Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
File:                     frHgvC-KBA2BVYCM9LKcVM2tlEI.mft (raw, json)
Hash identifier:          5irxW0u7w4tYmHelFuLzDaXVcnphz7AsDGLB9JQADs4=
Subject key identifier:   90:8C:B2:D3:F9:75:0A:80:17:2E:80:2A:66:35:9C:1C:9C:E5:0E:E4
Authority key identifier: 7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42
Certificate issuer:       /CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442
Certificate serial:       0199FC2147FEBCBF1E49646557743A85FA0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
Manifest number:          44
Signing time:             Sun 19 Oct 2025 11:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:03 +0000
Files and hashes:         1: frHgvC-KBA2BVYCM9LKcVM2tlEI.crl (hash: /HjZgTJV9PLMI1nOLWEsGDB3uY7VxVOASXBm1yGtOGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:47:fe:bc:bf:1e:49:64:65:57:74:3a:85:fa:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442
        Validity
            Not Before: Oct 19 11:01:03 2025 GMT
            Not After : Oct 20 11:01:03 2025 GMT
        Subject: CN=908cb2d3f9750a80172e802a66359c1c9ce50ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:68:75:2b:79:d4:90:a8:dc:93:b8:04:ac:a0:
                    9c:35:2e:93:e9:85:75:61:ba:69:89:69:72:7a:32:
                    82:34:64:28:24:f8:c9:a3:20:28:59:bc:5c:61:60:
                    88:a6:ff:25:02:d0:69:3a:f3:b2:47:88:dc:43:49:
                    bb:a7:05:d6:0d:63:2c:c1:95:5c:18:4f:77:c5:d4:
                    59:41:09:9c:ef:e7:60:58:f6:17:58:29:ef:58:75:
                    05:0b:b3:4a:13:14:b6:ca:2a:a5:d7:01:b6:84:b8:
                    f9:31:ea:3e:aa:e0:c6:91:05:fb:45:64:8e:db:3c:
                    e4:e3:8c:60:1c:d8:27:b3:5f:00:ed:e4:b2:e7:45:
                    f2:be:4f:3b:ba:c8:e4:2f:61:55:c5:ff:98:5a:8e:
                    12:d1:c7:2a:b4:63:cf:54:5f:c6:69:55:9d:3b:d5:
                    c4:45:82:64:c5:31:c0:6e:1c:34:b3:2d:e9:43:c1:
                    6c:a2:3a:57:ef:82:fd:f1:df:35:54:29:27:db:d0:
                    b7:56:b8:ed:42:ec:c1:ad:ca:2c:bb:46:ce:e2:ab:
                    2b:5d:0d:c3:68:b1:f2:e8:c0:a2:c2:6c:d1:7c:17:
                    c5:f5:26:4f:1c:55:e8:7e:ee:51:14:85:07:e5:fb:
                    61:50:10:70:d9:52:5e:0a:a6:99:a4:59:e7:7c:4d:
                    c7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8C:B2:D3:F9:75:0A:80:17:2E:80:2A:66:35:9C:1C:9C:E5:0E:E4
            X509v3 Authority Key Identifier:
                keyid:7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a6:b6:e5:15:e9:90:ee:e3:a0:f4:70:55:99:c1:22:8f:4e:
         0b:ec:7a:c0:88:bb:f7:62:a6:2e:92:56:76:50:29:57:86:2d:
         2c:0c:24:3e:e9:a0:be:10:c1:5b:8d:4a:65:e1:fb:b1:04:c4:
         71:35:27:5e:38:60:df:0d:46:04:9a:33:64:d2:f4:81:5a:be:
         fa:ea:73:7a:ec:8b:9e:12:4a:31:af:24:c8:48:b9:b9:05:1b:
         b6:06:de:1f:07:3f:e2:29:50:3d:18:fb:c1:94:f7:0e:94:ff:
         86:8b:14:bc:4b:48:cc:b4:c7:40:46:da:82:8b:26:a9:ce:cf:
         f4:3b:33:f8:fe:a4:08:2f:48:f9:c3:f2:b4:9d:a4:9e:4f:04:
         3a:8c:a9:71:9c:bf:1c:f4:ff:14:fc:1c:d9:3c:77:3d:71:c5:
         0e:2e:b9:97:25:a9:59:70:67:e6:07:e7:55:35:25:bf:19:93:
         fe:da:ba:7b:8f:3e:42:02:59:20:86:63:90:76:b0:68:dc:f6:
         0e:2f:b4:f3:d5:2c:8b:ec:5e:e7:1d:ed:7c:49:95:30:38:4a:
         23:71:59:00:a4:2f:28:f1:21:d2:cd:35:23:76:5e:91:11:43:
         05:58:3e:53:71:c1:9b:5e:21:30:39:e1:f5:e3:06:19:df:70:
         b9:18:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:06 2025 by rpki-client