Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
File:                     fiR7mB00T2vEwetCMx0jKDgWE3w.mft (raw, json)
Hash identifier:          GRq+gvAmKlgluaaTja7UekG64ij7BCY0DqLQsV4EkMQ=
Subject key identifier:   EE:6A:8E:56:A0:C1:BD:73:4E:7D:26:EB:E1:B5:7A:1F:3D:83:D3:6F
Authority key identifier: 7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C
Certificate issuer:       /CN=7e247b981d344f6bc4c1eb42331d23283816137c
Certificate serial:       0198D73BE1C973A12EDED263505138C2EEAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
Manifest number:          1361
Signing time:             Sat 23 Aug 2025 14:01:22 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:22 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:22 +0000
Files and hashes:         1: fiR7mB00T2vEwetCMx0jKDgWE3w.crl (hash: QPQ2tV+rcxZ/yNbMGoxvCpywIKivKvB2r0uCyK23/8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:e1:c9:73:a1:2e:de:d2:63:50:51:38:c2:ee:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e247b981d344f6bc4c1eb42331d23283816137c
        Validity
            Not Before: Aug 23 14:01:22 2025 GMT
            Not After : Aug 24 14:01:22 2025 GMT
        Subject: CN=ee6a8e56a0c1bd734e7d26ebe1b57a1f3d83d36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:9c:20:8e:39:fc:70:9f:c2:d6:35:e1:98:
                    c0:c8:5d:aa:5b:4f:ac:fb:24:1d:7e:44:35:f2:1e:
                    a5:a2:3e:c2:f4:f6:aa:78:af:5d:be:78:00:2c:b2:
                    96:68:a1:5e:62:69:ac:83:b4:37:87:78:fe:0b:66:
                    e6:59:f1:a5:ac:7c:ba:1c:51:e8:c4:84:08:81:6f:
                    37:a8:a1:57:47:ee:13:9d:fc:92:59:93:18:a2:3f:
                    2b:9a:42:7c:e2:62:e5:2b:1a:bf:53:2a:f7:f3:3e:
                    8a:1c:4f:18:d4:1b:4a:d9:1f:a3:6b:60:72:ad:49:
                    bd:33:b6:a9:75:41:bb:44:64:95:13:f1:db:5f:bb:
                    15:a5:f7:b9:9a:5d:cf:33:62:b2:7c:57:c9:d8:1c:
                    08:81:e9:c9:a5:9e:34:51:64:ea:86:bd:43:17:62:
                    16:95:48:34:c6:ea:35:44:70:af:65:71:18:f8:46:
                    76:19:d0:22:2f:4f:78:39:27:fa:4f:b7:89:ef:94:
                    30:de:01:7a:31:4b:28:52:a8:51:fb:35:76:17:df:
                    13:fa:ac:5d:4e:3f:85:f2:12:42:2c:b5:ec:ce:c1:
                    f8:49:21:b7:d4:54:b6:50:44:b7:01:be:f1:f0:73:
                    46:f0:ea:79:ae:26:5e:64:44:7b:2c:24:51:d0:53:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6A:8E:56:A0:C1:BD:73:4E:7D:26:EB:E1:B5:7A:1F:3D:83:D3:6F
            X509v3 Authority Key Identifier:
                keyid:7E:24:7B:98:1D:34:4F:6B:C4:C1:EB:42:33:1D:23:28:38:16:13:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiR7mB00T2vEwetCMx0jKDgWE3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/83fe09-b50f-42e0-995d-4daff4350001/1/fiR7mB00T2vEwetCMx0jKDgWE3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:45:c4:39:0a:b0:43:08:64:db:1f:77:46:04:38:9d:ba:79:
         b1:b5:3f:d5:32:1e:9a:26:31:3a:b6:6e:ae:7b:50:5d:7f:55:
         9a:59:70:00:a0:19:76:57:40:81:ce:fe:ac:21:29:98:63:df:
         b9:18:b0:9c:fe:ae:e6:88:84:87:50:a1:76:93:d5:4b:ba:93:
         80:1b:cc:3f:12:60:5c:ba:21:1a:bd:aa:54:da:f9:57:27:86:
         b7:bc:d1:cd:03:21:78:12:0d:60:9b:79:47:9a:9a:23:53:d6:
         47:c3:6e:57:e2:e8:3e:42:26:75:b8:5f:10:93:d0:f6:8f:8d:
         2b:d7:9c:72:46:6e:f3:f4:56:12:76:42:de:8c:0d:50:87:68:
         63:b3:87:cd:3f:90:c4:fe:07:43:6f:63:a1:87:be:0c:60:3b:
         b8:2a:46:4b:43:ab:20:71:9e:5c:37:84:77:64:84:b0:b0:08:
         8e:38:86:99:1e:c1:a2:44:ae:11:e5:29:c1:16:ad:51:78:52:
         2f:44:04:4a:99:5d:fd:c6:77:a4:77:c1:dc:c4:b5:c4:f8:53:
         f7:70:a9:d4:63:7f:9d:56:17:f8:12:99:0e:30:02:52:d0:f5:
         a9:bc:7b:7b:04:60:3b:d0:80:49:9f:b7:00:ba:42:78:ba:50:
         b8:62:02:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:10 2025 by rpki-client