Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
File:                     fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json)
Hash identifier:          MsyhQw8h+IZQhYwvCJz+SbqTllLbHYqXK0SjBnHpeVs=
Subject key identifier:   6B:A6:C9:10:8B:CF:7F:89:D3:00:8B:63:47:83:7F:78:96:A4:EA:D1
Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4
Certificate issuer:       /CN=7f0757c331981e042b7471373527d0f64a1356b4
Certificate serial:       0199FDDA42EFCF09C48E2774CBD32EBCA975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
Manifest number:          1286
Signing time:             Sun 19 Oct 2025 19:02:43 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:43 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:43 +0000
Files and hashes:         1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: vwHoQfI6y5wlGHbMjM61Ro6IrmQqUax2qMMJdiJzYyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:42:ef:cf:09:c4:8e:27:74:cb:d3:2e:bc:a9:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4
        Validity
            Not Before: Oct 19 19:02:43 2025 GMT
            Not After : Oct 20 19:02:43 2025 GMT
        Subject: CN=6ba6c9108bcf7f89d3008b6347837f7896a4ead1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:5f:d1:1b:db:af:19:59:aa:9a:bd:49:17:
                    56:d8:c4:4b:4d:93:1c:c4:89:b5:d9:0a:03:4b:e6:
                    29:27:8f:08:1b:ae:bf:fe:f0:72:c9:53:52:6a:f0:
                    ee:88:43:11:72:15:dc:e7:07:f8:99:ed:3a:59:eb:
                    64:ce:21:98:cd:6c:ea:63:e1:03:6c:aa:f8:78:43:
                    87:ed:8c:ff:28:d4:bd:21:9b:bd:25:f7:15:a0:12:
                    54:57:01:87:dd:96:63:23:f4:d8:44:92:60:dc:53:
                    a4:f6:1f:77:07:d7:5b:b2:06:f4:0c:ef:cd:17:1a:
                    c7:a3:39:1f:dd:16:75:7a:3c:4e:19:4d:13:ea:64:
                    8c:95:dd:25:fd:dc:ee:ac:5f:52:b4:87:95:e0:84:
                    67:9c:63:01:34:19:87:9b:dd:78:1b:a5:2e:d9:fd:
                    44:8d:09:61:eb:de:7c:2e:26:17:9f:dd:f8:6d:d4:
                    7f:16:20:82:1f:4a:9e:c9:66:d3:97:9b:00:94:24:
                    e5:c5:b0:44:be:d5:57:c0:84:84:8b:e0:c1:63:fc:
                    cf:68:66:1d:0a:a5:6c:7d:47:e3:92:df:21:4a:4e:
                    b0:5f:10:14:95:9f:40:50:75:d2:e2:02:a2:df:aa:
                    ef:d5:dd:f4:1c:2a:5a:65:90:8f:c3:91:e9:0a:57:
                    bf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A6:C9:10:8B:CF:7F:89:D3:00:8B:63:47:83:7F:78:96:A4:EA:D1
            X509v3 Authority Key Identifier:
                keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:16:a2:7b:b9:a9:0a:4a:a5:ee:68:37:8d:dc:f8:ce:c6:
         74:9f:05:6a:54:a4:0d:60:5c:66:e3:b6:c2:fc:a5:ba:8b:3c:
         53:e5:a7:4e:c1:8f:9c:ae:f0:5a:67:6f:f6:78:64:ab:7f:87:
         77:4f:bf:3e:c0:ae:3c:a0:9a:a0:57:25:82:91:f4:8f:d4:45:
         31:db:c5:66:8c:8e:aa:28:6e:47:24:4f:23:84:ac:8a:2c:fc:
         0f:39:3f:a9:64:ae:1e:65:43:89:ae:43:9e:90:50:d7:cc:a8:
         d0:4b:a9:1d:d8:a7:79:80:d3:ee:53:bb:6b:53:61:e3:75:0a:
         4a:83:ab:b9:8d:d7:69:95:3c:66:f0:ed:12:ca:7e:85:f9:84:
         0b:38:b0:ca:20:0a:39:73:33:c1:5e:e8:d6:6f:a4:1a:05:d1:
         3f:7d:4c:68:12:cf:0d:5e:eb:8b:2a:63:ad:7f:ce:58:51:df:
         92:61:a2:17:5f:49:08:dc:d0:29:b8:94:82:9d:8f:e9:3a:62:
         a9:8b:06:a3:44:42:79:33:a9:e5:b7:a3:d1:7b:90:97:48:09:
         27:6c:ff:d6:cb:94:20:c0:84:7a:f1:d9:dc:fd:64:4e:b0:ba:
         82:70:c8:e2:33:45:f1:0c:99:0a:2e:bb:e8:c8:55:05:72:bc:
         e2:3c:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:40 2025 by rpki-client