Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File:                     FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier:          ZeeTn0t0lTLtXpCmGHNLyiHnfNQSuDT6JLCZ2zVIzmc=
Subject key identifier:   A2:F8:EC:E4:59:6B:10:03:E2:51:4A:97:27:D4:5E:BE:0A:78:75:07
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer:       /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial:       0198D6CD699108235094610192ADB29E3854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number:          13EE
Signing time:             Sat 23 Aug 2025 12:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:42 +0000
Files and hashes:         1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: fikGq8gYWfafswnI/j/pZ2pqJA6yi31Q3im6TTcd8Hc=)
                          2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:69:91:08:23:50:94:61:01:92:ad:b2:9e:38:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
        Validity
            Not Before: Aug 23 12:00:42 2025 GMT
            Not After : Aug 24 12:00:42 2025 GMT
        Subject: CN=a2f8ece4596b1003e2514a9727d45ebe0a787507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:da:f7:1e:ec:86:27:e0:38:c7:e8:f8:76:1a:
                    f8:b2:72:19:6f:4c:3b:88:73:56:19:16:fa:f3:d1:
                    41:0c:4d:35:a5:76:45:f5:3b:ed:23:4e:86:25:41:
                    0b:c7:9a:60:86:b1:9d:d9:f1:10:75:2c:1d:79:9f:
                    f0:1f:72:cc:9f:60:36:70:b3:be:a5:92:42:f0:e4:
                    9a:8b:7b:4a:95:56:99:6c:4f:9b:40:d5:02:7f:cb:
                    49:ff:ee:83:56:6a:5a:30:1a:49:f0:33:76:46:20:
                    aa:7e:df:33:d1:c3:5e:79:99:d1:93:61:34:e7:07:
                    db:e2:4c:15:f9:58:d0:6f:ec:65:71:1e:b6:ff:9b:
                    67:a4:aa:39:2e:37:20:2f:1f:31:aa:27:ab:e7:5f:
                    d0:02:d1:ea:d3:b1:17:1f:45:f1:74:fa:1c:89:4d:
                    3f:f7:86:3a:6b:55:b3:07:93:37:8b:c4:cb:7d:f4:
                    09:b9:51:c3:4d:f0:ca:2a:38:17:a9:b0:f9:50:c4:
                    74:1c:a7:08:ed:9a:61:7d:96:94:48:db:38:e8:e6:
                    56:f2:10:10:7e:df:df:15:38:a1:54:8f:54:12:7e:
                    f1:49:4f:0e:d8:6e:ab:cb:18:68:7a:a5:cf:1f:f6:
                    0b:f1:73:ea:2d:90:ba:a1:3d:d5:50:d8:6c:fd:3f:
                    24:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F8:EC:E4:59:6B:10:03:E2:51:4A:97:27:D4:5E:BE:0A:78:75:07
            X509v3 Authority Key Identifier:
                keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:14:ca:8f:85:8e:9d:a9:15:15:d4:76:a1:45:d3:a8:0f:ed:
         c6:6e:e5:b3:3f:23:f2:04:50:a1:2c:64:95:38:6b:22:c2:f8:
         bf:f9:ff:75:66:aa:e8:ca:9f:ad:c1:0b:08:ce:9a:33:32:ec:
         eb:04:0d:06:9c:8d:1a:fe:0d:48:d3:54:86:78:c9:b1:d4:ce:
         0e:f6:03:b9:66:6c:9b:1d:bc:c2:2d:51:40:fb:d2:73:37:58:
         ee:41:07:8f:84:0f:a6:30:1f:ea:67:52:e0:75:b5:20:f1:9f:
         1f:56:34:a7:a7:e2:34:89:a0:46:1e:c2:9e:07:88:cd:1a:d5:
         e3:95:c0:d5:a7:c6:a8:32:ab:f1:14:fd:67:b4:5a:8c:db:3d:
         70:29:80:73:96:6c:ca:23:ff:42:ee:d4:74:55:2f:fb:fe:59:
         61:52:b1:45:39:bf:d6:3f:3e:ac:20:e3:b2:53:ca:bc:4b:53:
         f4:3b:06:9b:61:50:a4:12:da:ee:90:f0:ac:54:98:a4:d8:dc:
         1b:12:3c:82:0d:b4:16:be:cd:6f:f1:00:a1:e2:e2:5c:87:70:
         67:2a:85:2e:97:a8:e7:a8:71:80:65:8e:1f:8b:02:2e:98:77:
         e9:67:29:c0:49:6d:04:f2:06:c9:e2:6e:ac:15:33:04:53:bc:
         3f:52:9f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:04 2025 by rpki-client