Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File:                     FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier:          9PLCXP0wDhg7+W9BmfN8DcysTSt7L4mPTrL0Aq8XftY=
Subject key identifier:   56:1C:BC:BE:0C:D0:2C:C6:0F:82:62:8F:FF:BA:FE:B6:8E:80:5D:CF
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer:       /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial:       0199FC8F958B71580F5B82B9406826825B0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:32 +0000
Files and hashes:         1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: r1wMduGli4CRkv02O0YYShhji45z1gnnB2sNDpojDyg=)
                          2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:95:8b:71:58:0f:5b:82:b9:40:68:26:82:5b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
        Validity
            Not Before: Oct 19 13:01:32 2025 GMT
            Not After : Oct 20 13:01:32 2025 GMT
        Subject: CN=561cbcbe0cd02cc60f82628fffbafeb68e805dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:84:a1:75:29:87:9e:1c:cf:36:a9:a5:b7:
                    26:9d:07:cc:6d:76:70:96:03:4e:88:1d:61:89:8c:
                    1d:e3:8f:f6:64:27:46:b5:12:79:c9:6a:20:5b:5e:
                    61:34:d6:f3:46:dd:77:2f:a2:a6:93:f7:55:00:be:
                    7f:95:2d:b4:b4:62:2d:ae:1f:e8:5e:a3:99:17:26:
                    d8:6c:fa:1c:35:4a:0b:93:17:49:f4:ca:8e:cf:14:
                    68:f9:2e:45:8a:2b:e7:42:89:d9:85:60:e6:4b:16:
                    63:47:7e:d5:bb:bd:41:e0:f6:5c:46:f3:e5:18:44:
                    b4:59:5b:73:30:31:2d:dc:f0:44:fc:1e:82:02:74:
                    ae:f9:d4:53:b7:69:e6:35:14:1c:e7:b0:a8:b5:87:
                    25:08:18:48:54:70:67:83:8b:1c:56:ba:75:50:f0:
                    98:b6:9a:c3:0b:a8:b9:72:fc:d5:e8:79:96:a3:13:
                    ab:8d:82:ab:24:80:53:69:fd:37:19:93:bc:08:80:
                    e1:e3:33:62:1b:b9:c2:d5:02:ec:5c:74:65:38:e5:
                    5c:01:31:40:8c:84:dc:ad:f0:53:16:43:cb:88:30:
                    7b:3b:2a:d4:f0:df:2b:34:97:b5:44:0e:4b:b8:e3:
                    c4:b1:e6:6c:f5:59:4a:03:b7:82:5b:6f:43:21:2f:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:1C:BC:BE:0C:D0:2C:C6:0F:82:62:8F:FF:BA:FE:B6:8E:80:5D:CF
            X509v3 Authority Key Identifier:
                keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f1:e5:2c:87:0f:69:3d:41:90:3b:82:dd:e9:23:67:4e:24:
         c6:b4:d6:fa:08:96:e9:05:70:5d:a2:35:c6:db:79:f8:52:dd:
         aa:72:18:ad:2d:7b:90:27:0a:13:28:14:4a:9c:4a:1f:48:47:
         2b:2b:01:38:69:4c:c6:8c:2f:66:1e:f3:02:10:41:bf:9f:8e:
         f0:f4:51:b9:a2:a7:6e:6e:dd:a3:85:89:f3:bb:7d:15:cc:cf:
         10:18:cd:3c:d9:5a:f3:75:f9:ed:c1:01:37:26:1a:fe:37:41:
         30:c7:d5:b4:9e:78:ed:20:b2:86:33:fa:2e:b8:6e:b0:52:e2:
         2c:12:a2:f2:42:7e:91:e6:d8:5a:40:8d:d6:22:2a:fc:ed:fb:
         f3:7f:86:bd:41:ca:a4:a4:1c:6a:da:f2:3b:fe:74:8f:5c:98:
         4f:08:7a:32:0c:53:e8:9a:b9:58:d4:bd:31:17:b5:90:29:93:
         f0:45:ab:9b:4b:32:67:7f:65:d4:d0:c2:68:23:5c:c0:90:7a:
         60:05:c7:f7:26:1b:d8:b7:94:73:0a:d7:ca:65:90:e3:46:a9:
         2b:40:27:a9:8f:c3:c2:3a:34:5a:e5:6a:14:2f:17:8c:ba:a0:
         95:eb:10:d9:be:27:56:eb:3c:cd:96:96:93:24:26:70:ae:dc:
         09:9f:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:51 2025 by rpki-client