Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File:                     fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier:          8Km9OOrFh1k+IwMoBA32JIUyDrP/cHmk7pLkCquTWE8=
Subject key identifier:   77:7A:D4:D6:91:82:53:F8:93:74:B1:25:76:18:C4:71:A0:F6:0F:06
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer:       /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial:       0199FBEB362F4A136146DDD78D5AFD28CD7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:00 +0000
Files and hashes:         1: R74uc9VabgDHgeKqSIY7mVcIlEk.roa (hash: SIBptA/iA+nbHhZMlZO1SsqsB2uTnNkUJty4C0HxQAw=)
                          2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: 9ELTRL12D9zhH0+YCUUYBSlIFGVUFtWPvgnOfj+I4GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:36:2f:4a:13:61:46:dd:d7:8d:5a:fd:28:cd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
        Validity
            Not Before: Oct 19 10:02:00 2025 GMT
            Not After : Oct 20 10:02:00 2025 GMT
        Subject: CN=777ad4d6918253f89374b1257618c471a0f60f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:df:a2:5c:bd:cd:72:2b:a6:d8:9d:6c:53:
                    5e:5c:b9:5d:53:d1:ec:30:01:ea:04:cf:8e:b5:14:
                    3e:6f:31:8e:47:83:08:74:10:3e:5d:82:37:98:6e:
                    68:2d:ab:5d:75:24:b0:70:66:4a:79:c3:51:35:ac:
                    14:41:ad:80:ff:2b:4f:b6:ec:f9:2d:05:2b:d3:b2:
                    c2:59:36:f8:f6:57:38:ae:7d:da:cb:a1:12:ab:75:
                    98:d5:06:71:1b:07:cd:6b:89:e3:c4:66:9d:89:c1:
                    fa:96:8a:af:71:63:ce:63:4a:f5:07:5a:e4:f9:3b:
                    e3:25:d2:b4:eb:5e:1d:27:11:19:c8:ca:69:a1:92:
                    0d:de:a0:80:6d:3e:1b:7e:2b:4e:e1:75:b8:ae:7a:
                    2b:2c:0d:28:d2:f0:15:f1:da:ee:a4:e4:c4:55:d9:
                    d4:3d:6c:a0:f1:2d:65:5b:5e:38:5c:8a:b5:e6:38:
                    d4:45:a6:3c:a6:08:cc:0e:b2:7f:bb:5d:09:85:51:
                    91:4a:1d:83:f7:3b:d7:e3:4f:2a:3b:96:4a:6b:70:
                    02:9a:64:da:9e:07:fc:6f:2c:b3:2e:65:5d:85:07:
                    74:16:a3:7f:a5:92:75:10:98:e0:eb:a4:3c:06:e5:
                    94:19:fb:89:d5:14:a5:e0:35:d5:b9:0d:ed:83:5f:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7A:D4:D6:91:82:53:F8:93:74:B1:25:76:18:C4:71:A0:F6:0F:06
            X509v3 Authority Key Identifier:
                keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:77:0f:b9:da:19:09:e0:d8:ba:71:cc:88:b4:7d:7b:0c:
         cc:7c:fd:d3:7c:02:87:14:e8:68:8b:ec:24:86:92:ae:f1:e4:
         b8:f6:f0:3c:22:74:56:5d:0c:78:2c:c8:f7:12:58:52:eb:46:
         21:87:99:b4:49:e7:df:54:d8:36:5f:be:70:b4:18:2a:ad:30:
         2b:16:c6:6a:e9:54:07:4c:09:ae:85:98:01:33:25:a6:83:a0:
         fa:df:18:2c:bd:9b:b8:a8:dd:11:ec:c8:91:db:4d:ec:83:9d:
         7c:9f:b1:40:2d:0b:d5:00:16:7d:9b:d7:3d:8d:2a:9d:57:96:
         cb:be:77:4e:f3:00:e6:c1:f3:d8:45:78:e2:60:36:76:a8:ab:
         64:97:39:91:37:46:7f:f6:96:54:f6:00:cd:54:8e:52:df:19:
         11:ef:88:46:49:c9:b5:73:f6:14:f8:c7:48:58:d4:38:68:9f:
         1a:b2:b2:57:0b:95:b4:0b:c8:65:54:41:e3:4f:b4:6e:62:a9:
         2d:2f:63:c4:31:52:9e:96:7a:f5:39:19:54:66:7c:ac:65:81:
         e7:65:46:d2:05:be:19:80:20:cc:ab:26:13:f1:8b:70:f6:5a:
         2b:0b:84:e0:ce:ea:39:1d:a2:61:ae:ea:8d:da:fa:a0:1d:d7:
         9d:76:9e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:12 2025 by rpki-client