Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          4OqpjdNuPPMuWDgYSUz1UjhtuIMFswgro6QSRY5CqTo=
Subject key identifier:   6A:1E:BB:01:E3:CF:A2:02:77:B1:4E:04:E7:99:71:0B:43:37:46:13
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       0199FC2177306142D1764A86290E53B2A98C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 11:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:15 +0000
Files and hashes:         1: BwfVTKMmzPQcO6hQWHgwE-WzBlM.roa (hash: K/mo2ikV7viOGHu5dYw3ftaMmyVAbJKcoqq2YMC1Njg=)
                          2: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: mQUQf6SIyT3HxJXyNIi2JruDy18LuPNdUGYaMWhav5I=)
                          3: J9Bpev_Y5vGj_8kiIukuwgRMBjY.roa (hash: 3vSvZEcT9f/cHeJWrMbjmT4TMpfqGkzVbdBf+Y81z9c=)
                          4: OhhSpunX2oFMOOPbpKEEbEzELw0.roa (hash: 3ps6+ztcgkHapstvgub1KecvUe5/zgzQ6krJXv7P6Sc=)
                          5: WfIQgLqg5iDOkRknXs8LwTd___8.roa (hash: 2fUIvuzipETi107axsQwvDcKefOjWiKRaZgxPs7El0w=)
                          6: iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa (hash: DzYF6jb/f2Y0zsTtOWIE735rB2ypyM5HGglTzwx4No8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:77:30:61:42:d1:76:4a:86:29:0e:53:b2:a9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Oct 19 11:01:15 2025 GMT
            Not After : Oct 20 11:01:15 2025 GMT
        Subject: CN=6a1ebb01e3cfa20277b14e04e799710b43374613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:4a:87:b6:39:2f:03:63:b9:93:97:54:4a:
                    58:c4:4a:3a:67:c5:45:80:af:e8:74:30:ba:f6:8b:
                    c5:25:af:26:56:44:e9:58:f1:ce:d6:8a:d3:c7:3f:
                    1f:54:ab:da:52:2f:90:99:ba:4e:1c:8b:8e:5f:21:
                    dc:41:e2:47:36:fb:30:03:6d:a9:f9:23:16:68:2a:
                    d3:1f:33:b9:0c:06:55:52:68:0a:a6:fe:f8:4a:72:
                    9b:26:4b:68:ac:53:07:a0:67:73:8a:15:9e:72:53:
                    1a:81:1b:68:33:1f:e8:65:e8:d0:2c:5b:2c:65:0c:
                    4b:3d:a5:09:7f:e7:4e:85:b3:13:9c:5c:f6:74:38:
                    6a:f4:6f:54:2f:dd:44:4d:f3:60:ed:17:83:bd:81:
                    d3:cd:58:92:61:d9:8e:c0:11:8d:ef:9e:b9:36:df:
                    39:0c:22:ff:22:a2:3b:87:cb:ec:dd:a2:8e:71:a3:
                    c7:8d:92:1c:59:a6:0f:5b:4e:7d:96:3e:8a:81:b1:
                    72:ba:07:2b:86:71:25:aa:cc:02:85:5d:c0:87:8e:
                    71:9f:88:6b:1f:4e:a6:d6:ea:3d:64:5d:f8:74:16:
                    91:5a:93:b0:61:87:a9:1e:27:0e:4e:f4:d1:7e:ef:
                    35:17:03:fa:bd:52:d2:4a:64:9c:52:9d:65:b1:5b:
                    71:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1E:BB:01:E3:CF:A2:02:77:B1:4E:04:E7:99:71:0B:43:37:46:13
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:78:68:b9:ac:31:e0:5d:ac:92:1d:5c:5b:0c:c3:9f:14:b9:
         39:da:e2:12:9a:79:de:dc:ad:89:23:96:46:87:43:0f:69:85:
         2f:90:e6:2b:5a:1c:e0:fd:6b:ce:a5:7d:30:20:f4:3e:53:27:
         7a:1b:27:2b:29:68:11:e3:0a:b2:87:23:58:c4:da:f8:c9:c5:
         a1:10:a7:18:5c:bf:53:47:5b:ac:65:22:c3:c7:37:b0:73:0a:
         21:1a:c0:18:98:d3:b5:e1:b2:1f:55:60:90:83:68:f6:f3:f6:
         b6:5d:64:a9:ee:c9:1b:86:27:ff:1c:62:c8:60:7e:52:78:bc:
         f5:d1:0d:48:2e:e6:0d:12:28:af:d0:77:44:13:fc:df:2e:0a:
         cc:d8:bf:41:a7:01:ae:c5:a8:35:4e:fa:e1:ce:b7:7e:27:e3:
         5f:05:9e:b5:cd:61:54:11:a4:9b:56:76:73:62:76:a8:19:2b:
         5f:92:f8:8c:63:ca:f8:44:e4:c7:f5:14:23:3f:20:11:d4:29:
         f8:01:f6:8d:37:66:23:50:be:1d:fd:52:f9:9c:e8:ab:71:2e:
         39:53:fc:40:78:bb:cb:51:84:77:86:b5:c4:46:da:a0:27:81:
         74:13:37:cb:8e:81:e0:50:53:44:f7:97:3a:56:ab:5c:9c:5c:
         5e:79:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:15 2025 by rpki-client