Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File:                     fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier:          p24bNYeoOqWkyPujafl4tD2sdIc4mQy5XjO+Oz9bU2U=
Subject key identifier:   63:22:F9:A1:E0:ED:0E:25:FD:4A:99:91:E1:05:60:0C:5E:CE:52:C1
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer:       /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial:       019A006C2C989D58C5B2A7ADE73AC0E4B4C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number:          0323
Signing time:             Mon 20 Oct 2025 07:01:20 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:20 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:20 +0000
Files and hashes:         1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: m4rPhlODXvXTOOciktV4Z9wFGD/BpBjR3echs4eJESg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:2c:98:9d:58:c5:b2:a7:ad:e7:3a:c0:e4:b4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
        Validity
            Not Before: Oct 20 07:01:20 2025 GMT
            Not After : Oct 21 07:01:20 2025 GMT
        Subject: CN=6322f9a1e0ed0e25fd4a9991e105600c5ece52c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:b3:74:ff:e0:dd:ab:b8:b6:fb:82:d7:a6:
                    1e:6d:c0:c8:09:69:63:b6:3b:a8:b0:c8:68:a7:63:
                    13:e3:0a:0d:58:cf:da:23:e2:80:c2:43:ea:a1:26:
                    6b:ba:18:83:a0:89:cc:32:3b:55:79:4c:f1:38:09:
                    90:44:fb:4c:5b:f2:4c:92:1f:b9:46:79:a8:e5:20:
                    92:1a:b0:32:38:1a:07:87:5c:86:97:d4:f9:b6:25:
                    3e:7e:3c:d1:b5:e6:33:21:17:9e:d6:ba:78:c7:04:
                    e1:60:16:76:93:80:a8:21:cb:5f:33:db:33:5d:00:
                    fc:d5:4e:0f:68:e9:70:20:34:00:8b:bf:77:c7:a0:
                    bd:f7:d7:58:25:69:7c:ad:ff:e7:42:b0:b8:4b:03:
                    3b:cb:d0:14:3d:69:cd:fd:39:1d:83:37:55:a6:e3:
                    72:3d:6e:17:b1:7c:3e:46:f8:95:cd:e6:ab:8f:58:
                    60:d9:e8:1a:1d:e5:43:b7:8b:c4:5f:67:12:f2:4f:
                    4f:19:79:f4:f2:55:6d:37:33:71:10:55:28:f9:82:
                    10:37:5d:44:a8:f0:bf:be:72:5e:c9:94:e0:58:48:
                    b2:9c:44:d1:ef:61:07:3f:9c:4f:78:22:40:f0:48:
                    2f:0a:d8:1f:22:90:ba:21:42:eb:89:d8:33:6e:cc:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:22:F9:A1:E0:ED:0E:25:FD:4A:99:91:E1:05:60:0C:5E:CE:52:C1
            X509v3 Authority Key Identifier:
                keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c1:5b:09:d9:63:95:7f:7f:78:97:df:b0:b0:e8:7f:93:d2:
         5b:c4:8b:63:a1:4e:05:10:d3:7a:c2:ca:16:6a:cf:ba:9f:c3:
         db:7d:d7:17:76:a9:49:5e:9e:4e:e9:e9:c6:db:70:51:85:33:
         ae:91:ff:90:2d:6b:29:61:50:61:90:74:03:5c:eb:d9:d1:37:
         4f:65:f6:8b:6f:59:b3:6c:27:2e:1e:66:ad:bf:07:6b:0a:62:
         a2:8b:45:c0:94:86:a4:03:65:5e:81:c2:c3:69:c0:cc:e6:96:
         d9:3b:4a:22:a4:08:b7:fe:62:e2:50:52:fe:bc:c5:a6:f1:bf:
         8c:9a:43:49:af:f4:89:98:ab:34:ea:d0:dc:02:8f:9e:33:97:
         8c:f7:07:c0:2d:80:d2:27:62:69:77:bc:6c:46:a1:61:9b:08:
         53:14:7d:71:32:1b:a6:36:7a:58:d4:95:8c:1d:f0:c6:99:8a:
         b1:0a:f6:05:ad:6a:20:4d:af:da:47:0f:a3:9e:f2:e3:ce:b1:
         00:97:9b:c8:56:88:eb:20:1a:01:20:ac:39:94:df:66:61:f5:
         1f:62:eb:c0:a4:a6:b6:15:4e:b2:90:04:b4:05:cd:67:c1:e4:
         9d:e3:3a:bb:02:77:64:03:ef:68:fb:68:96:7d:fa:a5:cc:3f:
         99:24:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:13 2025 by rpki-client