Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
File:                     fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json)
Hash identifier:          uGNAqSV3bu6meytJ/GYxRO6Biz3HzpzZYItz2uWzf+4=
Subject key identifier:   2F:67:5C:A4:65:27:C7:34:42:D8:F5:6F:0D:7C:D6:A8:04:77:61:28
Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E
Certificate issuer:       /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
Certificate serial:       0199FBEB1EBABD92AD08FDCC7F550853BE70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:53 +0000
Files and hashes:         1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: N2Oa3JvrRogL6QbqOhG4kwvVQyZ1hu9+p2fUzjLLiZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:1e:ba:bd:92:ad:08:fd:cc:7f:55:08:53:be:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e
        Validity
            Not Before: Oct 19 10:01:53 2025 GMT
            Not After : Oct 20 10:01:53 2025 GMT
        Subject: CN=2f675ca46527c73442d8f56f0d7cd6a804776128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:f9:1f:b9:d4:74:33:f1:17:df:ea:2d:6a:
                    77:03:66:61:25:9c:d8:c1:19:49:9f:5b:36:1b:68:
                    89:c6:1f:ae:0f:b7:da:90:35:49:0a:60:43:34:dd:
                    d6:c5:b4:09:ba:b8:60:c7:7e:29:13:7c:c7:e2:20:
                    bc:fc:0b:0a:bc:f6:65:d5:b8:e0:df:76:33:a5:d9:
                    ef:f9:61:0a:5a:4c:0d:02:92:83:82:bd:45:19:27:
                    fe:e6:ca:fa:cb:50:e6:d2:ef:ee:ae:fe:69:50:89:
                    50:72:b6:88:26:57:0f:3a:82:d2:17:fd:22:6b:84:
                    15:b7:28:9e:94:95:b2:99:21:bb:d9:53:91:ed:9b:
                    90:47:be:e1:8e:d7:bd:51:7d:d6:10:ce:88:23:bd:
                    1d:f7:49:c3:8d:72:3b:b9:a2:61:d8:87:fd:b9:b2:
                    31:17:77:d6:80:04:e9:b1:ca:77:24:7f:8f:ce:ad:
                    68:fb:2f:3b:44:0b:23:c6:26:50:f1:74:78:a5:93:
                    42:aa:11:e2:7a:17:e3:1c:5c:9f:b9:c6:fc:af:bc:
                    1e:9f:4a:d1:73:fa:ab:86:03:88:45:5b:21:d2:ca:
                    62:dd:65:b3:c3:4a:b8:76:63:d7:ea:36:83:33:31:
                    32:5a:00:32:7e:39:04:2c:e8:d5:bd:53:fd:4b:2d:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:67:5C:A4:65:27:C7:34:42:D8:F5:6F:0D:7C:D6:A8:04:77:61:28
            X509v3 Authority Key Identifier:
                keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:32:db:62:aa:24:b4:60:b8:b4:80:6e:1b:07:e2:9b:62:c4:
         77:54:54:ec:94:20:ec:4d:ee:e9:ca:37:96:e4:43:17:67:64:
         3b:7c:53:6b:1f:0b:b9:eb:4d:ae:7f:80:59:32:ae:93:ef:36:
         bf:0c:6a:e0:67:4f:4d:89:3e:a1:10:5d:37:67:95:8c:03:a4:
         88:40:d7:aa:bc:f9:55:9d:03:20:05:96:93:a3:f0:4e:05:46:
         9f:83:62:84:31:2f:ad:75:1d:06:26:97:17:58:83:fc:e6:97:
         d5:41:63:e0:24:5e:92:0c:e4:af:b6:64:4d:66:77:12:a2:4d:
         8c:b7:2b:9c:de:a3:0c:77:5b:4d:43:c6:2b:f1:e3:c6:cc:fb:
         e7:5c:6e:3b:d8:13:a0:31:f7:59:14:cd:04:19:6f:e0:24:df:
         d5:c9:17:c5:6b:42:ea:e2:8a:8b:25:d1:3f:34:2a:87:d5:d6:
         fa:5b:47:73:90:a9:e3:d8:09:80:d2:36:ad:0e:eb:a1:f5:10:
         68:b3:9d:38:a4:ce:04:a7:a9:49:77:10:26:55:e6:08:9d:80:
         3b:8c:fa:eb:3f:25:78:e5:cd:e2:f6:2f:78:74:02:90:c6:ee:
         8f:22:89:ef:1d:03:b9:c8:af:52:bb:75:17:cc:0e:bb:e4:0b:
         75:5e:ab:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:51 2025 by rpki-client