Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File:                     flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier:          9UlJ/nhn6VpvVDGcdLnNHezSxSCVvqCxRHGWVoNgY8s=
Subject key identifier:   BD:CC:A8:38:F4:DA:09:02:07:2A:50:EC:E9:1C:A5:EE:32:53:A5:A2
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer:       /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial:       0199FC218061AC0F26BE2199CBD65F66F438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number:          15F9
Signing time:             Sun 19 Oct 2025 11:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:17 +0000
Files and hashes:         1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
                          2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: oRq/G+tdGqvkKew40azQw64pEvGv3hmK8nEEv+0KF0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:80:61:ac:0f:26:be:21:99:cb:d6:5f:66:f4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
        Validity
            Not Before: Oct 19 11:01:17 2025 GMT
            Not After : Oct 20 11:01:17 2025 GMT
        Subject: CN=bdcca838f4da0902072a50ece91ca5ee3253a5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:58:4f:d1:09:8d:d5:88:00:a7:39:00:e5:
                    c7:0e:59:22:71:23:aa:f9:35:cc:82:92:15:46:f3:
                    d0:b1:5e:19:49:81:72:f6:5f:19:89:95:50:d4:21:
                    64:bb:3b:c2:1e:db:30:ea:f3:d3:c2:4d:2e:0e:79:
                    73:a6:e8:17:2c:de:a5:bd:35:2a:91:9f:ba:c7:22:
                    40:ee:d0:d7:77:43:08:c9:20:24:ae:3c:58:6c:27:
                    3c:96:5d:42:79:9c:27:52:5a:8c:00:22:cc:0c:a8:
                    d0:33:57:82:df:95:d8:c9:22:c3:82:8c:55:77:54:
                    c2:46:e4:bb:f0:bb:47:1a:6f:d4:33:09:93:64:b5:
                    c7:29:74:96:94:be:44:d8:cb:2f:df:46:ce:1c:a3:
                    93:7a:c2:37:89:bd:27:e2:80:00:7b:42:bf:88:e2:
                    1d:2b:e9:a3:e9:f4:62:c2:d0:75:a6:ed:06:00:bc:
                    d9:7a:d8:2d:a4:41:67:ec:ff:a8:0b:3a:26:5e:fc:
                    2e:aa:0e:38:7f:58:64:94:97:1f:03:db:0b:72:98:
                    31:98:44:f1:7b:ca:d5:e4:15:02:e9:3c:c2:c4:d9:
                    3c:2b:67:50:1f:77:fb:8c:34:61:d3:8b:b0:46:27:
                    9c:91:d6:03:25:d4:2c:8b:7d:77:db:5a:c7:b6:55:
                    26:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CC:A8:38:F4:DA:09:02:07:2A:50:EC:E9:1C:A5:EE:32:53:A5:A2
            X509v3 Authority Key Identifier:
                keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:46:f5:6c:7c:d8:a6:0f:1f:94:17:53:bc:fa:46:f1:9b:c0:
         b0:00:37:93:5a:79:4a:05:fe:37:cf:fd:0c:98:b1:a0:d8:79:
         90:8e:ae:94:0f:67:15:43:b7:54:6e:23:ac:a7:b4:6a:7d:42:
         ad:53:4c:a0:93:41:18:d4:91:69:6b:27:a6:f1:e0:52:42:7a:
         c8:e3:86:49:e2:6e:f0:7d:94:0b:d0:b9:62:8b:d4:97:46:20:
         e2:ec:41:0e:10:eb:a0:3d:e6:65:6b:20:38:8d:45:65:b6:5f:
         bd:87:d5:18:3f:a9:d0:00:9e:bc:73:81:8c:6e:c4:9e:fc:4a:
         22:ec:bb:f5:74:d3:66:57:06:cf:fe:68:d2:45:ff:43:7f:43:
         83:3b:d2:28:38:ed:52:1f:44:78:6e:34:ce:13:1c:10:dd:68:
         ef:39:a1:b3:39:e4:5c:dc:2a:76:97:d0:0d:83:3d:07:bf:69:
         46:7f:0f:92:e6:d4:13:dd:61:e8:cb:aa:81:aa:65:20:8c:29:
         a9:1d:2e:40:5b:c4:ec:c8:27:57:a9:78:b9:4c:bb:d7:15:da:
         7f:d2:47:d0:3d:aa:f2:a6:09:d0:97:45:ca:5d:69:9b:19:aa:
         1b:6b:61:67:24:52:08:f6:b5:d0:45:35:79:54:36:51:b2:42:
         99:ee:94:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:30 2025 by rpki-client