Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
File:                     FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json)
Hash identifier:          ccS8seb+pWJ0iASOfw+B7h4CTOjd61L5MuMGLEK+D8g=
Subject key identifier:   BF:B7:05:9E:32:A9:6D:2A:2B:E4:54:3C:CF:AA:AF:DB:C2:29:E0:58
Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC
Certificate issuer:       /CN=15b595260f72c222547ac3e367f2c887ae38a3fc
Certificate serial:       0199FCFD1E02D980514618A82CF1F9D1FDDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
Manifest number:          148C
Signing time:             Sun 19 Oct 2025 15:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:10 +0000
Files and hashes:         1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: 6ofRlrGt8maGM4jt/DHMk/uKAjpg7cdEkQpliDVfCLU=)
                          2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:1e:02:d9:80:51:46:18:a8:2c:f1:f9:d1:fd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc
        Validity
            Not Before: Oct 19 15:01:10 2025 GMT
            Not After : Oct 20 15:01:10 2025 GMT
        Subject: CN=bfb7059e32a96d2a2be4543ccfaaafdbc229e058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:d5:98:b9:8d:14:c8:19:24:28:8c:bd:a1:
                    af:cb:00:9f:de:db:47:45:63:1b:47:f5:8f:d5:36:
                    50:8c:49:cd:2b:2d:1e:8a:ea:19:e5:3a:a0:a2:3c:
                    84:71:07:27:fd:08:39:39:62:fb:be:d5:ea:ce:89:
                    6a:2d:1a:7d:83:db:92:8e:0a:cb:7a:f4:dd:d3:e5:
                    ca:26:18:10:76:3e:53:bc:b9:e0:19:0b:c6:98:48:
                    ca:bf:ca:73:de:ae:22:7d:25:e9:60:21:9d:8e:03:
                    11:80:18:65:cb:b3:cb:6c:70:79:81:72:68:f4:8e:
                    33:7b:ac:4a:79:8b:24:d4:28:c4:82:2b:fb:59:95:
                    3e:71:9a:50:89:17:99:9a:1e:e3:15:87:86:83:12:
                    6e:58:76:3c:d1:37:e4:7b:73:75:6a:7c:a2:6c:ca:
                    a8:73:2f:ce:67:f3:02:4c:fc:11:a1:d9:ea:32:f9:
                    4a:bf:4e:03:2c:f4:b1:29:0a:32:c4:e0:f6:cd:e5:
                    a1:46:79:c9:8b:29:ac:f4:ff:47:5f:7c:01:66:ff:
                    3d:87:d5:f3:56:a1:2b:2e:e6:ab:5b:50:c8:b0:46:
                    77:6b:c1:ca:61:43:da:af:68:e4:02:55:13:95:e0:
                    1d:84:8c:ae:cc:e9:24:26:63:30:9d:d5:b0:21:29:
                    01:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B7:05:9E:32:A9:6D:2A:2B:E4:54:3C:CF:AA:AF:DB:C2:29:E0:58
            X509v3 Authority Key Identifier:
                keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d7:e3:1d:33:5c:c1:aa:d5:f3:ef:3f:e0:9a:0e:75:50:fc:
         9d:be:17:22:4f:f6:58:fc:81:32:70:98:9f:28:65:30:9d:42:
         85:6d:c7:f5:67:74:c4:fd:00:fd:14:d1:2f:61:19:3d:3c:8c:
         f6:60:9a:da:5e:5d:83:23:46:b9:69:b6:eb:52:67:56:dd:64:
         c3:90:7c:15:06:6e:f6:da:af:0f:6e:7e:30:bf:5b:19:d3:1c:
         24:b1:63:cb:ca:b2:90:8d:6f:45:c7:a3:16:bd:de:33:ff:c6:
         af:90:08:ec:3b:ee:37:86:96:0f:26:d1:65:2f:e9:a9:79:34:
         70:ae:48:92:68:62:6c:9c:58:72:c0:ba:0c:ac:87:7f:24:89:
         ea:e2:db:ec:a5:be:90:3c:38:5c:d3:ef:fc:20:83:d0:b2:20:
         cd:3d:a4:6e:ac:24:55:d0:2a:21:81:81:27:d4:df:cc:2c:27:
         82:94:58:f7:a9:c9:cf:52:95:64:f7:57:96:31:6f:a8:aa:cc:
         a4:00:99:dc:33:75:48:02:75:33:0d:69:d3:19:9a:e2:48:fc:
         08:67:57:ef:bf:ca:89:1f:bd:08:f2:f7:5b:d1:03:fd:06:a9:
         bb:0b:6a:ee:75:12:a1:71:a2:96:bb:70:a6:32:0b:3b:fd:3d:
         73:0c:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:05 2025 by rpki-client