Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
File:                     _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json)
Hash identifier:          PWabn7pdgfQEXm9JeUlt0vdSrmf2yKASTA6ai3EYS94=
Subject key identifier:   9C:C5:99:F3:19:F4:63:6A:03:DD:18:4F:B0:D2:93:58:A1:A3:08:CB
Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55
Certificate issuer:       /CN=fc534d4c4343cd89918969d56da185674b166355
Certificate serial:       0198D5836481D006A67D47E30E620C52CA7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
Manifest number:          1045
Signing time:             Sat 23 Aug 2025 06:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:14 +0000
Files and hashes:         1: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: 4+/DYYIYYFhaaepzQ63FXekANCVSY+pdUltw/+Kq6FI=)
                          2: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (hash: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:64:81:d0:06:a6:7d:47:e3:0e:62:0c:52:ca:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc534d4c4343cd89918969d56da185674b166355
        Validity
            Not Before: Aug 23 06:00:14 2025 GMT
            Not After : Aug 24 06:00:14 2025 GMT
        Subject: CN=9cc599f319f4636a03dd184fb0d29358a1a308cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c8:14:6f:bc:a1:a9:06:a5:d3:33:f1:f1:15:
                    e8:0d:4a:a8:da:d9:2e:6c:e7:83:fc:eb:4d:95:55:
                    ee:4c:83:4d:39:23:23:98:90:19:61:9a:ec:0b:39:
                    e9:94:ae:c0:ec:5e:44:5c:3d:2f:53:43:07:d4:43:
                    82:68:f6:b2:cc:81:0c:bf:f1:5d:55:1f:0d:ad:85:
                    ee:57:7a:8d:b7:fc:b5:71:d9:28:ad:07:30:24:a6:
                    82:08:77:e9:26:74:ff:03:3f:b9:1f:f1:67:73:dc:
                    dd:bb:59:d9:cb:50:2a:42:d7:af:1d:20:a1:db:2a:
                    1a:6a:49:16:04:b5:4b:f5:7e:c1:86:55:22:80:67:
                    14:d7:1e:3a:5d:00:82:b1:47:f0:02:36:12:eb:f9:
                    18:6d:5f:0a:79:61:e0:24:f1:d6:34:94:b8:26:39:
                    e1:1c:60:4a:4d:c8:14:2f:5a:b5:56:cf:1c:de:31:
                    4e:28:90:05:45:ed:db:11:54:2e:21:c2:91:ba:68:
                    c8:b2:ae:9e:db:c9:d5:b2:b9:d1:90:89:91:5b:43:
                    98:a7:ce:29:e2:00:ee:95:8b:d2:b9:98:de:38:67:
                    a7:d1:8d:fe:85:76:7a:b2:97:8b:44:c5:01:f9:83:
                    70:bc:69:fc:59:17:d4:d2:64:9d:96:ba:f0:0c:f8:
                    cd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C5:99:F3:19:F4:63:6A:03:DD:18:4F:B0:D2:93:58:A1:A3:08:CB
            X509v3 Authority Key Identifier:
                keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:84:e8:d1:f3:9b:75:7a:c7:08:04:97:47:67:57:4f:c4:
         c3:69:09:3f:7a:9f:33:ee:51:62:2e:81:0c:cf:dd:65:05:5b:
         fb:bb:ac:12:5d:03:fc:10:f0:41:2d:b8:90:77:5e:a7:05:07:
         e4:9f:29:c1:6d:fc:f8:78:76:b8:a4:cf:5c:f1:68:76:87:68:
         11:c4:d6:b9:59:f0:7a:69:04:a5:c1:d1:90:2a:31:17:97:6d:
         b4:b4:fd:09:2a:74:98:79:e6:6c:f4:3c:79:50:28:47:08:0c:
         23:1b:fb:2b:7f:43:46:16:8e:82:76:2b:78:7c:9c:f6:86:61:
         3d:e9:75:2e:8b:c3:5f:9c:25:e8:69:09:ef:ee:da:0a:19:d0:
         b7:6a:bc:90:03:de:e2:f0:45:f9:18:a7:c3:78:0e:69:d2:94:
         db:67:17:c9:1b:ad:6e:33:e7:2a:de:b3:ec:6f:0e:c1:d3:2e:
         5b:83:aa:5f:c1:df:68:18:ba:92:bf:77:b6:c5:9f:2d:80:7b:
         72:ca:fb:49:77:57:0c:8f:6a:0d:0b:d3:01:9c:3e:95:1d:3d:
         b0:3e:f5:7e:92:ec:f6:3d:d3:12:ed:df:9a:e8:2a:af:90:c9:
         99:85:fb:4c:cf:dd:3c:34:d8:80:03:af:a9:12:0c:e1:37:38:
         d6:9d:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:24 2025 by rpki-client