Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
File:                     F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json)
Hash identifier:          FOKqJpxWV5aKTFM5XSk0UIERzkY/ysI+urPHKzsEQ+g=
Subject key identifier:   50:AE:BC:0C:47:12:DD:9A:45:A9:57:B7:23:EB:5C:5C:2D:51:14:1D
Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10
Certificate issuer:       /CN=17672556984415b78e9d15461784c8c4e691d010
Certificate serial:       0199FAD7B1FB6C3C130109587A8487DAC6DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
Manifest number:          1579
Signing time:             Sun 19 Oct 2025 05:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:03 +0000
Files and hashes:         1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: Uc0ZmnO7WOyvBl3gujQyVUiRJr9ctSy9RjDfgx+B9rc=)
                          2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=)
                          3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b1:fb:6c:3c:13:01:09:58:7a:84:87:da:c6:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17672556984415b78e9d15461784c8c4e691d010
        Validity
            Not Before: Oct 19 05:01:03 2025 GMT
            Not After : Oct 20 05:01:03 2025 GMT
        Subject: CN=50aebc0c4712dd9a45a957b723eb5c5c2d51141d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:79:c3:2e:6c:3c:62:2e:d9:51:7d:10:15:c2:
                    35:93:a5:18:96:44:31:7c:cd:e9:ec:8f:c0:a7:87:
                    93:5c:4e:dc:2e:d0:28:13:bf:64:90:5b:a9:d7:a9:
                    d7:06:c9:fe:9b:4d:34:3e:01:e7:a9:43:83:c4:f4:
                    72:71:ee:45:28:c6:da:5c:f3:fa:fb:9f:fa:03:b6:
                    c3:9a:f6:c0:37:31:cf:80:dc:83:6b:3a:a1:50:7c:
                    f5:69:0e:f6:f9:fb:6d:68:33:af:ec:3a:fc:24:de:
                    3d:26:9f:aa:6f:8a:7a:ff:f5:eb:de:c5:35:af:38:
                    40:ee:92:ae:43:2a:44:b6:52:bb:bc:8b:b3:99:ff:
                    bb:3b:72:0b:da:6e:34:0b:89:65:de:4b:01:53:07:
                    ee:d6:f0:06:0f:43:89:cb:8e:9d:2b:31:4b:e7:6b:
                    54:19:72:7b:43:42:b5:05:f4:fa:5f:ac:1b:05:65:
                    75:61:bb:3c:97:2e:4c:f9:a9:21:67:12:1f:9d:67:
                    fb:2e:fc:f4:01:8b:2d:54:42:44:bf:44:5e:f8:18:
                    40:8f:81:a0:b7:3c:06:37:2e:66:61:4d:38:32:79:
                    83:17:63:8e:31:68:45:cf:df:39:57:42:2b:22:a7:
                    48:d9:8b:0e:8d:9a:c2:18:ec:85:9d:f3:c9:66:ec:
                    31:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:BC:0C:47:12:DD:9A:45:A9:57:B7:23:EB:5C:5C:2D:51:14:1D
            X509v3 Authority Key Identifier:
                keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:77:aa:64:0f:36:af:f5:ac:03:a1:09:dc:aa:10:e3:28:96:
         d6:73:5b:66:e5:67:e5:3c:54:2f:a8:28:ca:6e:39:f3:8a:cc:
         a4:6b:37:40:48:42:4e:30:bb:86:48:1f:67:7e:63:d2:90:f9:
         a6:da:ca:fb:c8:fd:24:a2:08:61:11:18:45:9b:fa:07:58:0c:
         6c:be:1e:f1:25:83:12:80:28:06:84:8a:62:bf:51:f4:ba:84:
         3f:03:99:78:9e:62:8f:f1:1e:09:58:49:92:ad:54:2e:e0:e3:
         06:71:64:aa:58:09:97:cb:61:e2:3a:66:1a:db:05:80:82:a5:
         d0:58:82:25:9d:34:84:f6:72:c9:ad:ed:18:eb:7c:7a:b5:70:
         47:96:96:67:9d:0e:92:90:c9:80:ec:de:37:e0:db:7e:fb:29:
         7c:8d:4c:2c:3d:dd:ca:9e:41:46:f4:a1:a6:38:b6:e1:24:22:
         77:e0:e1:7a:af:63:77:cd:99:c4:43:56:a7:86:37:a2:bf:79:
         ac:89:45:05:f1:9f:0f:89:d6:8b:a4:84:70:b6:0a:90:e3:b5:
         fd:c4:99:9e:ae:dc:c6:52:75:11:d2:e9:c6:08:76:ad:bb:8f:
         1d:6d:c2:ee:7f:3d:4f:15:a1:52:f5:bd:ce:a4:c9:4e:d8:75:
         85:ca:b3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:17 2025 by rpki-client