Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
File:                     frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json)
Hash identifier:          wl8DgbhWs0MDHRAEeKwzKQaUIN8mxfc9gH97kBaQgW4=
Subject key identifier:   D6:2A:7E:38:02:E2:09:72:8E:03:07:BC:3C:5C:56:EA:01:84:D9:C5
Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76
Certificate issuer:       /CN=7eb92b38df197ca2cbae302693226b23f32a3f76
Certificate serial:       0199FCC60A42A4C8E9276772DDA6EDC2570A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
Manifest number:          0A89
Signing time:             Sun 19 Oct 2025 14:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:01 +0000
Files and hashes:         1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=)
                          2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: QQeqb/m332vn29bJDUpwD8rA9M1/jX1eoQHQlPC+yfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:0a:42:a4:c8:e9:27:67:72:dd:a6:ed:c2:57:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76
        Validity
            Not Before: Oct 19 14:01:01 2025 GMT
            Not After : Oct 20 14:01:01 2025 GMT
        Subject: CN=d62a7e3802e209728e0307bc3c5c56ea0184d9c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c8:b3:95:58:dc:5f:ef:4f:87:6a:b9:58:f7:
                    7f:bf:d4:ba:9c:29:c4:97:56:ff:38:96:e6:22:3b:
                    69:7d:ee:2d:07:4b:d8:0c:5f:79:fa:d2:bd:d5:57:
                    6b:d9:69:fa:ed:10:ff:35:4f:39:16:2f:be:d5:b5:
                    13:8e:1d:5d:e8:0a:8b:27:e4:69:ef:a5:08:b9:dd:
                    84:ac:33:be:b8:19:ee:8c:c4:16:7e:29:42:d3:a2:
                    07:33:17:32:0a:3d:37:96:d9:96:c6:ea:1d:0e:57:
                    94:34:6e:c2:fa:0f:62:80:10:01:4c:ad:b3:af:f8:
                    82:56:39:13:5b:a4:46:5e:9f:6c:d6:71:89:21:e2:
                    e4:4d:1a:17:57:fe:6f:4e:82:63:47:a7:cc:84:f7:
                    42:c3:05:e5:79:8f:ec:da:ba:43:f3:5e:72:4a:9d:
                    15:6e:3d:47:2f:54:9c:11:8b:e5:82:a1:12:97:5c:
                    37:93:34:e7:fc:09:16:a3:5e:dc:77:5f:aa:34:f1:
                    c0:a5:0d:93:c8:43:04:5b:34:c6:10:3a:e7:cf:5f:
                    b2:1e:b6:e8:16:c8:47:bc:39:34:8e:b3:eb:cf:88:
                    68:0e:16:96:4a:8f:4b:f2:ed:1e:b1:03:45:3a:1d:
                    a9:b2:33:1d:67:49:2d:40:7c:f6:f3:e6:df:e0:3e:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2A:7E:38:02:E2:09:72:8E:03:07:BC:3C:5C:56:EA:01:84:D9:C5
            X509v3 Authority Key Identifier:
                keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a3:a5:e8:a6:61:a3:f8:02:29:81:72:04:db:1a:14:93:9c:
         af:3b:4a:84:41:5f:82:39:fc:0f:7c:49:ea:30:bc:ee:8a:00:
         47:08:87:17:71:1a:d5:a7:19:72:b9:ab:be:70:68:13:6a:1f:
         b9:30:6d:98:0a:81:27:62:5f:7a:c6:11:ce:97:10:d0:55:1e:
         8a:af:d6:9e:35:55:6b:06:09:1e:bb:0d:85:23:df:f3:38:96:
         e9:e9:c5:ab:e0:df:9d:eb:9c:8c:55:3b:96:be:7f:40:52:7d:
         59:80:bd:54:29:33:c9:3e:29:6f:88:74:75:fc:52:13:58:34:
         3a:a5:50:3c:ce:78:8a:ab:ce:88:a6:7c:ee:f5:39:cc:77:00:
         66:47:50:0f:cc:1d:a2:62:4c:2c:ad:b1:98:e3:27:74:f5:c2:
         a4:60:11:5f:02:9b:10:11:63:fd:40:31:8f:e5:01:82:57:5b:
         0d:3f:e5:2e:94:28:9e:da:40:d2:28:85:04:64:16:e2:38:7f:
         2d:5c:ff:51:17:86:28:8e:ff:2e:5a:12:e1:2f:29:60:1f:55:
         73:79:cd:bf:ce:6a:8a:73:ec:74:33:77:ee:c6:23:fd:09:a0:
         10:15:3c:4b:85:b1:f6:26:27:e1:81:67:6c:0b:a0:c5:25:84:
         d6:ce:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:32 2025 by rpki-client