Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File:                     FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier:          QwnKwXPT7DFIVI7ieVSW1J76iJof32LwFiQbnI/NoaU=
Subject key identifier:   32:5D:EB:11:A9:3E:CC:B4:93:2B:B8:AF:46:BB:2D:53:50:85:00:65
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer:       /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial:       0199FB0EC52C8C3270C8935AFB7A96A83193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number:          167C
Signing time:             Sun 19 Oct 2025 06:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:13 +0000
Files and hashes:         1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: 28HgeQKZyhXVcUyG0cseRZt305BStkkVbBw1XmAy/Ac=)
                          2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0e:c5:2c:8c:32:70:c8:93:5a:fb:7a:96:a8:31:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
        Validity
            Not Before: Oct 19 06:01:13 2025 GMT
            Not After : Oct 20 06:01:13 2025 GMT
        Subject: CN=325deb11a93eccb4932bb8af46bb2d5350850065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:f4:14:64:60:d7:9f:82:cd:8e:ae:c1:77:
                    2e:2f:36:ca:8e:68:ae:72:28:47:0f:1d:85:10:d2:
                    7c:d7:5c:44:7b:a5:b7:ec:61:f6:bb:b0:54:b3:b1:
                    a1:46:2b:15:1d:49:a3:99:7b:ac:25:fd:88:67:8e:
                    21:83:72:53:db:56:29:53:98:c3:b9:52:f8:df:91:
                    47:9b:65:fa:42:77:ec:0b:59:32:42:af:cb:6c:a2:
                    77:26:a6:61:f5:45:c3:17:bb:38:5d:2a:b9:25:98:
                    9f:7e:af:e8:1d:00:dd:5b:f4:e2:0f:c4:e7:65:dd:
                    16:5c:ea:f4:33:49:c5:da:2c:1c:83:05:dc:ad:a7:
                    71:4f:fd:c8:01:1a:52:c0:0a:3e:44:8c:02:6b:ce:
                    09:eb:f9:12:01:41:c8:98:e0:45:d4:f4:cd:34:78:
                    d5:c7:1f:0c:0f:e9:d3:c2:11:34:f4:7a:b9:24:c1:
                    84:6b:c4:6d:31:c5:c5:71:90:6a:5f:d7:9d:72:8c:
                    2d:14:8c:3a:7c:20:9c:d1:44:28:86:10:3e:a5:fd:
                    35:21:18:29:b8:bd:be:cd:da:7b:cf:28:3d:16:cf:
                    de:15:6f:68:39:5d:05:b4:42:b6:7d:8c:87:45:60:
                    05:c5:eb:a5:b4:74:b7:ba:a7:b5:b0:52:53:a1:89:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5D:EB:11:A9:3E:CC:B4:93:2B:B8:AF:46:BB:2D:53:50:85:00:65
            X509v3 Authority Key Identifier:
                keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3d:d6:ec:6e:04:62:06:b8:3b:60:0e:7c:60:88:12:69:6a:
         20:44:e3:87:c1:6c:77:96:88:78:73:de:81:fd:be:a9:c5:f8:
         e2:bc:30:a8:d9:ac:4c:59:11:82:9c:37:15:31:4e:d7:d5:78:
         ac:b1:40:30:b8:b0:ce:a4:32:31:95:f7:72:42:dc:df:a9:5d:
         19:7e:55:95:05:39:cd:f7:7b:17:c7:67:07:40:04:07:38:1d:
         18:b9:b3:38:dd:d4:98:b8:c7:d6:f9:4c:f1:f3:04:7d:0b:61:
         e8:9b:0e:e1:14:3d:58:03:4c:49:36:49:c8:60:f1:b8:7d:13:
         76:47:ca:a5:a9:77:ed:51:4c:7e:d2:c6:13:d9:32:7b:4f:73:
         ee:2e:72:5f:9b:82:71:08:0b:52:66:f8:cf:da:a5:07:40:ba:
         b3:24:ed:0b:fc:36:45:75:9a:c6:a9:96:c7:35:03:28:5d:cd:
         fe:71:8a:0c:69:e0:65:e7:43:cd:db:42:db:98:0e:9b:61:79:
         91:fc:c5:e8:93:cf:f4:01:3d:ca:0f:2d:17:76:5b:96:f3:fb:
         0b:02:c4:48:97:12:83:12:23:93:c6:b1:c7:08:2b:58:d7:ad:
         bc:34:2a:f1:63:0d:a2:61:11:4b:25:0f:6f:96:de:df:6a:76:
         57:44:2b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:06 2025 by rpki-client