Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File:                     FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier:          TfzwcTCwlN5oWne2oxjPLkzo7qzWUsrU1ATa16w4USU=
Subject key identifier:   93:60:AC:C4:EE:1F:78:90:C9:7C:09:1D:C7:DC:39:92:BF:B9:4E:5A
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       0199FDA1DA08F39BA9A15028B57ED209FCC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number:          1158
Signing time:             Sun 19 Oct 2025 18:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:06 +0000
Files and hashes:         1: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: Q4mOnO/Rvka0IEHKRmLx5VrAIR+kEmwSgTnZqfRUvJY=)
                          2: Lc76ATmh3N2WmZPDYJ9rzhql95s.roa (hash: u40vTHuUL4j8mKfluquxQoMV2MtHuQDBqovqP0w+ck4=)
                          3: T7TBRzeJX6tbdWoccYUlzQavEvE.roa (hash: GbQhCrhDJnuTs6aD5dp/vwgXjm1RN1g0gqgdS90d0Rg=)
                          4: aW16bEMvTRG7qNefb2rpU4NnSOQ.roa (hash: 9Z0UxDNm5ByQmlf/lz8y7rt0OHD0m9TRRk+iOQJUyKE=)
                          5: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (hash: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=)
                          6: vkmUdjCWN1ZeVuWp7Z6DgVm4SGk.roa (hash: 1vheYcmcnb4TdJ7xu17GBmTQ7bM9CvRsfJ3QRM8fYsc=)
                          7: wT_wbXD63kRspn66-sCHN9HX56k.roa (hash: giCV77XuxHEuebQnQQQbW4oA8w7bEamDw12AkczJQ2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:da:08:f3:9b:a9:a1:50:28:b5:7e:d2:09:fc:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Oct 19 18:01:06 2025 GMT
            Not After : Oct 20 18:01:06 2025 GMT
        Subject: CN=9360acc4ee1f7890c97c091dc7dc3992bfb94e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:8d:ba:93:a1:f0:7f:c3:f7:f6:8b:2b:1e:
                    cc:5c:4d:b3:8a:2a:75:ff:5e:b0:11:d0:a5:49:28:
                    81:fe:8a:90:9f:dc:e0:27:81:1d:35:fd:e4:31:b7:
                    30:1a:45:48:5c:7f:7c:34:6f:cd:87:e1:11:60:03:
                    bc:db:c4:7d:e5:8e:e5:c7:2a:5e:ec:26:6f:f8:ac:
                    a5:6b:55:2e:2f:f6:44:61:d0:44:b8:fa:ee:08:a5:
                    10:3f:fa:61:2f:25:da:82:71:d9:e5:31:fc:18:62:
                    65:ea:c7:29:46:92:bf:1f:55:a7:71:58:f2:9a:e1:
                    4b:aa:c3:67:0a:08:56:d5:35:a9:1d:c0:ea:a4:3e:
                    49:b7:9f:a0:9f:29:69:23:c3:df:59:d7:22:f5:e8:
                    53:7f:08:36:c5:76:16:49:99:6a:f9:c4:7c:6c:d8:
                    a7:91:92:e1:f7:79:a6:60:5b:59:8a:dc:79:3c:eb:
                    6d:6e:f6:13:bc:b2:9f:17:e6:86:a7:dd:f0:98:42:
                    a1:4b:a6:1e:8e:3e:1a:d9:31:02:88:f8:fa:a1:0a:
                    5c:c9:f9:50:27:be:7b:49:67:c7:bc:83:d9:0b:ac:
                    f8:48:c8:18:a5:74:0d:96:ac:eb:93:92:ba:be:5e:
                    f8:09:d4:9c:c6:85:a3:56:d7:0a:79:ee:c3:15:07:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:AC:C4:EE:1F:78:90:C9:7C:09:1D:C7:DC:39:92:BF:B9:4E:5A
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:a1:2b:b7:ba:eb:db:19:ec:01:dc:f9:1f:31:c7:c9:53:a3:
         0e:b6:ea:6d:99:a5:7c:be:b4:92:ac:5f:9e:0f:59:78:6b:de:
         f6:7d:e4:33:ab:87:3e:46:d9:82:78:75:45:cc:41:0a:32:3b:
         00:a4:f5:d0:b1:fa:83:c6:4f:2b:a6:6f:95:c9:24:91:2b:f4:
         e4:a0:67:aa:b0:63:51:1a:32:7a:90:41:3e:b0:75:a2:84:1b:
         09:54:14:4e:fe:d7:6e:e2:e1:08:97:4a:46:e1:01:80:4b:a2:
         6c:a1:3c:d1:0d:12:28:5a:a5:1d:af:06:9c:c5:9b:77:c7:45:
         d1:f2:b2:1c:6e:d1:f0:2f:c6:40:99:e9:76:fc:d9:cd:1b:f3:
         89:f9:09:eb:f4:da:01:a1:33:c2:2b:66:03:2a:58:67:d0:b7:
         90:c1:82:f6:ae:21:fb:be:6a:2f:d6:62:04:a8:10:af:4e:44:
         f7:d8:78:a8:ba:76:0f:da:f8:a7:46:a9:9e:c0:38:29:83:d7:
         3a:ed:49:82:05:57:f8:62:b4:d4:47:73:b3:bb:50:60:46:d8:
         37:f3:d3:62:3c:41:ef:41:a6:97:45:c7:59:b1:d2:49:02:24:
         fc:50:8c:3d:7d:df:95:9a:9b:fe:38:75:56:00:b0:d8:13:1f:
         c0:58:89:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:10 2025 by rpki-client