Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
File:                     _Me2AVe1RTWEdeJXCMbizAbbres.mft (raw, json)
Hash identifier:          Eo8FF97xeoA8LwvkruyWYhqhENjFbxYw/0AVCxiEYUo=
Subject key identifier:   2A:60:9D:A2:19:03:7D:61:E0:4C:1D:B1:D2:9F:B2:F6:6B:5A:73:AA
Authority key identifier: FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB
Certificate issuer:       /CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
Certificate serial:       0199FBEC1555EEECAB0CC7C4028DDE999D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
Manifest number:          0369
Signing time:             Sun 19 Oct 2025 10:02:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:57 +0000
Files and hashes:         1: _Me2AVe1RTWEdeJXCMbizAbbres.crl (hash: 8KCYFvl+JEUDj2EyjvJlBG7RVoNArQXBMi3uvAR1pQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:15:55:ee:ec:ab:0c:c7:c4:02:8d:de:99:9d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
        Validity
            Not Before: Oct 19 10:02:57 2025 GMT
            Not After : Oct 20 10:02:57 2025 GMT
        Subject: CN=2a609da219037d61e04c1db1d29fb2f66b5a73aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:da:e8:bf:90:52:d4:95:dd:a2:e6:06:12:bf:
                    b3:12:f6:8d:7b:06:d9:5b:92:78:ea:d8:62:6c:49:
                    87:a5:9a:0e:b4:fa:77:04:c9:82:98:71:94:8e:49:
                    1b:3c:47:7c:62:ce:c3:18:81:37:0f:c4:27:7e:04:
                    2f:59:5a:05:36:c9:e5:3a:c9:de:6a:fc:45:01:0a:
                    16:a1:c2:a4:a4:d6:a1:db:7a:9d:94:4e:c0:29:d2:
                    19:3f:2e:e3:f7:26:7e:f3:fd:ff:63:2b:93:69:58:
                    69:b6:96:97:b7:74:86:ce:84:b2:3d:b5:71:8e:f2:
                    5b:68:03:22:a4:4d:3f:a4:94:43:a5:c9:be:d9:67:
                    d5:cc:51:7f:0b:9d:10:28:d8:f3:52:1f:31:81:3a:
                    9d:a2:f2:48:98:da:6c:9a:99:e4:cb:0a:72:0f:de:
                    36:55:a9:5e:d2:90:87:52:17:21:28:99:17:61:87:
                    bb:5e:eb:59:14:c3:be:7f:b9:b5:b3:b4:ef:0d:bf:
                    16:90:8c:14:3c:fa:74:d4:a5:9d:3d:38:24:4c:62:
                    fe:a9:b2:94:a8:ba:08:2c:8c:e8:c3:b5:a7:d3:83:
                    f8:ff:d6:dc:0f:b0:41:03:8c:ef:28:df:2d:7c:a5:
                    70:82:e4:57:a8:6e:1b:fc:e4:2f:56:a3:cb:b8:52:
                    99:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:60:9D:A2:19:03:7D:61:E0:4C:1D:B1:D2:9F:B2:F6:6B:5A:73:AA
            X509v3 Authority Key Identifier:
                keyid:FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:97:54:93:e1:89:15:48:cd:69:2b:2f:4c:42:e6:38:d0:83:
         6b:5d:47:96:de:48:b3:97:ee:76:06:98:24:35:1a:28:88:ac:
         50:d9:5f:90:dd:73:53:3e:81:59:5a:ca:66:1e:ce:9b:8e:46:
         84:c3:40:5c:97:f9:41:a6:fa:76:fd:64:55:03:13:93:9b:0a:
         45:fc:8e:3c:47:9f:e4:2b:25:6d:b4:fd:c4:7f:76:5a:7c:75:
         91:9f:2e:98:6b:75:59:01:17:c9:b7:61:b9:e0:c1:1e:02:d4:
         72:3b:ce:bc:d9:26:06:f2:15:7b:ab:3b:5f:7f:64:a2:64:d6:
         ee:d7:ac:0a:fc:ca:82:21:26:60:f7:24:f7:13:b7:43:a4:e8:
         59:d0:92:c8:b6:bd:fb:90:50:20:4d:e4:d1:b8:88:ac:e4:90:
         6a:43:a6:47:35:c0:d4:e6:72:e8:7e:24:8f:ae:32:18:db:b2:
         b2:0f:de:0a:62:08:1c:15:a6:46:7e:d4:55:7e:56:65:1e:af:
         21:fa:89:20:a1:b9:36:bb:aa:1a:51:86:b1:44:a7:74:05:da:
         22:f7:21:4e:98:d3:88:69:36:91:bc:4d:07:b2:e8:23:7c:95:
         ec:0d:ac:32:74:63:f7:14:00:ee:9d:8a:fe:ad:35:01:00:fc:
         69:83:6b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:00:45 2025 by rpki-client