Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
File:                     fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft (raw, json)
Hash identifier:          zI4WfcR4gNyTvKveooWElbSWyS4kre4NMf/a+9uMeng=
Subject key identifier:   26:FB:BF:41:C6:7D:5E:8D:C0:B6:52:AA:C5:9F:F8:B5:9C:69:2A:8A
Authority key identifier: 7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C
Certificate issuer:       /CN=7f17b6f932399d585093d1873394ebfe1b29f98c
Certificate serial:       0199FF22DF90BE732750BB6763E35A082DBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
Manifest number:          0E64
Signing time:             Mon 20 Oct 2025 01:01:39 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:39 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:39 +0000
Files and hashes:         1: fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl (hash: VBUuF2F5+ZzK9ifbXvvEf2K5qZ6FDk6RY2mPXefjcvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:df:90:be:73:27:50:bb:67:63:e3:5a:08:2d:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f17b6f932399d585093d1873394ebfe1b29f98c
        Validity
            Not Before: Oct 20 01:01:39 2025 GMT
            Not After : Oct 21 01:01:39 2025 GMT
        Subject: CN=26fbbf41c67d5e8dc0b652aac59ff8b59c692a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:20:be:78:31:46:96:c0:92:8e:47:6e:8e:fb:
                    67:c6:2d:f5:ad:3d:2d:b8:68:6b:85:5b:c0:6d:11:
                    d9:aa:7a:da:b0:ed:99:e4:a2:0c:98:7c:a3:99:aa:
                    e1:f3:8d:4d:65:b2:0c:1a:c3:a0:07:15:33:f2:82:
                    08:b2:c7:20:d7:92:54:b7:cb:2f:9f:01:54:58:dd:
                    7d:7d:6c:67:0a:32:ca:69:25:73:a4:df:bf:a4:47:
                    aa:76:e6:a1:72:e9:29:96:24:db:9b:c3:b8:3c:1e:
                    08:71:c1:49:73:ea:4c:54:e2:9b:a5:ad:45:2e:fa:
                    d4:de:8d:e9:80:96:7f:f1:3b:49:08:11:da:0e:3d:
                    05:c8:70:1d:88:d4:c8:ea:c2:93:49:bf:00:0f:44:
                    76:3c:37:6e:7d:63:19:cc:7e:86:ec:88:20:ca:f9:
                    64:e9:21:47:3c:21:74:36:ed:1e:25:f6:fa:6a:2b:
                    29:e2:7b:66:bc:15:de:0e:bb:64:0d:b4:58:73:ad:
                    07:ad:68:03:4a:8f:c6:23:f0:b0:c0:ea:94:1f:39:
                    3a:1a:c2:33:c3:47:e5:af:72:61:14:ad:00:76:75:
                    39:23:80:b2:fb:a7:f4:4a:4a:b3:25:13:0c:e9:b6:
                    c4:0c:c3:55:0f:09:14:44:6f:6a:c6:50:6d:dd:d4:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FB:BF:41:C6:7D:5E:8D:C0:B6:52:AA:C5:9F:F8:B5:9C:69:2A:8A
            X509v3 Authority Key Identifier:
                keyid:7F:17:B6:F9:32:39:9D:58:50:93:D1:87:33:94:EB:FE:1B:29:F9:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/cc0200-bb2c-45f6-ac75-827577df8edc/1/fxe2-TI5nVhQk9GHM5Tr_hsp-Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:46:7b:e7:a0:83:86:53:ea:e4:69:4f:56:55:2b:ee:8b:db:
         7e:e4:42:60:0d:32:32:14:7f:b9:ef:65:9b:96:eb:f2:8a:31:
         76:7e:de:11:37:a8:4c:e2:f1:ed:1c:89:56:7f:d1:1e:82:c0:
         63:18:fe:64:f8:45:b7:b6:04:92:30:8a:6a:2a:62:16:41:2d:
         ab:18:7f:16:67:bb:b2:eb:a1:ad:cc:8b:9d:2c:02:a3:7b:ad:
         cd:a4:91:00:bd:14:10:dc:79:cd:ba:d3:27:98:00:c5:98:c1:
         dd:49:21:30:ab:36:89:c3:b2:96:82:03:07:09:a0:b0:9d:ed:
         8f:0f:42:37:ed:54:37:e1:0d:9d:85:f3:70:73:f1:c8:89:75:
         b3:5d:b6:8a:84:9f:c2:56:f0:e8:b8:f0:46:85:a7:ae:d2:23:
         d5:c5:fe:e7:fd:bf:d2:a9:66:c3:13:3e:88:5a:d7:8b:c2:75:
         34:ce:b3:52:53:32:ee:99:03:10:84:94:5e:79:09:1d:c7:af:
         4a:8d:6d:9d:15:f2:9f:17:e8:73:56:7e:69:99:fc:e7:28:9d:
         8a:d8:84:cf:4e:45:34:6d:72:9b:0e:57:5b:cf:db:12:83:4e:
         e5:cf:40:d1:f4:b7:0c:42:ad:66:ee:bb:a2:ec:1b:bf:51:04:
         5e:46:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:08:35 2025 by rpki-client