Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File:                     f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier:          R8LFYfcoXuDcroov+kMBAfyrSpvk7+JklDX52gn6PFo=
Subject key identifier:   7F:BB:B2:4C:24:00:0F:59:2D:09:0D:F3:6A:46:AD:EC:38:B3:96:3D
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer:       /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial:       0199FC21591A4A1678D8B5EDF186914DF93B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number:          0452
Signing time:             Sun 19 Oct 2025 11:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:07 +0000
Files and hashes:         1: R0Tg1S6YqpnwSmmNGg5sv_IgptU.roa (hash: W7Vg4tcIuHbVrHthiRGSMMWZT9gGTwwdzQz+ZIBO3NQ=)
                          2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: IL18GIwVNo42C1oULGV/aXkzZorwtAuUDN4Y9ISzjss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:59:1a:4a:16:78:d8:b5:ed:f1:86:91:4d:f9:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
        Validity
            Not Before: Oct 19 11:01:07 2025 GMT
            Not After : Oct 20 11:01:07 2025 GMT
        Subject: CN=7fbbb24c24000f592d090df36a46adec38b3963d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:7b:9b:89:ea:60:b6:cd:d3:10:cd:3d:2f:
                    ba:b9:94:89:42:e0:c5:e2:a5:96:ea:5f:c2:ea:30:
                    70:c4:a8:85:1e:b3:72:34:d8:61:5d:08:fb:42:14:
                    3d:d1:49:85:30:3d:f9:d8:9f:f6:58:21:55:59:b7:
                    7b:51:59:54:6a:19:14:b1:d8:0b:22:e7:6f:f9:a0:
                    6f:04:b1:c9:b4:11:fa:a5:2d:cc:ca:b4:98:6b:86:
                    39:cf:df:95:d4:bd:14:0e:ed:5e:2a:3c:9c:d0:c2:
                    83:63:f5:95:28:bc:62:6b:7b:3a:c3:10:69:cf:b0:
                    71:12:00:3a:ba:c2:07:0c:07:84:a5:9f:05:61:41:
                    5f:30:bc:7b:ac:1f:64:23:60:9c:a7:1e:73:c5:8b:
                    2f:27:bb:c1:bb:ca:4f:5c:62:e0:c5:50:58:74:f0:
                    e4:5a:f3:06:c4:1e:0c:c8:7d:1d:94:2d:27:4d:38:
                    2c:08:b4:5b:ae:27:eb:16:83:eb:81:c8:c9:0c:93:
                    8d:e0:3c:5d:6f:39:75:d5:c2:e9:15:ac:f2:98:c2:
                    bf:1a:94:c2:8f:80:88:5b:d0:7a:a7:aa:1e:60:0a:
                    47:5c:4a:9d:6e:01:df:07:ec:a7:0a:12:1d:61:b4:
                    b5:3c:85:24:4c:16:f8:88:08:14:75:4c:31:e1:b3:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BB:B2:4C:24:00:0F:59:2D:09:0D:F3:6A:46:AD:EC:38:B3:96:3D
            X509v3 Authority Key Identifier:
                keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:1d:29:2e:4f:8b:43:2f:2d:7e:69:f3:c8:25:01:be:88:
         52:00:9c:d2:fc:7f:0e:eb:10:85:bd:09:54:0d:f0:4c:23:ce:
         53:19:9e:ff:b9:4b:e5:2b:54:84:4d:ad:0a:a5:4f:4f:08:46:
         45:19:b8:1d:47:1d:89:e8:9a:98:fe:df:75:f9:80:ec:b2:a8:
         67:c0:f3:35:45:1e:45:a3:21:21:0d:3f:a9:92:ce:bb:fe:ca:
         8c:bb:c0:65:31:b0:6a:45:57:75:34:c0:49:71:93:23:95:d4:
         f1:5f:2f:2b:ba:c6:f6:34:c2:27:82:9f:53:a3:38:05:6f:21:
         5d:f5:7c:ac:bd:d7:08:be:54:9a:28:7c:c1:f4:cb:b9:b0:e2:
         65:58:22:66:33:13:85:47:fb:e7:68:5f:26:e7:cd:ed:1b:44:
         3b:ac:0f:50:13:2a:ce:a5:9d:b6:b7:c6:1c:79:4e:a8:d3:19:
         6c:63:7d:d0:69:50:69:37:2f:47:de:16:61:58:fd:f0:bd:e1:
         73:fa:c2:31:19:a8:bd:61:92:0e:28:a9:70:4b:4c:25:86:fa:
         9b:86:6a:85:e0:ee:95:e7:10:76:ac:21:e4:37:f8:f1:bd:9a:
         98:be:8a:2e:38:72:28:50:85:58:91:4c:11:7a:98:10:b3:49:
         40:7a:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:48 2025 by rpki-client