Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
File:                     _gC3BmlCNy_EjPLmHMdRjb8UuvM.mft (raw, json)
Hash identifier:          nNl9s9URu2dhFIK9g1sD28xhDrIb92r47UycWucOpK8=
Subject key identifier:   41:69:C4:D1:3B:33:38:5C:E1:CE:AD:9A:AC:44:29:D5:2F:D5:DC:BA
Authority key identifier: FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3
Certificate issuer:       /CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
Certificate serial:       0198D660DB3742E289D2FFBB2A8C38A0876E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
Manifest number:          0136
Signing time:             Sat 23 Aug 2025 10:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:08 +0000
Files and hashes:         1: _gC3BmlCNy_EjPLmHMdRjb8UuvM.crl (hash: W2AdQRb26vcC5L1T6WQTahAijSE+oR4U/CmqBMMjW74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:db:37:42:e2:89:d2:ff:bb:2a:8c:38:a0:87:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe00b7066942372fc48cf2e61cc7518dbf14baf3
        Validity
            Not Before: Aug 23 10:02:08 2025 GMT
            Not After : Aug 24 10:02:08 2025 GMT
        Subject: CN=4169c4d13b33385ce1cead9aac4429d52fd5dcba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ba:95:dd:a4:87:f6:a7:65:15:68:77:9f:d9:
                    07:ce:82:8e:8e:d4:a3:60:ed:d4:b4:ce:00:3b:38:
                    18:35:09:c3:69:91:af:5e:df:22:85:0e:76:1f:d8:
                    9d:5a:8a:6f:3e:51:70:4c:d8:fe:8b:1b:06:cd:e7:
                    97:d3:d1:af:0d:c2:19:c6:f6:be:26:c7:87:56:d2:
                    89:eb:19:48:40:6e:97:76:40:3f:97:05:51:01:2f:
                    7f:c7:44:7a:d8:a3:94:c8:c1:3b:90:62:bc:af:86:
                    5b:68:d6:c9:24:af:4e:dd:4d:3c:59:e2:d5:80:18:
                    bf:a0:f6:6b:e4:af:25:e8:f9:9f:33:6d:0c:34:01:
                    87:38:b5:e1:21:4b:af:30:c6:ab:f3:6d:1f:f4:10:
                    8c:45:71:c0:e9:40:85:a1:ad:ff:98:4a:0e:8b:e7:
                    6d:e5:3a:b1:0c:97:0b:dc:0b:a5:ba:14:09:60:f4:
                    d7:66:ba:44:f2:5c:fc:b7:f3:97:07:54:66:80:dc:
                    7e:e8:46:70:5e:08:4c:ef:20:95:0a:a6:84:62:e1:
                    42:2a:70:c3:f3:82:2a:fc:c2:fe:d9:38:9b:7e:11:
                    bb:e5:da:0c:e0:dc:ed:7d:2e:a1:09:f2:7b:64:ca:
                    d6:5b:14:27:ad:1d:14:dd:de:53:b0:ca:b6:e9:f3:
                    56:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:69:C4:D1:3B:33:38:5C:E1:CE:AD:9A:AC:44:29:D5:2F:D5:DC:BA
            X509v3 Authority Key Identifier:
                keyid:FE:00:B7:06:69:42:37:2F:C4:8C:F2:E6:1C:C7:51:8D:BF:14:BA:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gC3BmlCNy_EjPLmHMdRjb8UuvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/fd8b6f-4987-4d18-b181-5d56d4d20936/1/_gC3BmlCNy_EjPLmHMdRjb8UuvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0c:d8:16:1c:dc:8f:33:ea:74:24:e6:b2:a9:12:45:46:0a:
         b9:13:03:c7:2d:8e:4a:c0:f5:ad:d4:ef:a3:35:ac:03:19:4e:
         de:7a:ab:61:72:ac:55:2e:2d:f1:0f:21:c6:5f:d3:2b:4c:be:
         27:e0:65:38:9a:24:1a:13:4a:08:5b:02:6b:08:06:d8:e3:31:
         59:fb:3d:25:29:66:a9:fe:af:6f:e1:0a:65:80:75:4e:20:59:
         3d:22:a4:b2:ed:7d:34:e0:f3:57:05:df:97:71:e8:08:4f:f1:
         98:cf:87:1f:83:2f:55:ad:f1:cb:d0:d7:cc:e3:9c:0e:f6:49:
         51:8b:17:ed:e5:ab:d6:ba:ac:1c:96:de:84:c3:da:6c:c5:bd:
         d5:79:22:f5:0e:95:49:f1:70:da:be:e6:34:5f:66:6c:bd:9f:
         73:8b:3b:0f:ca:a5:92:f0:3d:66:7c:1c:ab:1b:7b:e2:dd:34:
         13:9c:30:e5:bb:e6:f5:c2:72:6d:27:bb:bf:12:b4:81:f6:70:
         b7:e5:df:ad:c2:af:d6:25:f5:50:ae:b4:0f:73:b7:90:ac:29:
         9d:de:66:f5:60:fd:a2:5e:6c:a7:ee:46:a6:7d:73:9f:e5:98:
         e1:28:2d:d6:6e:82:3b:2a:0f:cf:c0:37:34:d6:81:24:8e:ad:
         de:68:85:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:13:01 2025 by rpki-client