6:5D:30:26:B4:AD:F2:E0:1C:59:77:1C:8A:0A:36:A4:1D:E7:A7
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer:       /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial:       0198D5BB85AAD90A138099DC041784ACC06E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number:          07F1
Signing time:             Sat 23 Aug 2025 07:01:33 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:33 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:33 +0000
Files and hashes:         1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: tl2gcjyIDoKN2WQAqOg5dKSogjftHqu4nV/Bd/mk4/o=)
                          2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:85:aa:d9:0a:13:80:99:dc:04:17:84:ac:c0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
        Validity
            Not Before: Aug 23 07:01:33 2025 GMT
            Not After : Aug 24 07:01:33 2025 GMT
        Subject: CN=76a65d3026b4adf2e01c59771c8a0a36a41de7a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:96:dc:9f:ab:09:12:0e:54:58:1b:31:e7:be:
                    ff:46:e8:92:e2:ab:5e:28:6f:05:e0:11:5e:c1:d7:
                    6f:e2:aa:8a:5e:56:34:d4:d0:0f:c2:58:3d:45:08:
                    b3:01:80:8b:a1:38:9d:f4:65:b6:53:71:66:68:f6:
                    6e:18:cd:c1:9a:44:d8:0f:56:23:75:63:56:10:3d:
                    1b:b6:64:ad:02:41:ac:91:a7:1b:4c:b2:a5:e8:29:
                    c8:32:33:f3:13:18:77:08:c0:db:e7:12:f1:e4:5f:
                    13:e0:02:31:13:9e:4c:46:00:8c:e4:01:db:81:f2:
                    b4:ef:5c:86:c8:b8:28:ba:76:86:91:ce:30:24:3c:
                    f3:e7:6d:dc:09:cd:3a:97:fc:51:c6:84:99:3f:2b:
                    ce:ec:c1:5d:ff:63:b2:76:a7:d9:db:db:ac:1e:14:
                    a6:2f:2e:08:67:0a:37:3b:b1:cd:54:b3:2e:b3:ee:
                    83:51:68:35:c4:46:97:8b:c4:d1:04:9e:82:c2:3d:
                    83:04:02:8f:2d:b6:e3:95:19:3c:f6:65:8d:29:97:
                    da:a3:63:04:fb:a5:11:b7:0f:3e:bb:86:98:4a:05:
                    a5:c3:2b:4a:22:1c:13:8a:ad:56:9a:bf:45:28:80:
                    37:d3:dd:b8:df:b3:db:96:39:3f:25:b5:b9:2b:74:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A6:5D:30:26:B4:AD:F2:E0:1C:59:77:1C:8A:0A:36:A4:1D:E7:A7
            X509v3 Authority Key Identifier:
                keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:49:5d:b2:a0:46:79:dd:38:00:65:c2:ed:28:40:5a:55:31:
         0e:8e:ea:f6:94:b3:ac:8d:b1:d7:a6:39:31:df:c5:2a:8d:24:
         0f:f7:3e:44:ef:89:1d:a4:a0:95:69:a9:8c:1b:46:8f:5d:d6:
         5f:52:36:9f:bd:43:a1:23:67:e1:76:e5:9c:cf:85:28:03:8e:
         13:95:fd:af:78:02:f7:03:64:5b:95:3b:38:96:5d:39:4f:4a:
         d7:dc:52:27:bf:87:55:81:ef:44:06:21:94:12:28:66:1b:8d:
         0a:d7:b4:13:ba:4c:70:84:60:1b:fe:58:91:74:6d:69:28:a5:
         3d:07:20:7e:0e:4d:44:93:75:61:c8:0d:a6:72:a8:8b:03:3f:
         d0:bf:94:47:b9:65:b2:56:71:84:b5:10:41:e6:da:c7:d0:59:
         cb:0a:04:7a:c3:cf:d5:ee:3d:13:48:ab:9f:30:51:6e:19:f5:
         40:fe:6d:6b:31:25:3e:10:3f:ab:0c:71:b7:ba:68:c4:ae:08:
         e5:4d:64:3f:5a:b2:d3:92:f6:3b:a4:53:51:eb:f9:01:27:af:
         3d:78:f5:8b:86:80:d7:a7:f3:cb:4d:a6:1d:66:77:47:03:d9:
         21:af:6b:d3:00:a8:a2:10:52:97:09:80:1c:fe:11:89:34:7e:
         4d:1d:c3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:02 2025 by rpki-client