Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File:                     FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier:          9UXH+zsE+KspkCVoKQrrMzZeZq6ZfslTggfDarfkXEI=
Subject key identifier:   68:1E:A0:B7:12:8D:49:F5:DF:80:7D:D9:25:C9:89:B4:C4:5E:C6:C3
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer:       /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial:       0199FB45D329D166770F3550F1BD9F6392C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number:          09B0
Signing time:             Sun 19 Oct 2025 07:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:21 +0000
Files and hashes:         1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: pyKtDzhOyTV4tYjcEnbrbQJMz/h+/mOIphndjC+0VI0=)
                          2: GscfecpegOFfpMoknfniRAYQkAM.roa (hash: 8hLbX2dDbgbmzy+G6jKdhfkk83QzDCU0+sWTTicGlYg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:d3:29:d1:66:77:0f:35:50:f1:bd:9f:63:92:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
        Validity
            Not Before: Oct 19 07:01:21 2025 GMT
            Not After : Oct 20 07:01:21 2025 GMT
        Subject: CN=681ea0b7128d49f5df807dd925c989b4c45ec6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:8f:c2:3d:57:07:c4:a3:d3:cf:95:b4:31:
                    a2:e8:b3:40:27:21:05:ab:e9:d8:f3:e9:22:8d:e5:
                    a3:fc:77:0d:b8:9e:c3:bc:61:64:d8:9d:6d:89:e4:
                    84:e3:1c:b3:b3:68:70:cb:40:90:ba:58:23:81:d5:
                    57:81:04:02:b1:27:e8:42:33:ad:ec:89:34:ed:62:
                    08:20:e7:b8:db:cd:80:f3:4d:73:e2:bb:e9:0d:8c:
                    65:8a:00:0e:ed:11:cb:6a:eb:55:64:39:a1:ac:d8:
                    b0:2c:5d:f8:18:a7:3f:a1:50:3a:9d:db:6c:17:0a:
                    62:03:b9:27:3a:e7:07:9b:9d:75:20:59:8c:c3:6a:
                    59:40:b2:5f:53:08:9a:c7:d9:a2:94:cb:16:0c:de:
                    bf:3e:6f:35:7c:78:ff:34:6f:82:fe:9f:c1:82:47:
                    1e:f0:03:6d:1e:c7:6c:9c:62:7a:2d:b0:5c:c2:95:
                    43:1b:57:79:cb:a2:e1:3a:7b:c8:ab:0d:8f:3a:1e:
                    8b:b0:dc:dd:20:10:a2:ab:9d:20:4b:36:7d:7f:38:
                    33:7d:06:c2:a0:66:c8:38:9e:07:d3:3f:29:a6:69:
                    d1:dd:30:74:42:95:55:25:05:4d:c3:70:39:82:3a:
                    ec:95:e8:17:d2:b1:2e:7c:16:45:58:99:60:ee:4b:
                    3e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1E:A0:B7:12:8D:49:F5:DF:80:7D:D9:25:C9:89:B4:C4:5E:C6:C3
            X509v3 Authority Key Identifier:
                keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4e:f1:c2:45:68:c6:6c:77:10:bb:ba:bc:64:b4:ed:b6:d1:
         31:a1:b0:ec:e4:1f:30:75:f9:65:cd:ba:78:60:48:46:d7:de:
         e8:f8:bc:91:ac:9f:60:d7:40:a9:71:47:cc:82:69:ab:88:bd:
         0e:2c:1e:6c:84:39:8f:68:3e:54:27:84:14:f5:e6:52:5f:62:
         55:fb:02:24:bd:81:9d:89:6b:a3:d4:21:47:8b:f3:4d:39:bc:
         8d:59:aa:f1:37:4f:73:d0:93:7e:f4:90:53:59:b7:af:e8:13:
         5b:ed:16:e2:7d:d8:87:ff:71:4b:ad:36:d8:ec:7b:a5:59:0a:
         8d:6f:82:34:5c:4b:b1:49:2e:88:e1:07:14:28:5d:1e:3c:41:
         66:15:d9:3d:ba:29:f1:9c:29:1e:4d:7c:85:2c:ef:90:ac:8f:
         8d:52:28:62:41:57:b8:9b:e8:58:49:9d:44:f2:6f:57:05:a4:
         12:03:66:02:fe:0b:f5:ce:e8:bf:72:54:16:7f:4d:c5:99:8c:
         26:bf:4c:b2:77:83:8a:0f:cf:eb:2b:e5:6f:66:94:e8:d9:a9:
         2f:ba:4d:43:dd:5c:37:07:d6:4e:44:2b:23:45:d3:26:55:9c:
         4d:aa:63:3a:46:a4:74:da:ea:56:49:39:12:d2:6a:3a:c4:9c:
         91:b8:4c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:07 2025 by rpki-client