Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File:                     f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier:          NNdwwsZw1vWl0NEUNiLpIGhpdq1oxoUPkPiTSb+zztA=
Subject key identifier:   8D:B2:9C:0D:DE:E8:0F:78:0B:33:D2:29:A6:69:BD:EA:7E:9D:36:60
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer:       /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial:       0199FCC693A3B6EFED161CE50C84A3A8F9AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 14:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:36 +0000
Files and hashes:         1: OtzZOisV1bM6sc-GLNPwmdom2N8.roa (hash: hJNg1q2HXpx1PLv5SMEFG6V3PCbaVExvvGGJiMCfNyI=)
                          2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: iGixwkwM3G6YfZjCH2ymBYCv1/pHGgCisJI5sAn3m4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:93:a3:b6:ef:ed:16:1c:e5:0c:84:a3:a8:f9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
        Validity
            Not Before: Oct 19 14:01:36 2025 GMT
            Not After : Oct 20 14:01:36 2025 GMT
        Subject: CN=8db29c0ddee80f780b33d229a669bdea7e9d3660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:85:59:84:4d:6b:b8:e1:62:80:1c:33:ad:
                    75:8d:90:99:1a:48:bf:f9:1a:e1:bd:4c:ad:c0:1b:
                    d9:7e:d2:b0:a8:1a:c7:a3:f3:ac:63:e9:e8:bc:19:
                    25:4e:f9:e5:64:67:9d:d3:de:7e:bb:ff:ea:2c:cb:
                    39:2d:cf:06:b9:ed:42:87:72:5e:07:27:30:95:2e:
                    19:28:fe:4c:41:38:05:f9:b9:43:f8:fe:af:ba:28:
                    b9:df:77:cb:3a:d5:41:02:68:79:bd:64:be:2b:18:
                    91:3d:c1:ca:68:4c:25:27:64:ee:b5:88:0c:86:5e:
                    a7:72:72:bc:b1:37:0e:50:9f:30:7f:20:b3:5d:30:
                    46:e8:ee:36:5c:47:58:a1:55:f8:cc:c1:b2:5a:db:
                    d3:99:2a:a2:bf:69:d3:60:57:1f:4c:fa:89:6c:82:
                    2c:2d:85:0f:f2:84:45:e4:28:8f:f3:83:76:3f:a2:
                    e0:9c:8f:3c:50:16:4c:6d:33:60:f1:f4:b0:13:03:
                    bf:4e:a2:6c:e2:10:c7:c8:d2:1d:ad:14:26:87:06:
                    60:5d:61:03:25:71:d4:01:39:40:2c:20:06:77:61:
                    88:7e:4f:f4:b7:81:eb:7d:88:af:9d:de:f7:54:05:
                    ae:11:21:7b:46:93:81:3c:a1:e1:76:b4:a6:00:2a:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B2:9C:0D:DE:E8:0F:78:0B:33:D2:29:A6:69:BD:EA:7E:9D:36:60
            X509v3 Authority Key Identifier:
                keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:79:5a:3a:b1:36:c0:99:91:31:4a:d7:ba:27:25:55:1e:ff:
         06:94:09:a7:ed:9d:aa:be:e6:53:ca:27:d3:69:57:fb:84:18:
         bb:ec:cf:c0:3a:fe:b3:1e:a9:14:c5:d4:89:c8:95:92:90:63:
         b4:19:23:8e:4e:ef:ad:93:a6:4b:41:a0:02:ed:00:a5:6d:50:
         e8:10:4d:94:56:eb:79:e7:93:af:2a:0d:04:8c:f2:b4:6f:c1:
         11:2f:47:af:ba:63:2f:d8:55:f1:cf:5b:31:7d:36:69:44:03:
         a3:3d:38:e8:af:c0:7e:ac:c7:d1:0f:a4:f2:f1:25:a3:1b:e7:
         2a:27:11:a8:2d:9a:c5:47:94:d4:77:47:03:87:b2:ed:84:53:
         a1:d0:2c:da:1f:8d:72:8d:91:1e:43:69:2d:70:76:66:b4:f8:
         40:42:86:34:79:56:63:b9:2c:26:c3:5a:7a:c2:b5:dd:91:b5:
         68:b6:9e:61:06:b2:ec:2c:bd:2f:18:58:6e:5a:05:d4:90:a4:
         e6:b7:f8:16:86:b8:32:9e:23:74:11:18:87:05:8c:24:30:cf:
         bd:72:5b:dc:7f:d0:85:ce:09:12:61:55:99:e5:b4:61:68:60:
         42:20:f0:70:cb:e4:55:52:00:de:0e:ff:9c:aa:e0:3d:f8:95:
         31:c7:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:47 2025 by rpki-client