Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
File:                     fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json)
Hash identifier:          38P+2UA6kmUCaJUfinYeXBsnw8uye2NhFN2WH894S4U=
Subject key identifier:   9C:B1:5A:F5:AC:75:BF:51:8B:74:44:70:FD:FB:32:70:96:62:E3:42
Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B
Certificate issuer:       /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
Certificate serial:       0199FA6A7AE768794145772522BCDFEBF28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
Manifest number:          105D
Signing time:             Sun 19 Oct 2025 03:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:46 +0000
Files and hashes:         1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: LrfETe+ARez8qSxPyE2IVt4wvtAIvj6qYABExXtP5PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:7a:e7:68:79:41:45:77:25:22:bc:df:eb:f2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b
        Validity
            Not Before: Oct 19 03:01:46 2025 GMT
            Not After : Oct 20 03:01:46 2025 GMT
        Subject: CN=9cb15af5ac75bf518b744470fdfb32709662e342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:2c:ac:8a:bd:8c:c5:67:ed:9d:7c:cb:bb:
                    38:f9:cc:2c:ea:07:66:49:8b:cd:11:fc:fe:c9:97:
                    5c:cb:c1:cf:54:47:06:5b:21:15:f6:6b:a5:bd:a3:
                    a9:a0:d2:06:f8:64:db:bf:b0:89:37:3c:0f:63:4c:
                    c8:d0:5f:ca:2c:18:c3:3a:99:74:f7:60:40:e4:54:
                    e6:a0:9c:43:99:f9:39:4e:96:d7:38:97:ec:95:6b:
                    6e:cc:d5:54:3c:3d:47:85:ee:26:27:c1:f6:00:94:
                    68:e7:ad:78:06:22:bb:7a:cc:21:8b:25:d9:a2:9c:
                    59:c7:81:5f:58:ed:26:7c:1b:6e:8e:69:0e:73:f8:
                    3d:41:36:7e:1f:6c:20:0d:48:4b:c8:44:f9:5b:dd:
                    66:31:e9:48:be:20:e5:86:06:95:bc:b4:7d:9f:c1:
                    9a:54:75:b0:1d:cb:26:32:85:60:ea:23:9d:48:d9:
                    86:d8:03:f8:47:97:45:50:26:ea:6e:f6:32:01:54:
                    c8:1b:5e:31:20:ae:01:f5:3e:ef:40:0a:5b:5b:e8:
                    50:0c:30:21:fe:00:bf:47:cb:1f:e2:0c:ec:93:9f:
                    f1:50:e9:8f:07:f4:fa:5b:31:c9:ea:d3:ff:85:f6:
                    0f:cc:01:b4:b8:49:80:56:0c:43:fd:bb:e5:4e:3c:
                    dd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B1:5A:F5:AC:75:BF:51:8B:74:44:70:FD:FB:32:70:96:62:E3:42
            X509v3 Authority Key Identifier:
                keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:6c:10:6a:93:57:b5:39:7a:36:ed:85:65:87:22:02:df:b0:
         ce:cb:9a:cf:20:ec:06:0e:8a:fd:28:72:77:83:5d:64:76:53:
         2e:89:a8:87:c4:5c:24:ff:af:b7:18:73:5c:d5:00:01:2e:64:
         90:af:f7:e3:fb:56:89:7e:d6:d8:0e:6c:d2:f4:ac:04:0d:0a:
         65:b5:db:82:75:80:90:20:35:fd:20:d0:5a:b2:08:ea:b1:0f:
         8a:33:84:b0:c5:a6:7b:de:d6:b2:5b:71:e0:ea:ef:21:77:9b:
         3f:4b:de:f8:ca:16:6b:df:d3:4b:c8:42:ec:49:00:b2:62:77:
         79:25:50:dc:d7:d0:b1:00:9e:7b:2b:46:be:73:ed:07:ab:0b:
         be:c7:94:54:38:4c:06:97:f7:95:d5:9c:b8:b5:8c:ce:36:ec:
         b6:f3:b2:50:a6:6c:59:aa:75:0b:a6:3d:18:9a:7e:0d:f2:76:
         6a:9e:aa:01:2d:fd:ba:b2:14:5e:7c:02:d5:67:3a:02:09:73:
         ea:34:29:79:85:6c:28:c2:33:29:09:5b:61:be:62:50:ad:c8:
         81:9f:a3:17:d5:12:90:5f:a8:9a:f6:77:85:b0:eb:db:88:8a:
         cd:26:c9:b8:8d:c8:d2:47:59:44:4c:21:6d:bb:a4:be:35:3f:
         35:8b:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:11 2025 by rpki-client