Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
File:                     fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft (raw, json)
Hash identifier:          GvD1BX8cbb0bSCooToIMjGLLpOtIXW3o/HZ/c3TXqBU=
Subject key identifier:   9A:87:FF:F8:97:3A:08:E5:BE:58:52:E0:5A:D8:04:18:F9:68:03:AC
Authority key identifier: 7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38
Certificate issuer:       /CN=7c3846589a3b395b3758773da3d9f13334c72038
Certificate serial:       0199FAD86629D74B4F61082AE3089506D19E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 05:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:49 +0000
Files and hashes:         1: fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl (hash: oOc9mp0Mr61oYBp/KMZquQFYyfGbeItmAHojOUltJbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:66:29:d7:4b:4f:61:08:2a:e3:08:95:06:d1:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3846589a3b395b3758773da3d9f13334c72038
        Validity
            Not Before: Oct 19 05:01:49 2025 GMT
            Not After : Oct 20 05:01:49 2025 GMT
        Subject: CN=9a87fff8973a08e5be5852e05ad80418f96803ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:eb:0d:db:ef:fe:b1:56:19:55:a8:59:1b:
                    9b:37:4e:6e:19:28:ad:98:20:ab:65:87:97:ab:79:
                    6b:43:9e:56:b4:61:d3:37:07:fe:13:43:16:2d:78:
                    fb:bc:ac:27:d4:17:2a:14:ea:23:e3:56:0d:e6:d7:
                    90:2a:6e:58:ef:c5:30:69:e1:4b:a6:49:3f:4d:83:
                    92:4f:bb:ab:2e:58:6a:eb:69:84:44:e6:72:8c:68:
                    87:7a:9c:6e:cf:b4:04:f3:b0:18:0b:e8:cf:e4:7e:
                    2f:7f:21:eb:6f:b4:d4:98:bd:21:f3:d4:37:15:e2:
                    b1:db:75:fd:e7:c0:cf:c2:a5:7a:da:1f:54:ea:26:
                    ab:25:33:0c:19:a7:7f:8d:03:3d:2d:b4:0d:01:e6:
                    11:f2:dc:a2:d8:73:f2:9b:bf:57:4f:3d:19:43:ee:
                    66:f9:e3:a2:30:9d:4d:e3:ec:b0:4b:63:2a:af:e1:
                    8b:f0:48:f2:86:89:90:f4:f5:d7:8b:34:05:bf:3f:
                    4f:92:45:5f:c5:d1:70:0e:79:9b:9b:be:15:b8:d0:
                    52:37:6e:bf:c5:c1:c1:8f:23:10:44:46:51:6d:2f:
                    d6:10:f0:45:89:2d:e8:2d:b4:86:51:68:c6:92:29:
                    6c:2b:58:c9:d7:c0:16:5c:57:ff:85:04:72:6d:ae:
                    57:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:87:FF:F8:97:3A:08:E5:BE:58:52:E0:5A:D8:04:18:F9:68:03:AC
            X509v3 Authority Key Identifier:
                keyid:7C:38:46:58:9A:3B:39:5B:37:58:77:3D:A3:D9:F1:33:34:C7:20:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDhGWJo7OVs3WHc9o9nxMzTHIDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2cd638-c75f-4d24-bbad-cfd8869df591/1/fDhGWJo7OVs3WHc9o9nxMzTHIDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:0f:6d:a8:69:ce:73:06:0c:a9:d5:99:bd:6d:da:c0:0b:eb:
         44:84:3a:8f:66:12:93:5d:27:2d:98:aa:1e:04:fb:28:a5:61:
         45:40:54:3e:0f:47:21:05:9d:dc:2e:af:1c:ca:f3:94:06:9a:
         08:e9:78:7c:67:af:5a:13:3d:a4:5b:b7:bc:c9:d9:ea:ab:ab:
         92:cc:da:ac:40:b4:0e:fa:7d:59:83:a7:ab:30:c4:3e:98:37:
         30:5b:90:46:87:b6:d6:c1:80:ee:98:6f:bc:2d:34:c8:8b:06:
         ba:6d:e7:e3:c6:4a:a0:09:ac:0d:e8:9e:7f:51:c2:0d:c2:61:
         1c:12:54:df:09:84:cb:3b:2c:96:e0:2b:e1:28:e9:5d:3a:6a:
         92:6d:b1:1a:4f:93:2f:5a:c3:de:d4:ec:9d:6a:a2:43:6f:b9:
         9f:58:ec:fc:8b:97:d4:e7:f9:3a:f8:ec:75:8a:03:2d:a1:30:
         7d:51:24:c2:92:d8:dc:ad:e3:9a:40:3a:ae:da:fb:fa:65:cc:
         05:57:a5:48:31:c0:2b:6a:9f:ac:a7:ce:25:1b:65:fe:18:85:
         4c:3f:da:a0:58:4c:6a:b1:ce:ce:80:28:6f:3f:56:05:f1:c1:
         71:08:27:1b:6a:1f:24:de:4d:00:4a:74:8e:e6:8f:59:08:2e:
         46:74:f1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:19 2025 by rpki-client