Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
File:                     rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json)
Hash identifier:          SAfHQbGoV8UVQIwKHFOS7NthE+sdWJLDfpwjEz/JQqY=
Subject key identifier:   2B:56:7E:B0:12:E3:C9:FD:B9:78:FB:A4:FA:99:25:8C:16:C2:D6:FE
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Certificate issuer:       /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial:       0199FC8F94AF4B982A84C5CBA473D5DD60C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
Manifest number:          1309
Signing time:             Sun 19 Oct 2025 13:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:32 +0000
Files and hashes:         1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=)
                          2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: PpoeMGWJdm2d4BMdreFaSBGMTvUnQ1aEfM+iEXo/AUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:94:af:4b:98:2a:84:c5:cb:a4:73:d5:dd:60:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
        Validity
            Not Before: Oct 19 13:01:32 2025 GMT
            Not After : Oct 20 13:01:32 2025 GMT
        Subject: CN=2b567eb012e3c9fdb978fba4fa99258c16c2d6fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:76:e8:98:03:d3:8d:77:f0:73:07:00:a3:
                    7f:d0:e2:69:30:6b:ff:01:9b:18:89:79:67:22:f0:
                    ac:a4:21:be:81:42:96:0a:bd:72:b7:a8:d9:f6:b1:
                    83:16:af:29:75:d0:bb:6e:08:09:f9:24:43:64:17:
                    77:56:3c:0f:e9:b4:2e:89:6e:b6:3d:cc:75:d6:10:
                    0b:b1:1d:6d:fd:15:34:45:f8:d0:b7:6c:cf:46:9c:
                    17:73:a2:51:4b:2e:44:4e:78:a5:7a:7e:bc:02:b1:
                    dc:fd:50:ed:3d:db:83:ce:5b:3d:81:e1:52:1c:12:
                    18:d3:79:4b:78:03:e6:a8:99:08:57:6b:8d:74:bd:
                    43:fa:1f:c5:07:ce:76:39:2c:a4:52:87:ca:fc:df:
                    99:53:e2:85:37:02:6a:2e:06:10:58:96:b9:47:84:
                    9e:d8:87:9a:05:13:5c:40:46:a0:4a:32:21:fe:94:
                    2c:f8:69:36:2c:6d:93:0d:73:28:53:e5:4d:0e:38:
                    bc:b5:e4:50:03:93:44:1e:5d:5b:ce:5e:d1:a0:8e:
                    11:8b:59:f8:91:ff:ce:a7:c1:e9:98:24:b6:2c:0a:
                    05:9a:7c:86:84:bf:32:a5:f8:d2:3e:b1:5e:d7:58:
                    8c:54:cc:ca:b8:7d:5b:4f:c4:f4:fe:c2:bc:be:52:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:56:7E:B0:12:E3:C9:FD:B9:78:FB:A4:FA:99:25:8C:16:C2:D6:FE
            X509v3 Authority Key Identifier:
                keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a9:bc:85:9c:3b:1f:0a:37:8b:00:56:ac:1e:eb:05:0b:4c:
         c5:5a:b2:32:1d:ad:88:21:93:88:4c:f8:e3:45:ff:de:af:48:
         ba:e1:cf:39:6b:9a:a1:21:bf:25:07:d0:4e:08:78:08:dc:02:
         5e:4e:34:93:b2:f6:42:4c:9d:eb:70:3c:7c:5b:4b:de:93:e2:
         3f:d2:47:f4:33:3e:d5:10:b5:46:f3:a8:e3:9c:4e:6b:9a:bd:
         8f:44:05:66:09:a2:1d:49:3d:73:ce:be:c8:c3:93:b2:52:e6:
         cb:e8:4a:78:cb:a8:a6:df:ba:de:a9:52:5f:c4:62:19:78:3f:
         99:3f:ce:2a:9a:25:d9:33:83:8e:b4:1c:2d:ff:30:ea:58:9b:
         73:1c:a0:a3:32:fc:a2:98:02:e1:84:2d:cd:0b:b4:49:0d:03:
         f9:8c:02:75:ad:f5:8d:14:ae:33:a4:23:18:78:6d:4e:69:f8:
         9a:8a:45:af:20:7d:02:90:8d:b0:cf:51:7d:f2:9f:fe:1e:e3:
         e2:3b:e8:fa:44:16:d8:7d:e6:dd:2c:42:37:aa:50:9e:c8:9c:
         1e:b9:93:dd:0f:ff:cf:a4:50:a8:9a:bd:55:17:0c:e7:fa:d3:
         85:5d:ce:b6:e2:e2:e5:30:8f:21:f2:09:20:75:1b:19:b5:d2:
         c4:54:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:22:01 2025 by rpki-client