Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File:                     fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier:          GiDDGFcUA5lPa6SSajl9G/JcXQf1RGuLoEr85/uo7uo=
Subject key identifier:   6E:A9:A2:8A:B0:E0:98:38:2A:02:C2:4C:60:D8:A7:DB:84:C2:83:D6
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer:       /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial:       0199FFC80E5630D0105A14E56CB734343413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number:          1596
Signing time:             Mon 20 Oct 2025 04:02:04 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:04 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:04 +0000
Files and hashes:         1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: maWvCBtrB/dnvcf3StCdD6dcBn1zFz/y5oLAUKq1xhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:0e:56:30:d0:10:5a:14:e5:6c:b7:34:34:34:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Validity
            Not Before: Oct 20 04:02:04 2025 GMT
            Not After : Oct 21 04:02:04 2025 GMT
        Subject: CN=6ea9a28ab0e098382a02c24c60d8a7db84c283d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c9:89:0c:87:c0:e4:c1:9b:71:9c:57:a6:58:
                    da:07:c0:18:2d:64:8b:e9:48:6a:f3:23:51:f9:c7:
                    9f:f7:e5:83:ab:2a:50:56:75:1d:f2:0d:55:39:52:
                    b7:8b:0d:70:37:4d:21:ba:21:68:b8:5b:12:e0:ef:
                    5a:6f:2f:8d:c3:48:22:9a:e3:9d:d2:11:9a:bf:55:
                    3c:68:e8:b6:d8:65:bc:1e:1a:e2:2b:71:5f:e2:ec:
                    eb:94:a1:41:6e:d6:52:8c:ba:17:40:36:02:9b:5b:
                    0d:4c:81:0c:ac:44:da:97:aa:55:6b:1a:1d:37:cf:
                    75:50:55:22:84:39:07:0d:55:d9:f9:4e:94:dd:54:
                    28:cc:9d:96:3f:f8:83:02:f6:e1:24:8c:5a:b0:79:
                    aa:ca:f1:da:07:e2:46:ef:69:d0:34:1d:14:65:25:
                    16:3d:ed:1d:94:b9:7b:85:f8:f6:eb:71:0c:1b:37:
                    3f:d7:06:be:c4:c1:68:5f:f2:a6:e0:d2:80:50:33:
                    64:af:36:58:c0:2a:52:c9:8d:9b:75:7e:2a:d0:5b:
                    ec:1a:c4:d3:37:b6:85:ed:ef:83:4b:20:00:55:44:
                    c8:42:dc:d3:be:c1:f9:e1:80:b3:74:2b:75:a8:c1:
                    64:c8:02:2f:d4:b1:df:db:45:60:76:7b:38:a8:50:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:A2:8A:B0:E0:98:38:2A:02:C2:4C:60:D8:A7:DB:84:C2:83:D6
            X509v3 Authority Key Identifier:
                keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:92:55:07:cd:28:6f:8f:d7:54:a0:53:97:8e:89:d0:4b:98:
         a7:e0:5b:3c:66:fd:44:37:75:63:92:56:6f:74:30:25:c7:84:
         6e:dc:d6:9c:06:b8:a0:b7:31:ae:1d:d7:28:44:3d:2f:d0:5f:
         b3:dc:84:47:3f:1d:cf:24:26:8a:4c:8f:40:aa:08:48:b7:39:
         0c:54:2d:67:45:02:0d:64:2c:d5:6d:28:95:ca:0d:8b:f9:68:
         db:01:76:b2:d9:d1:3d:7b:43:dd:e9:91:5c:19:47:0b:2a:b1:
         17:96:6a:4b:ec:ab:ce:05:10:82:92:7f:d0:82:31:f3:ea:68:
         e1:d4:1d:02:45:03:bf:7a:ef:aa:ba:24:4c:69:55:7e:ac:46:
         4b:d6:96:00:52:e6:bc:35:5a:aa:e7:6a:5f:3f:79:09:e8:03:
         3f:d2:6e:9a:4a:b7:91:68:21:f9:bf:4e:71:3a:fc:97:b9:9e:
         8b:03:05:6e:a9:df:a2:d7:42:72:90:39:3b:65:92:7a:b9:14:
         38:5d:ef:be:b9:72:ac:f5:43:8b:98:7e:df:b8:8b:5a:f7:a0:
         ce:2e:34:82:8e:4c:61:c8:dd:36:2e:8f:f3:50:23:1f:96:ae:
         10:d2:72:54:3a:d6:b3:0a:d5:d5:14:3f:4e:7e:29:bf:cb:b3:
         03:ae:4b:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yA5WMNAQWhTlbLc0NDQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlM2ZiODUzZjg0MGIzNzcwY2QzZmE0MmIzZjlkMmY5YmU3
ZDFiN2YwHhcNMjUxMDIwMDQwMjA0WhcNMjUxMDIxMDQwMjA0WjAzMTEwLwYDVQQD
Eyg2ZWE5YTI4YWIwZTA5ODM4MmEwMmMyNGM2MGQ4YTdkYjg0YzI4M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7smJDIfA5MGbcZxXpljaB8AYLWSL
6Uhq8yNR+cef9+WDqypQVnUd8g1VOVK3iw1wN00huiFouFsS4O9aby+Nw0gimuOd
0hGav1U8aOi22GW8HhriK3Ff4uzrlKFBbtZSjLoXQDYCm1sNTIEMrETal6pVaxod
N891UFUihDkHDVXZ+U6U3VQozJ2WP/iDAvbhJIxasHmqyvHaB+JG72nQNB0UZSUW
Pe0dlLl7hfj263EMGzc/1wa+xMFoX/Km4NKAUDNkrzZYwCpSyY2bdX4q0FvsGsTT
N7aF7e+DSyAAVUTIQtzTvsH54YCzdCt1qMFkyAIv1LHf20Vgdns4qFCckQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6pooqw4Jg4KgLCTGDYp9uEwoPWMB8GA1UdIwQY
MBaAFH4/uFP4QLN3DNP6QrP50vm+fRt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYt
MTYzZjBlMDc3ZjIzLzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYtMTYzZjBlMDc3ZjIz
LzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZJVB80o
b4/XVKBTl46J0EuYp+BbPGb9RDd1Y5JWb3QwJceEbtzWnAa4oLcxrh3XKEQ9L9Bf
s9yERz8dzyQmikyPQKoISLc5DFQtZ0UCDWQs1W0olcoNi/lo2wF2stnRPXtD3emR
XBlHCyqxF5ZqS+yrzgUQgpJ/0IIx8+po4dQdAkUDv3rvqrokTGlVfqxGS9aWAFLm
vDVaqudqXz95CegDP9Jumkq3kWgh+b9OcTr8l7meiwMFbqnfotdCcpA5O2WSerkU
OF3vvrlyrPVDi5h+37iLWvegzi40go5MYcjdNi6P81AjH5auENJyVDrWswrV1RQ/
Tn4pv8uzA65LFg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:55 2025 by rpki-client