Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
File:                     fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft (raw, json)
Hash identifier:          aQDZD2U5ozxflPAR70puY4YrNppkVU+rg9UGICGA1pg=
Subject key identifier:   B1:93:96:66:12:C6:8F:91:C9:4F:70:4A:80:62:17:AE:FF:AC:CC:D6
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Certificate issuer:       /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial:       0199FB0F410EA746E48E09A19A5CCE387849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
Manifest number:          0BC3
Signing time:             Sun 19 Oct 2025 06:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:44 +0000
Files and hashes:         1: fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl (hash: JbTOMG7JeBJtQEZmjXFehgQxFAlO2nSJxVIUMSo0AJQ=)
                          2: mCKGYv7Hn8VpwzSrofG5k1K1u28.roa (hash: LkkBVbT8cmI52OeplrbujyTxipUcCUujJaGi2zW5iDw=)
                          3: o74rBkwgi-OLyw8qLeq0VZnWs9M.roa (hash: XmOmIlqK0EcHoxKDnpHB1Iv3cjgrTtgXMu4pU/uNCvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:41:0e:a7:46:e4:8e:09:a1:9a:5c:ce:38:78:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
        Validity
            Not Before: Oct 19 06:01:44 2025 GMT
            Not After : Oct 20 06:01:44 2025 GMT
        Subject: CN=b193966612c68f91c94f704a806217aeffacccd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:96:35:39:f8:3a:f7:06:8a:a9:bc:5a:fa:
                    99:a1:12:e8:dc:04:a1:cf:b1:73:60:8f:61:d6:75:
                    5c:36:38:41:89:04:49:2e:df:ee:c2:fa:6c:da:8b:
                    d1:d6:46:c4:78:08:78:71:3a:7b:b9:67:46:11:95:
                    ed:8d:59:b5:b9:08:e1:d8:84:80:63:fa:6d:1a:85:
                    26:6b:69:ce:1d:41:83:09:e2:79:7d:92:7b:e1:1a:
                    2e:7b:e0:68:a5:a7:4b:04:dc:aa:bf:4b:98:97:7f:
                    59:58:f4:ef:98:38:a1:63:ab:29:4b:89:c1:21:5c:
                    c0:0f:66:d6:ae:52:01:e4:88:03:3f:e3:ba:95:eb:
                    33:05:35:06:7d:2d:f6:38:47:38:0b:42:8e:76:53:
                    a6:2b:d6:f2:ea:f5:b2:3c:37:c0:49:d9:d7:5b:0f:
                    54:be:51:26:6a:41:07:d2:87:19:42:f3:e5:0e:c6:
                    7b:68:d0:fd:72:10:62:3b:12:fa:9f:70:97:55:4f:
                    46:bf:e0:fa:a8:60:c4:20:69:b7:87:e2:7a:67:5a:
                    56:c0:5f:5d:0f:9b:a8:a0:a2:27:8b:33:61:e5:7d:
                    a5:58:7e:61:c2:96:ea:2f:60:f7:16:35:c1:47:65:
                    a1:03:c3:1f:23:2a:a8:5b:c1:f8:08:6d:41:d5:d9:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:93:96:66:12:C6:8F:91:C9:4F:70:4A:80:62:17:AE:FF:AC:CC:D6
            X509v3 Authority Key Identifier:
                keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9e:bd:8d:e9:03:93:09:86:da:18:b3:f3:15:31:f6:54:0c:
         da:93:f5:33:5c:75:e4:4f:b4:f9:fb:f7:fe:81:17:4a:b1:f9:
         fb:a6:de:88:e3:98:d0:ed:b8:41:2d:01:ad:eb:6c:e8:18:49:
         92:e7:62:59:bb:e2:c5:08:56:c8:6a:fa:31:94:20:0c:b3:2d:
         be:24:bd:aa:ed:ca:ac:f5:a0:28:01:14:cb:53:67:4c:e7:df:
         46:22:10:83:c8:fb:b6:a1:bf:31:33:63:fa:7b:e5:1c:3c:f1:
         0c:4e:e5:26:a8:19:6c:d8:5b:1e:26:50:f1:12:a6:5b:dd:51:
         13:52:7b:75:30:18:cc:e3:90:07:69:0a:bd:1d:4f:d1:5f:77:
         09:b3:bc:a0:ca:25:d1:a5:be:31:35:6c:07:64:02:a1:5e:56:
         0e:23:b9:9a:82:61:a2:a3:d4:c8:17:d6:3e:64:47:bc:b7:a6:
         e8:d9:10:40:8e:65:1f:1b:21:33:91:ff:69:a8:a2:49:0c:ef:
         ea:70:ec:41:a5:59:ba:17:2c:e7:dd:3a:b9:4f:6a:7d:a1:ba:
         c0:df:b4:d7:85:64:fd:fa:6a:2a:11:2a:25:94:f0:98:95:43:
         ff:cb:40:77:67:2f:e4:82:c3:7a:cd:7b:be:17:1c:d9:7f:43:
         b5:5e:9a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:49 2025 by rpki-client