Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
File:                     fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json)
Hash identifier:          U2gihXZtDkxNNnkhRpkl6FHwanWcw1LP6kg2t6OTDjA=
Subject key identifier:   2B:61:41:60:6C:A7:F5:40:48:A1:4D:C0:21:1B:56:E4:83:CF:20:67
Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8
Certificate issuer:       /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
Certificate serial:       0199FC590CCE501A790BAD6D1481AFC32330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 12:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:58 +0000
Files and hashes:         1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: jGCCLG/Bli+I8EQYlweWXDIcg5Q2//Sjn6sJBb8UuQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:0c:ce:50:1a:79:0b:ad:6d:14:81:af:c3:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8
        Validity
            Not Before: Oct 19 12:01:58 2025 GMT
            Not After : Oct 20 12:01:58 2025 GMT
        Subject: CN=2b6141606ca7f54048a14dc0211b56e483cf2067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1d:4a:7a:6b:58:33:9a:d7:a3:be:e2:b9:5b:
                    14:4e:5f:f6:59:a4:ed:74:a2:ad:cc:31:ea:e7:41:
                    7f:b6:ae:ff:17:2d:20:9e:b2:a7:8f:a9:56:6e:45:
                    a5:5c:e0:d8:cb:f5:e7:c5:c8:84:a7:ed:91:14:ae:
                    7e:41:62:31:67:02:d0:61:7e:61:ed:60:ba:b4:06:
                    f1:14:94:70:c5:10:16:db:e3:c0:42:e4:35:b0:ea:
                    02:ac:fc:f4:21:9b:7b:2a:d7:5b:d6:10:8e:6a:a3:
                    d9:b7:a5:1b:b3:b7:f1:e7:33:79:42:6e:7a:04:a2:
                    f2:c4:84:e0:9e:9f:3f:c3:d2:70:0d:69:fc:09:7c:
                    dc:88:99:a0:8e:4a:02:97:b9:cb:ac:0d:1c:fe:8e:
                    24:bd:4e:6b:b1:a3:90:a1:b0:9b:05:70:3b:92:65:
                    62:3d:10:e2:89:c3:6b:4c:58:53:a9:e4:67:8b:2f:
                    69:55:ad:f8:17:ab:c4:7a:f9:7f:26:d6:74:1c:80:
                    d3:b4:dc:a1:e7:97:19:74:f1:94:67:34:91:64:b0:
                    4e:0e:ce:5b:73:e9:13:e1:4d:c5:92:dd:38:a0:43:
                    46:2b:ea:a8:02:c1:02:d1:99:c3:7b:a5:a3:12:72:
                    2c:a6:7b:9a:19:ad:f0:07:b8:98:1c:39:ec:3a:02:
                    70:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:41:60:6C:A7:F5:40:48:A1:4D:C0:21:1B:56:E4:83:CF:20:67
            X509v3 Authority Key Identifier:
                keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:97:a6:33:40:19:b2:bb:0c:6a:8c:71:82:f5:8c:4b:09:3b:
         2f:68:94:51:78:c0:9f:04:54:6a:40:a9:a4:bb:ab:36:e8:25:
         98:9b:67:17:92:ad:00:16:5f:24:22:f0:cb:5b:b9:cc:36:41:
         e2:56:55:e7:92:53:1a:e9:0d:be:40:85:29:bd:90:af:ee:53:
         27:03:d0:ae:8a:3d:74:d6:6a:58:1e:41:11:5d:ec:e4:03:9b:
         83:aa:1c:87:97:ec:3d:f9:55:56:c4:19:e8:b9:f0:b0:eb:5b:
         0b:40:2d:a7:49:13:6b:97:33:e8:d6:62:d4:33:e9:08:78:aa:
         3a:a8:51:f6:31:fa:8b:08:27:f2:f2:64:42:bd:b4:e5:97:6f:
         77:69:d5:ac:e2:a2:4c:55:9f:d9:4a:05:b5:1a:32:52:99:5f:
         d3:13:e4:f4:7c:c3:2e:9f:20:6b:8f:d8:e3:ac:2c:22:17:6c:
         db:e4:b6:c6:2d:ea:2e:a7:60:8c:0e:40:c7:0a:9f:94:08:fb:
         86:4a:b7:4d:6b:de:5f:ae:1d:fa:2c:c5:32:1a:8e:8c:30:48:
         3d:90:d7:17:e8:db:30:da:39:34:fe:74:7f:ec:3c:c2:ac:8f:
         4c:09:fd:7c:d7:fc:92:b8:40:e2:09:5e:ff:61:7b:9c:62:8b:
         c8:a2:f0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:54 2025 by rpki-client