Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
File:                     fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft (raw, json)
Hash identifier:          Q0uFgVaODCMUH6v9C7BMgneO57j99U9qXH5MoE+MQ8s=
Subject key identifier:   18:8B:91:3C:84:F4:29:0E:AC:A7:1C:66:4A:1F:A7:64:22:84:86:05
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Certificate issuer:       /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial:       0199FCFD4EC888C7F485A13711AF966C768A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 15:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:23 +0000
Files and hashes:         1: _YypdYwNnlrSxn7Xk5pVVLuYXRI.roa (hash: UMpoA6QJ7yrchwDrkwz1jDoIaBrnsc3wqSmOPTPFUrQ=)
                          2: fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl (hash: IVmj7XKWq2O6mcHj0Jwt2WseMBGXHmZ0jNbRISGLORY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:4e:c8:88:c7:f4:85:a1:37:11:af:96:6c:76:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
        Validity
            Not Before: Oct 19 15:01:23 2025 GMT
            Not After : Oct 20 15:01:23 2025 GMT
        Subject: CN=188b913c84f4290eaca71c664a1fa76422848605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:d8:b8:18:0b:e6:8d:8a:d4:73:f7:9a:c8:
                    be:b7:f2:0e:32:cf:63:7b:4c:ef:05:0e:d5:59:16:
                    7b:52:ba:3f:65:3d:4c:96:e8:45:7b:bf:b5:a7:d2:
                    37:98:66:c0:cc:c1:c1:f3:86:04:9b:8f:80:58:09:
                    ba:ad:4f:5e:c8:44:46:fc:87:94:c8:a4:a8:5e:71:
                    cf:18:48:4a:a0:f0:1b:f5:19:83:f6:33:c5:55:ab:
                    3d:be:9c:85:c6:f5:d1:07:e0:a4:2b:24:04:26:00:
                    a2:0a:a8:04:77:ed:9a:98:70:47:d2:88:13:c5:1e:
                    ca:ad:5b:2a:4c:84:09:fd:8c:55:22:e3:f9:22:70:
                    22:12:ec:62:fb:35:da:63:71:f9:c6:62:d5:2d:af:
                    4d:62:f3:9a:e4:db:ce:f7:82:a0:70:f1:26:d3:1e:
                    b6:e3:c0:96:2a:c6:04:6f:2d:e6:0d:00:3c:34:07:
                    26:87:6e:a4:05:e1:bb:97:c7:b9:05:73:79:b5:ce:
                    27:e0:8e:b1:de:0f:a5:1b:7f:06:ce:27:a5:82:0f:
                    be:1b:c2:48:e8:21:90:5a:e6:47:c2:6d:3d:ad:c9:
                    76:e1:cb:29:e7:5a:fd:cd:6e:4a:60:31:e4:f3:fe:
                    b0:24:08:c7:31:2f:d0:7f:d0:e6:a6:f9:23:e2:6a:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8B:91:3C:84:F4:29:0E:AC:A7:1C:66:4A:1F:A7:64:22:84:86:05
            X509v3 Authority Key Identifier:
                keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:f6:64:0f:0a:75:71:41:dc:fc:f9:c8:f1:8a:a8:d3:b3:f3:
         ea:2a:ef:fe:0b:c9:51:e1:c1:e3:6a:6e:16:08:5e:cc:69:4e:
         3b:4a:9e:f9:26:5e:d3:11:83:a2:b8:42:79:f4:19:d7:71:24:
         2a:55:76:75:a2:27:9e:2f:d4:3b:78:b4:67:4e:cb:42:0a:93:
         fa:35:fe:1c:9b:82:1d:3b:af:18:5d:ae:9f:a0:0a:46:cc:60:
         c8:5b:fe:11:bf:86:d2:d4:2d:02:63:87:00:28:60:ec:6f:6f:
         19:1d:33:d1:4e:70:bd:24:c2:71:0c:3b:1a:c6:bd:11:7c:9f:
         55:60:d0:bf:df:3a:63:45:60:54:d9:60:73:54:52:60:5d:67:
         d9:e1:db:49:39:aa:9f:23:a4:22:84:c1:d5:a6:48:6b:ae:91:
         12:2f:01:8a:e8:6a:43:c8:4f:7c:a7:4a:34:d5:15:e0:ee:9b:
         e5:14:96:e2:b1:45:72:cc:6d:81:06:e1:78:3e:dd:73:d1:fb:
         b0:94:ec:2c:63:96:ed:1a:8a:92:7d:f2:40:ac:1a:e5:cb:1b:
         ea:33:3b:5e:a9:e8:ab:6f:75:65:1e:19:5d:5b:8a:4f:4c:05:
         f1:41:5a:a3:32:1a:1b:78:97:ee:d2:41:2c:70:4a:d2:38:b5:
         f9:9e:1e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:26 2025 by rpki-client