Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File:                     fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier:          f3XY5hlKHW3WwrBVAlFW2KIoxd2GMPSdh7YGx53WNAk=
Subject key identifier:   0D:6B:3C:08:A1:4E:50:6E:18:04:C3:A9:24:A9:2E:8F:AA:FE:F6:9C
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer:       /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial:       0199FD343885D3E7CE46A632AA59F8E770A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number:          0A2F
Signing time:             Sun 19 Oct 2025 16:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:21 +0000
Files and hashes:         1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
                          2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: JzdjpabcY2JvNwuoma3eUyTC39eZKKcELbwmqhegupM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:38:85:d3:e7:ce:46:a6:32:aa:59:f8:e7:70:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
        Validity
            Not Before: Oct 19 16:01:21 2025 GMT
            Not After : Oct 20 16:01:21 2025 GMT
        Subject: CN=0d6b3c08a14e506e1804c3a924a92e8faafef69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b1:81:84:40:a5:a1:e6:58:75:c1:10:60:1a:
                    84:95:f7:9f:ea:e1:7c:a9:4d:cc:3e:25:ae:ce:6e:
                    49:0b:2a:43:bf:7b:62:90:22:db:33:e9:e9:5a:40:
                    6e:db:af:9b:fb:ce:dd:fa:70:99:99:a5:88:43:c1:
                    91:e4:ca:96:0d:95:a2:85:73:95:97:18:4f:ac:f6:
                    c6:3b:cb:f5:e3:c4:96:56:ff:1b:e2:b8:90:c1:b8:
                    1c:8d:09:26:c4:9a:ac:3d:89:c7:3e:8e:ba:6d:84:
                    42:71:e5:b0:fc:fe:b3:73:ed:5f:cb:73:6b:fc:fa:
                    07:13:78:88:78:2d:f8:90:e6:9a:14:69:40:1a:dc:
                    92:aa:24:da:5b:59:f6:bd:67:34:c5:29:02:ce:5a:
                    92:b9:e4:69:94:7a:46:49:27:54:3e:c8:90:68:db:
                    44:ba:ca:9c:cd:ab:49:be:2e:61:c1:0c:f7:8f:af:
                    9b:77:87:fe:84:6e:78:a0:de:9a:4d:78:b2:5f:45:
                    6d:6a:dd:51:53:54:2f:79:b0:21:00:94:89:74:5c:
                    3b:22:c0:f7:c1:6b:d4:86:50:ba:21:90:3c:13:51:
                    ee:50:9d:96:03:e0:02:04:13:19:57:c6:23:b5:b9:
                    ae:75:4a:d0:29:64:81:67:ef:9a:80:39:09:a9:19:
                    d8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:3C:08:A1:4E:50:6E:18:04:C3:A9:24:A9:2E:8F:AA:FE:F6:9C
            X509v3 Authority Key Identifier:
                keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e6:89:2c:76:bd:95:50:4f:fe:07:98:a6:f4:4d:0c:67:32:
         8f:dc:0a:fb:35:26:cf:db:b7:8f:2d:3a:01:f9:a5:30:13:b1:
         f2:99:8f:ce:1c:92:43:a3:bd:ed:2b:b9:89:cc:b9:b8:b6:32:
         93:34:cb:07:2b:6a:d4:58:c0:a8:c4:2a:de:17:e2:9d:95:9d:
         fb:2a:78:b6:92:53:07:40:cf:24:fc:ac:a8:47:01:ca:16:1a:
         f5:3b:bc:a1:d9:1b:2e:2e:b9:4c:5c:df:29:af:ac:30:cb:38:
         49:f8:4f:aa:41:e6:55:2c:93:15:51:fb:36:b9:2f:fc:63:d2:
         32:df:63:db:ce:20:2c:4e:61:97:48:4c:6e:7a:7a:18:fe:8a:
         23:aa:ba:60:b2:d6:e0:25:22:eb:4b:07:55:10:6f:73:50:4e:
         c6:2a:18:68:48:f4:35:69:2a:3c:3d:96:7c:8e:df:95:cd:a9:
         40:ad:8b:87:91:0b:b2:f9:31:f0:de:37:0a:de:a7:5d:0c:55:
         ef:37:05:23:10:11:07:7e:0f:fe:29:96:65:20:67:47:ab:e8:
         bd:4e:67:52:a6:eb:79:27:29:74:3e:8b:4a:23:05:45:29:a3:
         fe:72:a2:32:f0:e3:23:97:d0:a8:81:23:9e:a0:ff:87:6f:0b:
         36:13:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:55 2025 by rpki-client