Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
File:                     Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json)
Hash identifier:          23P/L5oY5QALFH1ultl502eARwJ4fTJNSHnMG3S3I3Q=
Subject key identifier:   FA:7F:01:9F:A9:64:5F:1A:B6:9E:22:E1:7B:C4:E2:2A:10:53:07:3F
Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7
Certificate issuer:       /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
Certificate serial:       0199FCFD755EF67182F37EB20BC764C4208A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
Manifest number:          0C28
Signing time:             Sun 19 Oct 2025 15:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:32 +0000
Files and hashes:         1: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (hash: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=)
                          2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: 2AMfrQRDxeM08dAXrNCDSPkYUX4Loaunab+67aPFuRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:75:5e:f6:71:82:f3:7e:b2:0b:c7:64:c4:20:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7
        Validity
            Not Before: Oct 19 15:01:32 2025 GMT
            Not After : Oct 20 15:01:32 2025 GMT
        Subject: CN=fa7f019fa9645f1ab69e22e17bc4e22a1053073f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:d9:82:3e:ac:3f:c9:b9:33:e4:51:46:2d:
                    8d:7e:d3:02:72:18:0d:b2:c7:6c:0a:a3:7e:b0:0f:
                    60:f0:e3:da:f0:5d:f2:1e:44:00:8f:93:b7:4f:d4:
                    04:06:4d:59:17:a6:03:65:92:7a:09:df:c1:8d:50:
                    55:5a:c1:b9:c6:0d:fc:f4:a8:9d:14:39:5c:19:29:
                    67:17:fc:1b:2e:5b:de:b9:d5:e3:71:4b:92:5e:44:
                    a0:72:a9:fa:fc:56:39:25:c7:65:10:ce:28:02:ed:
                    45:64:a3:2e:cd:e9:74:21:85:86:20:ee:54:e2:df:
                    3f:49:d5:64:c3:39:e9:a2:1e:4f:00:cf:9e:32:2e:
                    e2:95:79:93:f2:bc:39:b1:6b:59:6c:8c:72:09:50:
                    b9:e1:9d:73:b5:4b:fa:ba:92:ab:41:97:bd:2f:fa:
                    e1:e8:1d:1d:35:db:c7:26:2a:68:b7:18:eb:1d:1e:
                    0e:29:d0:46:b1:00:4d:de:67:f3:75:a0:f5:d1:eb:
                    7e:9c:35:8d:aa:d7:6b:6e:cb:9f:c9:d9:9c:c3:45:
                    23:c1:97:cf:bb:f4:ea:f9:0c:ca:3e:04:ff:11:ee:
                    3b:1c:33:ed:63:b6:a8:85:f5:36:95:75:2f:7e:55:
                    e0:3e:df:5e:fd:9c:b4:e4:c4:4e:70:ce:af:c2:f4:
                    9f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:7F:01:9F:A9:64:5F:1A:B6:9E:22:E1:7B:C4:E2:2A:10:53:07:3F
            X509v3 Authority Key Identifier:
                keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:22:ec:5c:5a:91:6f:b9:38:19:37:10:25:21:73:bf:55:7d:
         b5:2e:51:8f:48:f4:cc:79:31:2b:f2:eb:46:6f:ae:f7:2e:a5:
         31:e2:b9:cb:67:0b:f9:ce:69:c8:6b:da:0f:dc:3f:db:e5:e9:
         34:90:d3:49:80:23:b2:13:01:02:0c:a0:63:0b:77:61:ae:0b:
         49:96:3b:9f:72:37:af:61:7e:55:b8:50:7b:3c:1f:be:5b:d1:
         21:a9:da:63:67:05:89:39:98:86:25:13:38:6f:89:09:c6:fc:
         ef:07:11:31:91:d2:e1:0e:45:fb:f2:c0:05:1b:de:eb:10:c0:
         ec:db:fb:b1:a2:83:99:b9:75:c7:ce:3e:33:6d:a6:f2:ae:f0:
         ff:b2:33:8b:93:d5:c6:d8:82:76:c7:70:29:b1:06:ba:92:f2:
         7d:f6:04:1b:5b:5a:bd:09:f4:e0:c0:79:9e:0e:a0:6f:8f:86:
         10:35:1d:7c:4a:5c:2c:a4:87:8f:2e:ab:50:65:f4:86:0f:39:
         78:44:34:ef:78:03:83:bf:0e:03:59:de:a7:9b:91:d9:37:98:
         30:53:07:0e:02:de:77:6a:9e:cf:85:11:91:c4:1e:03:1f:ea:
         45:e9:54:bc:d7:a4:26:f0:72:43:6b:85:38:9b:8d:6a:c7:3a:
         6b:05:4e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:50 2025 by rpki-client