Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
File:                     F6ECNM-1UiqimzJgp1-Kn3mTPns.mft (raw, json)
Hash identifier:          +Wv46OkpqTphn5UnHiFrJuXoZYZS3/SEmSfJSxIJSlE=
Subject key identifier:   0A:38:22:1D:1F:A3:79:95:13:F6:21:23:60:A7:35:82:E7:0C:46:76
Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B
Certificate issuer:       /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
Certificate serial:       0199FB46313EDE60E1478EC2A53C757C67F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
Manifest number:          0617
Signing time:             Sun 19 Oct 2025 07:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:45 +0000
Files and hashes:         1: CwQ0CgjdF-eK2zokEY5D8Y0SzTs.roa (hash: yxsFQV6dBnKck8poM3ye5c/2LN+fCyAwRwDUyRgSq/U=)
                          2: F6ECNM-1UiqimzJgp1-Kn3mTPns.crl (hash: Jc2hQMQ3hR0SI9uAoR77ML5hwPkaDIWrNAje0e2GRNQ=)
                          3: X1HXVRGjUS2FqgMh5Es7IolTp3M.roa (hash: ZdR2JfGdY7ork0aTakNr5aewEZPJySl7nT5P2fOaw24=)
                          4: xT_cHkX9miZbsMvc7yYpjkfX3zc.roa (hash: MAGu+VbFwRGwGQOut2CLfQFpcWvB1OYzYgzup1WQgKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:31:3e:de:60:e1:47:8e:c2:a5:3c:75:7c:67:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b
        Validity
            Not Before: Oct 19 07:01:45 2025 GMT
            Not After : Oct 20 07:01:45 2025 GMT
        Subject: CN=0a38221d1fa3799513f6212360a73582e70c4676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:16:41:ef:22:3c:ee:fb:73:5c:42:96:65:
                    e5:d7:38:45:c0:8a:74:e6:d3:36:ee:ba:2c:e1:3e:
                    a6:08:09:e6:56:3a:76:cd:df:86:f0:74:89:1d:1c:
                    32:9c:53:fb:02:c3:ef:48:de:9a:69:87:31:64:45:
                    89:a6:43:ac:c7:d3:c9:ba:c0:2f:b6:bf:ed:c0:0b:
                    48:0f:dc:53:56:79:a3:5e:2f:56:86:53:26:b0:bc:
                    00:fb:fa:68:b6:e3:3f:82:e2:27:7e:72:93:08:4b:
                    4e:dd:a1:e7:5a:ad:f6:bb:36:6b:86:f6:c1:bf:71:
                    ea:d0:0c:c5:da:00:92:80:42:05:66:7c:98:eb:66:
                    a0:9e:d5:89:95:2c:10:ae:ef:f9:bc:fa:c6:50:a0:
                    4e:0b:b7:24:48:f8:ba:be:69:e6:f4:6a:fe:6e:8e:
                    44:13:4b:30:60:a5:7a:77:46:66:dc:e1:06:16:f2:
                    13:36:e4:54:2e:0c:43:9f:b5:f5:72:0f:d5:c8:6e:
                    14:72:d1:66:cd:52:54:b5:25:3c:3e:8e:66:32:76:
                    79:8d:b3:93:51:02:1f:85:21:be:38:62:d5:5a:f1:
                    cf:b4:02:3f:9c:93:41:e4:6f:63:ea:26:e7:0b:6e:
                    a6:90:b5:50:d9:3d:9c:cf:5c:c5:d7:03:cf:0b:2f:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:38:22:1D:1F:A3:79:95:13:F6:21:23:60:A7:35:82:E7:0C:46:76
            X509v3 Authority Key Identifier:
                keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2e:f1:32:19:73:75:50:c7:da:7d:23:5c:88:38:ae:f3:7c:
         44:c0:46:f6:f4:71:3a:43:cf:bd:45:01:ee:e9:cf:0c:14:88:
         e9:5d:86:97:02:b4:aa:9c:19:51:2c:7a:0f:02:69:62:32:7d:
         46:bd:66:01:64:fb:63:7f:7b:2b:ab:e5:ce:ca:58:93:4f:c6:
         74:cc:d4:ff:40:a5:54:1b:be:80:e0:c7:40:c2:87:1b:7b:c0:
         b9:e5:02:ef:ed:c0:80:82:09:55:cd:3d:04:67:a3:41:06:e5:
         fc:d5:e3:a0:56:1a:36:8c:f8:aa:5a:34:9a:e9:36:5b:d2:e6:
         71:a8:e7:c2:dc:b6:78:15:f9:d7:81:4d:f9:09:f1:70:be:b7:
         8e:02:d2:8a:05:7d:1c:53:3e:71:f8:7e:96:27:57:2a:5e:64:
         0b:3f:b4:92:e7:d3:98:f3:de:11:18:60:64:46:6f:79:74:1f:
         01:d9:7d:8b:c0:cb:34:e2:37:50:79:41:ce:0c:0d:58:2f:fc:
         45:b3:dd:b0:50:41:68:28:40:c4:24:ba:0f:ff:21:55:f9:a5:
         ad:74:e9:17:73:2b:65:90:1c:6f:b3:d6:39:d0:a5:5c:af:87:
         8f:2f:4d:13:6c:6e:50:fd:68:cf:30:e8:cb:9d:4f:d9:09:b1:
         99:d9:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:26 2025 by rpki-client