Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          OJD/2kWno4qVPFACUNqej+hvSnGhL4B2zuzdY18ddmQ=
Subject key identifier:   CC:ED:8A:94:86:14:C2:2B:4C:B3:63:A6:5D:0A:56:E8:6A:62:F7:E5
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       0199FC582826F996844FDAE9D020FCB1FE1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          03C9
Signing time:             Sun 19 Oct 2025 12:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 12:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 12:00:59 +0000
Files and hashes:         1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: XATfjCrprI0Vtn6LHbD3Qegn8ZoCCMk0O0EGovEN+YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:28:26:f9:96:84:4f:da:e9:d0:20:fc:b1:fe:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Oct 19 12:00:59 2025 GMT
            Not After : Oct 20 12:00:59 2025 GMT
        Subject: CN=cced8a948614c22b4cb363a65d0a56e86a62f7e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:ce:44:9a:d6:b4:43:62:ba:62:9e:96:ae:
                    33:4a:ec:6f:28:c8:30:e1:a8:b2:ba:95:ac:5b:d9:
                    e1:c6:d1:68:e4:bf:4d:32:3a:49:9d:13:a7:3b:a8:
                    f8:b2:f3:9c:33:12:5d:a1:64:37:9a:a3:34:a4:d6:
                    16:ea:e4:f8:67:18:bb:f4:fc:69:eb:16:a6:a6:41:
                    c8:68:b5:ad:40:9e:fe:06:2c:03:e3:af:45:c9:1b:
                    f4:82:87:8c:f7:0a:eb:0d:d3:00:a9:82:d9:35:aa:
                    68:4f:37:e0:d4:cb:08:67:34:70:b0:4d:18:59:ab:
                    e2:9e:e2:06:69:aa:66:98:0a:a8:15:43:d0:b9:8c:
                    84:a5:81:c0:ce:ed:8f:f0:65:73:7f:49:9a:2d:af:
                    aa:b8:07:06:36:7c:e1:d1:a1:a0:b0:13:b9:cb:fb:
                    2f:b3:52:c0:c5:14:53:ee:05:cf:82:aa:e9:55:2d:
                    b6:5e:3f:2c:63:1a:b7:a8:42:3a:2d:71:64:51:f0:
                    d4:a7:e6:0b:69:89:e1:61:d0:79:9f:c2:8d:ff:82:
                    18:e4:1d:db:e6:71:9a:50:17:a7:26:6a:89:7c:28:
                    e0:3d:7a:1b:53:f1:47:b9:96:06:72:0b:5d:49:34:
                    cf:8d:71:1a:cb:9c:14:8c:3e:b2:72:da:89:6d:1f:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:ED:8A:94:86:14:C2:2B:4C:B3:63:A6:5D:0A:56:E8:6A:62:F7:E5
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:cb:0b:63:d3:73:f8:b4:f7:06:32:bd:9b:03:67:ac:37:15:
         98:af:74:79:f8:a1:f0:3d:9f:b9:12:92:2b:6f:93:70:f0:da:
         86:83:00:65:52:6a:fd:67:c3:44:4f:83:9d:32:f6:d0:83:0c:
         91:02:6e:69:ea:eb:ac:fe:45:10:30:29:a3:bb:f2:0c:e9:76:
         3c:b8:eb:be:c5:62:79:a6:b0:3b:a5:65:b4:61:c3:d0:b7:b3:
         9d:a7:00:d1:3e:dc:3d:da:d7:40:2c:dc:93:87:98:7e:42:b8:
         6f:0b:a8:a3:c3:f8:b7:bc:d8:bf:39:14:1e:d8:de:1b:10:45:
         31:d9:82:08:34:7c:4d:4c:5d:8c:51:8f:fb:1b:0a:ae:76:3d:
         83:34:11:eb:da:af:62:bb:cb:1e:ef:e3:5d:91:5e:98:9d:84:
         3a:cf:00:25:d5:61:b0:89:e7:70:07:92:c3:e9:3b:e8:83:74:
         aa:13:fa:22:01:0d:81:8d:16:25:ea:2c:70:78:d9:62:33:d2:
         a2:b5:c2:c2:3c:fb:8c:bb:59:b5:20:5a:c0:67:67:da:40:92:
         0f:1b:21:f7:48:6e:f5:71:4f:d8:20:c3:b3:be:8b:ef:84:a6:
         fa:01:e4:73:11:2f:6c:64:21:98:c1:e3:2a:55:d7:98:33:20:
         32:79:e3:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WCgm+ZaET9rp0CD8sf4fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYWM2NmZjMjIzMWNiMjY1NmU3NTMzNWExZmQ2Njc3MWY1
N2E5Y2MwHhcNMjUxMDE5MTIwMDU5WhcNMjUxMDIwMTIwMDU5WjAzMTEwLwYDVQQD
EyhjY2VkOGE5NDg2MTRjMjJiNGNiMzYzYTY1ZDBhNTZlODZhNjJmN2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO/ORJrWtENiumKelq4zSuxvKMgw
4aiyupWsW9nhxtFo5L9NMjpJnROnO6j4svOcMxJdoWQ3mqM0pNYW6uT4Zxi79Pxp
6xampkHIaLWtQJ7+BiwD469FyRv0goeM9wrrDdMAqYLZNapoTzfg1MsIZzRwsE0Y
WavinuIGaapmmAqoFUPQuYyEpYHAzu2P8GVzf0maLa+quAcGNnzh0aGgsBO5y/sv
s1LAxRRT7gXPgqrpVS22Xj8sYxq3qEI6LXFkUfDUp+YLaYnhYdB5n8KN/4IY5B3b
5nGaUBenJmqJfCjgPXobU/FHuZYGcgtdSTTPjXEay5wUjD6yctqJbR89HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMztipSGFMIrTLNjpl0KVuhqYvflMB8GA1UdIwQY
MBaAFH6sZvwiMcsmVudTNaH9ZncfV6nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUt
NDZjZTVjODI0MWRiLzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUtNDZjZTVjODI0MWRi
LzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8sLY9Nz
+LT3BjK9mwNnrDcVmK90efih8D2fuRKSK2+TcPDahoMAZVJq/WfDRE+DnTL20IMM
kQJuaerrrP5FEDApo7vyDOl2PLjrvsVieaawO6VltGHD0LeznacA0T7cPdrXQCzc
k4eYfkK4bwuoo8P4t7zYvzkUHtjeGxBFMdmCCDR8TUxdjFGP+xsKrnY9gzQR69qv
YrvLHu/jXZFemJ2EOs8AJdVhsInncAeSw+k76IN0qhP6IgENgY0WJeoscHjZYjPS
orXCwjz7jLtZtSBawGdn2kCSDxsh90hu9XFP2CDDs76L74Sm+gHkcxEvbGQhmMHj
KlXXmDMgMnnjWw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:39 2025 by rpki-client