Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File:                     fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier:          YRGq+J7qOLyZ2CViIMBoYfQ6Q90Vj+iu7ksQmZoSfio=
Subject key identifier:   9D:BD:E0:77:83:02:87:D9:25:F0:5E:74:7F:CD:A0:CF:1C:77:1F:D5
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer:       /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial:       0198D583E2B6D95E5402E7B1E83815C4C56D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number:          131C
Signing time:             Sat 23 Aug 2025 06:00:46 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:46 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:46 +0000
Files and hashes:         1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: AN3xUTFrbM7SOk0QIpE1lIw5S5SzaDjEL/YTVZmmbzw=)
                          2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e2:b6:d9:5e:54:02:e7:b1:e8:38:15:c4:c5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
        Validity
            Not Before: Aug 23 06:00:46 2025 GMT
            Not After : Aug 24 06:00:46 2025 GMT
        Subject: CN=9dbde077830287d925f05e747fcda0cf1c771fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a2:d0:2d:f3:d8:27:92:28:6f:14:d8:92:a4:
                    d3:be:dc:f6:5b:32:87:83:07:4f:05:79:84:5b:17:
                    76:64:5b:60:9c:68:5d:f6:e1:76:a6:cb:cd:eb:c6:
                    12:2d:3a:73:25:75:d4:a9:f2:29:79:e9:8e:df:be:
                    55:0d:23:c4:5a:bc:88:4a:92:94:f5:60:34:3b:cf:
                    8f:b8:f3:fa:45:3c:a6:84:85:dc:bb:df:61:21:16:
                    f2:02:0f:93:29:2e:e4:c1:14:cc:a8:44:c2:75:56:
                    ae:92:78:ba:08:3e:db:47:0e:60:91:9d:ba:5c:e9:
                    fe:04:a4:3c:4e:2b:34:a9:a4:59:4d:8f:42:9d:cc:
                    50:d8:85:b7:34:34:a4:4a:c2:ef:3c:58:7a:a2:2b:
                    02:c6:03:64:55:f5:1e:58:e5:b7:c9:a9:68:88:ff:
                    c3:97:91:cf:67:5c:1a:d0:7b:ea:4f:79:c6:02:86:
                    d9:48:e3:ea:1c:d0:3e:f9:da:e8:07:3e:3b:17:ab:
                    48:19:4b:89:b5:79:2c:28:78:d5:2b:8c:09:46:76:
                    c2:2a:98:ff:15:23:6e:dd:91:2a:04:6c:82:0a:8d:
                    16:bc:b7:7d:72:90:18:ba:8c:7c:38:53:78:b7:73:
                    e6:a0:5d:da:b7:53:01:08:fa:4b:ca:a0:e6:14:a2:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:BD:E0:77:83:02:87:D9:25:F0:5E:74:7F:CD:A0:CF:1C:77:1F:D5
            X509v3 Authority Key Identifier:
                keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:94:bb:00:f0:f1:83:fd:4f:b9:56:6d:8c:6c:fd:21:ca:
         91:96:33:24:15:01:6a:e1:a3:93:d0:ca:20:ab:15:00:14:8e:
         ce:9c:c6:b5:a1:b8:6e:a7:5a:eb:c2:7d:fd:25:63:d5:f1:e8:
         73:c2:5b:8a:f9:5e:b6:8f:e8:b3:7a:79:35:f8:28:db:b3:52:
         42:72:45:eb:87:50:62:4a:dd:95:e7:c2:76:98:d6:0d:e0:3e:
         97:68:18:32:48:66:90:8b:07:85:c7:3a:b1:00:6f:ba:fb:e0:
         3f:ae:a2:dd:d6:47:c6:ad:12:55:4a:f3:34:c6:ed:4d:16:f0:
         94:2f:c5:f1:51:7b:2f:3b:6c:4a:e1:b9:d2:fe:c5:9c:ce:66:
         63:17:70:eb:c5:b4:4e:25:fc:20:dc:b3:4c:82:90:da:74:12:
         27:11:16:c9:2a:56:53:19:12:ff:a8:f7:6b:0e:ae:d1:4d:24:
         24:51:d8:2b:d6:c1:48:69:df:74:58:83:f4:56:13:ec:da:5c:
         67:16:45:9a:73:74:9d:4f:aa:a4:6c:c5:d0:41:c9:b9:ab:1a:
         3b:44:48:4b:b1:69:54:7d:a7:02:40:d3:78:ee:51:d6:41:74:
         18:d1:02:7c:04:bb:cd:e1:54:46:3e:67:1c:d9:72:c8:ca:fa:
         00:83:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:06 2025 by rpki-client