Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File:                     1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier:          0kr/YGVsCi8pmMvlf3ZgUiqZ6rvKwPuiqxFdPmL7vGU=
Subject key identifier:   8F:E7:48:D4:0F:2F:A2:89:35:EC:F4:91:89:45:33:E9:18:C5:B6:E5
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer:       /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial:       0199FD34325CAFFBBD97A54F44AC780BADC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 16:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:20 +0000
Files and hashes:         1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: Dpis2bgth7HEtZYCE4i7n+jEgQLJ0v1ToH4HxftAk20=)
                          2: x8LYnH5C-2yoYzHnpykE4OWasxo.roa (hash: NSrIlOVo8G3//8ZqRuyTqHM3vssNSeuuZzf6AApNyCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:32:5c:af:fb:bd:97:a5:4f:44:ac:78:0b:ad:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
        Validity
            Not Before: Oct 19 16:01:20 2025 GMT
            Not After : Oct 20 16:01:20 2025 GMT
        Subject: CN=8fe748d40f2fa28935ecf491894533e918c5b6e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:2f:d2:e5:b6:80:ce:91:60:20:13:8a:87:
                    a9:00:0c:dd:a9:a5:48:6b:e2:0d:3d:59:94:3c:e9:
                    3b:de:ea:32:fe:17:66:46:be:32:48:6e:38:a4:d0:
                    11:cb:fd:04:73:51:e4:91:9b:3b:88:47:2a:f6:57:
                    84:af:2a:a6:a4:7b:14:3b:af:66:a7:f0:e0:e0:1d:
                    cd:a0:1e:c3:40:f5:3a:c0:c8:31:a9:e1:b3:4f:fb:
                    07:85:2f:1e:ed:f4:10:fe:a8:67:60:fc:be:26:48:
                    e7:3d:ab:9c:b0:49:79:08:47:9b:ba:40:17:9c:eb:
                    33:68:89:ab:3c:41:5f:27:03:87:48:ee:74:f6:e2:
                    ee:29:57:14:71:bf:dc:b2:a7:9d:7a:1a:85:75:26:
                    79:aa:85:38:ea:eb:2e:7d:65:ea:62:47:e0:18:27:
                    01:ab:d5:4e:76:02:b2:06:8f:d1:4c:a6:2a:19:0d:
                    08:33:d6:69:90:21:74:a0:f9:f6:0d:54:1e:db:91:
                    51:62:00:e7:e4:39:fd:47:61:0d:af:ba:e1:e4:c5:
                    90:90:59:a4:5a:ad:9b:3a:a9:ff:5d:23:b1:27:20:
                    64:75:71:35:cc:fa:95:29:a6:b3:c6:78:aa:6b:41:
                    35:35:4d:1a:77:56:5a:59:c1:d8:26:8f:73:05:9a:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E7:48:D4:0F:2F:A2:89:35:EC:F4:91:89:45:33:E9:18:C5:B6:E5
            X509v3 Authority Key Identifier:
                keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:cc:a1:4d:c9:b1:60:10:10:88:02:b2:15:24:db:0e:ca:
         6e:f5:be:6a:d6:a7:d5:86:05:d6:03:99:80:bf:ca:4d:00:0a:
         9f:e6:51:c2:90:b7:c4:98:70:13:70:38:b7:6f:f4:38:b7:00:
         95:ff:d1:14:48:46:38:e9:85:2e:36:a5:ee:bf:84:59:a2:d2:
         78:9a:79:28:f4:0b:79:ca:61:fa:7a:3e:89:c0:4d:c7:b2:48:
         4c:71:7b:97:4f:00:fd:52:ec:b4:b5:19:b4:85:29:77:96:78:
         06:20:3e:d4:91:ee:43:5e:92:d1:a0:06:6b:25:11:0d:c9:68:
         4c:c7:3c:61:86:b1:96:17:3f:29:07:7d:7e:6d:79:cf:ea:b6:
         69:fb:a1:75:e9:08:23:9e:78:8e:ea:df:af:21:19:cb:6b:db:
         a7:e2:73:26:c0:56:ca:b0:77:31:90:ab:f0:0e:54:ab:63:47:
         71:7b:27:a9:d8:5a:17:d8:9a:38:56:9e:98:53:e9:81:f6:c9:
         02:69:30:5d:b7:ae:aa:8c:73:c6:bd:ad:37:f4:0e:71:f0:2c:
         07:56:bc:bf:11:f8:22:25:60:4e:44:f7:8d:8e:cf:22:c6:c7:
         57:90:02:f2:00:5b:84:66:6b:bd:36:0a:f7:30:46:0e:bf:ca:
         60:d6:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:19:48 2025 by rpki-client