Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File:                     E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier:          Ecg7HrMYbJDCTOjEpYR5O8CbODiMJdHxbbXThV3IQFo=
Subject key identifier:   FC:32:69:60:56:6E:BB:19:02:DD:1C:49:38:50:40:88:7C:D0:44:EF
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer:       /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial:       0199FA6A968E1567D5F17D8A7A0D05B8025A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number:          0945
Signing time:             Sun 19 Oct 2025 03:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:53 +0000
Files and hashes:         1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: LEsSfD4rTVLqKE4AmTiJOH+v0Z3qvvLOTvoyDAWK0XQ=)
                          2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:96:8e:15:67:d5:f1:7d:8a:7a:0d:05:b8:02:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
        Validity
            Not Before: Oct 19 03:01:53 2025 GMT
            Not After : Oct 20 03:01:53 2025 GMT
        Subject: CN=fc326960566ebb1902dd1c49385040887cd044ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:f7:26:fc:f8:f3:ef:50:3c:78:b4:ea:45:
                    de:de:89:23:e7:6d:4c:06:80:d0:a3:23:29:b2:25:
                    29:5e:f7:72:3f:19:77:33:e1:09:55:1c:08:36:07:
                    37:2a:1c:09:f6:a9:17:c3:f8:2a:6a:05:82:b7:c3:
                    bd:c7:9f:0b:70:07:b5:02:6c:d6:db:56:79:9e:9c:
                    e1:3b:58:c4:2d:25:b8:c2:48:fd:85:f2:31:e2:d3:
                    4c:04:7e:b9:c0:bf:78:9a:39:d6:31:31:d5:39:46:
                    f3:f3:e8:d4:b4:07:6d:95:08:07:d9:db:17:1d:72:
                    aa:9c:ed:48:ba:8e:4c:f6:89:56:cc:08:4b:89:16:
                    51:15:93:d0:ab:c5:3e:65:ed:11:f2:80:85:c7:26:
                    95:29:a4:5f:48:c6:8b:5f:d1:fb:49:14:4e:52:1b:
                    eb:27:e4:0f:a5:ac:54:b3:51:4a:c2:35:b7:5a:64:
                    62:06:c9:3e:b4:b8:02:47:5a:68:d7:1a:f7:8c:22:
                    6d:54:d8:10:7d:98:49:69:03:22:06:5f:01:65:7a:
                    92:e4:64:4e:be:72:c3:8b:8c:cf:98:f9:8b:47:15:
                    4b:ff:9f:8d:c3:d0:67:0b:dd:d6:b1:e2:e4:74:79:
                    8a:96:14:67:03:c7:1f:41:f8:de:33:51:73:7c:77:
                    9c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:69:60:56:6E:BB:19:02:DD:1C:49:38:50:40:88:7C:D0:44:EF
            X509v3 Authority Key Identifier:
                keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:43:ca:ba:0f:7e:a8:63:5a:66:ab:2c:b9:3e:8b:bc:40:
         fc:f1:e3:d8:f5:73:e0:27:38:3d:19:6c:97:f3:a1:6d:cc:52:
         95:82:b1:83:92:7c:af:1b:d2:7c:e3:9f:51:77:85:ea:4f:fe:
         b0:7e:e4:a0:c4:b2:84:98:44:2f:36:f9:69:15:d6:5d:bd:11:
         e2:f9:b1:42:ee:7c:45:22:a9:50:0c:c2:8b:9c:c6:90:a4:c7:
         3e:3f:b9:7f:5b:17:a9:7a:33:fe:bf:bc:ab:db:2c:8f:e8:28:
         ed:2d:fe:a5:ce:16:ab:6c:35:43:7b:16:69:c0:15:a1:cd:a9:
         6a:28:52:01:3e:44:5e:cc:9e:7c:7b:9f:10:74:b2:40:d7:84:
         ac:cd:af:43:b7:c6:f0:e9:c6:6b:ba:e4:b3:98:ce:39:80:bd:
         7e:3c:71:d2:f6:ed:04:7a:55:9e:3d:88:fc:b4:62:0e:5b:0c:
         81:12:28:11:5b:2a:a0:3b:12:cb:70:8e:e2:46:49:06:6a:59:
         3c:95:5d:5c:7b:04:76:51:52:f0:a9:ec:aa:49:9c:5f:e8:91:
         68:f3:b8:83:ea:54:10:bc:76:42:1a:e9:cb:ce:03:2a:24:5e:
         f6:45:87:80:48:d3:4c:04:c2:9a:06:5e:ef:1c:bd:d2:e7:5c:
         fb:a2:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:08 2025 by rpki-client