Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
File:                     fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json)
Hash identifier:          Fn+yL7bNrS0XhLv0MkmO/xPF34yKUczGWZYIgP4YbLI=
Subject key identifier:   7F:50:E6:A6:FA:F4:5D:6B:A0:D8:D4:C6:26:B2:A0:8E:27:EE:F5:31
Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63
Certificate issuer:       /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
Certificate serial:       0199FDD8DF9495D60EC2745F531870935491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
Manifest number:          065D
Signing time:             Sun 19 Oct 2025 19:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:12 +0000
Files and hashes:         1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: epoRg/cKF7e5bXRO4ZFX2vDXa2yK2guyqhefkpWs398=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:df:94:95:d6:0e:c2:74:5f:53:18:70:93:54:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63
        Validity
            Not Before: Oct 19 19:01:12 2025 GMT
            Not After : Oct 20 19:01:12 2025 GMT
        Subject: CN=7f50e6a6faf45d6ba0d8d4c626b2a08e27eef531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:60:5c:51:47:a8:d5:99:9e:ae:bd:3f:60:46:
                    23:72:c2:3c:7b:b6:66:3b:83:e3:d6:b0:dc:78:9f:
                    8b:f6:fb:66:5e:15:a6:f4:65:2c:7d:b3:17:a8:ab:
                    64:f3:49:92:3a:06:11:6e:9c:81:df:80:20:5d:e4:
                    9b:a6:ea:d1:e6:f4:63:5c:c2:df:15:41:04:01:c7:
                    81:13:07:90:d9:67:4d:aa:6c:bb:7f:42:ca:2d:80:
                    df:33:81:cb:b4:5b:66:2e:6a:9b:4a:d8:6f:3e:a3:
                    38:4a:f2:60:24:57:c7:bd:6e:a5:a2:6f:02:1d:ad:
                    c1:77:0f:a6:41:1d:f3:26:85:de:ff:ce:07:b7:c3:
                    c9:40:20:93:ed:db:ca:04:ec:65:89:b2:e7:8c:a0:
                    83:93:5a:d5:37:07:6c:df:af:7b:c5:e7:cc:51:1b:
                    70:41:c9:00:14:67:93:d3:b4:f3:68:28:bf:ae:55:
                    74:48:ef:ed:f7:d9:f4:55:30:cf:29:fc:ea:4c:cd:
                    fe:72:eb:1a:fb:c2:c0:08:a7:7a:cd:02:29:f7:c3:
                    a1:88:d3:8c:18:9f:6c:8b:83:73:e4:3b:e8:ca:99:
                    bb:45:b4:a5:93:ff:80:a0:03:f5:b8:d8:53:b0:a2:
                    9d:e1:6d:57:b4:3e:92:88:96:0e:03:03:08:95:a4:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:E6:A6:FA:F4:5D:6B:A0:D8:D4:C6:26:B2:A0:8E:27:EE:F5:31
            X509v3 Authority Key Identifier:
                keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:16:e7:f3:3a:fa:a7:9c:64:37:66:44:57:b0:aa:96:33:
         c9:17:5c:c6:84:83:59:f8:0f:bf:1e:a6:ed:f0:41:58:9d:6d:
         c9:2d:8f:20:ef:a9:da:91:97:2b:48:99:d9:8e:aa:02:ec:5c:
         68:ca:2f:a8:8a:56:71:d0:f9:4d:2f:25:be:5d:61:46:fb:82:
         bc:65:64:a3:6d:9b:6a:2a:03:40:7a:5d:46:bf:ed:9d:c5:4e:
         a3:b1:38:56:f4:60:7c:0d:9d:b8:10:af:af:9e:65:c5:33:39:
         9c:43:cc:e0:f7:cc:57:49:3d:fb:ad:5a:8d:14:ce:f8:cc:f1:
         21:39:12:8e:a0:68:e4:09:f6:13:ff:9f:41:57:6d:56:50:91:
         45:7b:82:06:20:a6:fc:5c:e5:7f:1d:65:bc:b0:e3:d2:0c:21:
         42:bf:85:56:46:b3:d6:f4:ef:c8:b7:e0:59:31:31:a1:64:05:
         ee:b4:b6:df:c7:9d:66:bc:c3:26:9c:36:ed:32:72:eb:f5:91:
         d1:f4:e2:f3:86:d7:2b:04:4d:5b:f5:9a:8f:9f:0b:c5:5a:c8:
         59:0a:c9:88:61:11:38:68:49:07:51:d1:4a:22:57:69:c4:69:
         a8:76:b2:ca:ab:fb:98:19:3d:83:5c:fd:b3:6e:f1:66:bc:2c:
         e6:0f:a8:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92N+UldYOwnRfUxhwk1SRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTI5YTczYjhmYWJiYWU0NjBlNzkyNGZlNzY2ODQ3NWRj
YjlhNjMwHhcNMjUxMDE5MTkwMTEyWhcNMjUxMDIwMTkwMTEyWjAzMTEwLwYDVQQD
Eyg3ZjUwZTZhNmZhZjQ1ZDZiYTBkOGQ0YzYyNmIyYTA4ZTI3ZWVmNTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2BcUUeo1Zmerr0/YEYjcsI8e7Zm
O4Pj1rDceJ+L9vtmXhWm9GUsfbMXqKtk80mSOgYRbpyB34AgXeSbpurR5vRjXMLf
FUEEAceBEweQ2WdNqmy7f0LKLYDfM4HLtFtmLmqbSthvPqM4SvJgJFfHvW6lom8C
Ha3Bdw+mQR3zJoXe/84Ht8PJQCCT7dvKBOxlibLnjKCDk1rVNwds3697xefMURtw
QckAFGeT07TzaCi/rlV0SO/t99n0VTDPKfzqTM3+cusa+8LACKd6zQIp98OhiNOM
GJ9si4Nz5Dvoypm7RbSlk/+AoAP1uNhTsKKd4W1XtD6SiJYOAwMIlaSU6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9Q5qb69F1roNjUxiayoI4n7vUxMB8GA1UdIwQY
MBaAFH7imnO4+ruuRg55JP52aEddy5pjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVLYWM3ajZ1NjVHRG5ra19uWm9SMTNMbW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xM2RmM2UtYmMyMi00MDJmLWFmYmMt
ZmM5ZWFkODI1NmFjLzEvZnVLYWM3ajZ1NjVHRG5ra19uWm9SMTNMbW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC8xM2RmM2UtYmMyMi00MDJmLWFmYmMtZmM5ZWFkODI1NmFj
LzEvZnVLYWM3ajZ1NjVHRG5ra19uWm9SMTNMbW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbkW5/M6
+qecZDdmRFewqpYzyRdcxoSDWfgPvx6m7fBBWJ1tyS2PIO+p2pGXK0iZ2Y6qAuxc
aMovqIpWcdD5TS8lvl1hRvuCvGVko22baioDQHpdRr/tncVOo7E4VvRgfA2duBCv
r55lxTM5nEPM4PfMV0k9+61ajRTO+MzxITkSjqBo5An2E/+fQVdtVlCRRXuCBiCm
/Fzlfx1lvLDj0gwhQr+FVkaz1vTvyLfgWTExoWQF7rS238edZrzDJpw27TJy6/WR
0fTi84bXKwRNW/Waj58LxVrIWQrJiGEROGhJB1HRSiJXacRpqHayyqv7mBk9g1z9
s27xZrws5g+owg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:00:32 2025 by rpki-client