Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
File:                     F2wVCakW_qd6H9QIipnQ5iLWTD8.mft (raw, json)
Hash identifier:          R3/c5hTQSnVve40g+dPN1vNu82Nxm7fPzPftYuZGtuQ=
Subject key identifier:   70:90:F0:6B:CE:BF:83:FC:2A:80:C1:71:B9:95:8D:08:75:A0:06:1E
Authority key identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
Certificate issuer:       /CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Certificate serial:       0199FD34636728EB875D8D0E5CB1278C6E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
Manifest number:          FB
Signing time:             Sun 19 Oct 2025 16:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:32 +0000
Files and hashes:         1: F2wVCakW_qd6H9QIipnQ5iLWTD8.crl (hash: obXEU1ABPC6i9spDvK4g7XZz+Py/+5Bi8pJMFTUpUvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:63:67:28:eb:87:5d:8d:0e:5c:b1:27:8c:6e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
        Validity
            Not Before: Oct 19 16:01:32 2025 GMT
            Not After : Oct 20 16:01:32 2025 GMT
        Subject: CN=7090f06bcebf83fc2a80c171b9958d0875a0061e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:54:2d:a7:bc:fd:8b:a2:7c:88:65:04:12:
                    31:46:8b:0f:a2:7d:7a:da:ab:32:fe:a3:c7:99:9c:
                    18:04:b5:11:e1:98:e8:d6:06:7c:1d:93:d1:57:3a:
                    0e:32:c0:b2:00:6c:f7:dd:ed:48:19:49:dd:88:88:
                    93:4f:29:51:fd:6d:a1:88:99:ff:47:f4:d1:98:87:
                    9b:e2:68:77:a7:bd:71:f0:20:24:42:cf:08:d2:dd:
                    d2:e9:68:89:91:7e:e2:62:bd:3d:fe:a2:6a:b8:0d:
                    f2:03:1c:3f:14:db:ee:45:1c:fd:f0:71:3e:de:60:
                    7e:10:bb:fb:d9:ca:ad:71:9f:2f:43:a6:81:1b:a1:
                    69:72:de:9a:78:a1:5c:83:6d:28:95:03:df:94:af:
                    ae:84:39:60:57:c6:09:1b:5e:bf:c9:1c:5e:a8:c2:
                    a8:a4:c4:30:4e:98:58:e9:95:5c:91:45:60:2e:4a:
                    de:70:6b:2d:00:2c:71:5a:84:4f:5c:0b:7d:b6:42:
                    11:8d:c8:db:bb:12:30:00:d4:c6:3b:71:ab:ae:1a:
                    d2:68:20:1e:ae:62:7e:35:e0:db:30:7f:c9:84:b5:
                    72:33:57:ff:6e:af:8b:1d:7e:4c:c7:9b:15:68:64:
                    f0:51:bd:06:08:b3:ad:aa:09:3b:f9:02:e2:53:66:
                    97:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:90:F0:6B:CE:BF:83:FC:2A:80:C1:71:B9:95:8D:08:75:A0:06:1E
            X509v3 Authority Key Identifier:
                keyid:17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:39:b1:c5:57:e6:b6:06:1a:56:86:d3:de:bb:ea:35:1f:b9:
         5a:f7:b4:63:04:61:36:02:0e:c7:82:15:1c:97:85:11:3e:1e:
         4f:a9:11:82:3f:81:23:3d:1b:4a:90:6e:ec:62:3c:0b:43:b5:
         a1:26:b8:83:22:75:20:91:dc:6a:4d:8a:b0:c3:43:54:1d:ac:
         e5:f0:f1:94:22:4b:98:5f:78:ae:7c:91:a0:79:5b:86:06:f1:
         f5:29:23:06:21:90:ca:92:04:09:43:06:19:a0:7d:04:99:6b:
         67:3e:6d:c6:8a:70:53:a9:fc:f7:aa:c2:8a:3a:55:97:59:73:
         03:d4:ac:cd:f3:7c:a9:be:cd:39:d9:16:dd:dd:96:83:50:66:
         8e:ee:31:54:56:5b:4e:34:ca:9d:5d:ea:eb:2b:41:91:76:eb:
         c8:22:15:d0:b0:76:00:9d:d9:34:98:1d:1e:44:ed:ab:09:ab:
         f2:5f:f9:b4:93:9c:32:f6:be:b0:04:01:fb:84:80:2c:36:45:
         7d:3c:05:c0:9e:8d:08:fd:2e:4b:ee:e0:0c:b7:e6:17:ed:28:
         97:c2:59:31:f7:91:e0:b4:d2:75:bc:09:f0:48:22:96:30:24:
         11:da:f2:78:64:6c:9b:cd:82:c8:df:82:3b:9a:0a:65:45:b0:
         c6:dc:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:44 2025 by rpki-client