Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
File:                     92O3x0pHzua9mbvGKu-DalYCtTE.mft (raw, json)
Hash identifier:          T+aJybhTFnj4htdutFpTTz+IruqbfrbqjJvHAdplE0s=
Subject key identifier:   FC:B7:BC:61:59:92:FA:3C:75:C6:DC:1A:49:83:62:5E:8D:13:B1:AD
Authority key identifier: F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31
Certificate issuer:       /CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
Certificate serial:       0199FC8FBD72258E67CA1E3CE145B5B617B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
Manifest number:          0665
Signing time:             Sun 19 Oct 2025 13:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:42 +0000
Files and hashes:         1: 92O3x0pHzua9mbvGKu-DalYCtTE.crl (hash: 9NVjv+G67ShcPq8a+gG6xnvpWNzhkTbhSjkuA25Uy+4=)
                          2: wN1wFK2nod8Oc7XWg-Kjf2cevZI.roa (hash: S+MrRK13xZ8FD9NbutVvWutfcwGFlY+gNxR94qjOH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:bd:72:25:8e:67:ca:1e:3c:e1:45:b5:b6:17:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f763b7c74a47cee6bd99bbc62aef836a5602b531
        Validity
            Not Before: Oct 19 13:01:42 2025 GMT
            Not After : Oct 20 13:01:42 2025 GMT
        Subject: CN=fcb7bc615992fa3c75c6dc1a4983625e8d13b1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:95:98:9c:7c:15:e6:1e:23:28:9d:05:e5:
                    6d:d7:1d:c8:22:37:48:bd:cf:67:65:d1:c4:ac:21:
                    5d:c4:69:bf:42:82:bb:82:f1:3c:4a:06:d4:8d:9a:
                    98:60:6c:8b:b6:3e:2f:c2:6d:d7:49:77:e2:8e:a8:
                    52:c2:96:e5:66:e0:28:f9:15:6c:79:1e:ed:b7:4c:
                    c4:6b:8b:54:cc:3e:b4:1b:37:07:58:29:6b:8e:9a:
                    9d:8c:0e:04:5b:e3:65:32:d5:3b:a7:3f:c7:8f:c1:
                    f9:42:a0:da:bf:75:0b:fd:a2:e1:58:f6:bc:4e:ef:
                    02:b3:f7:d4:78:87:8f:a1:87:f9:ce:c2:0b:8c:50:
                    d1:e5:93:db:fd:d1:b0:ff:c5:59:70:69:15:8f:ce:
                    5c:d5:b4:21:51:5a:80:5e:3c:fe:59:29:db:5a:8b:
                    a2:7b:b2:9c:4a:85:5e:a3:9c:2a:7a:56:f9:10:22:
                    69:45:bf:ff:79:5d:a5:34:79:36:72:f1:f1:51:ac:
                    ba:01:b6:00:3b:33:c9:ba:6c:5e:be:51:26:62:4e:
                    32:ee:ca:aa:5f:27:d5:8a:15:d4:9a:9f:28:ad:3f:
                    05:34:c1:56:5c:a2:1b:0c:d6:e0:77:f1:35:a1:91:
                    ba:c5:99:b7:53:1a:24:0e:e7:4f:40:37:37:a4:ad:
                    49:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:BC:61:59:92:FA:3C:75:C6:DC:1A:49:83:62:5E:8D:13:B1:AD
            X509v3 Authority Key Identifier:
                keyid:F7:63:B7:C7:4A:47:CE:E6:BD:99:BB:C6:2A:EF:83:6A:56:02:B5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92O3x0pHzua9mbvGKu-DalYCtTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2c3eee-2189-4469-816b-99b873e5e74a/1/92O3x0pHzua9mbvGKu-DalYCtTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c6:f9:ac:1b:80:76:39:6a:0e:e6:51:61:33:fa:24:8d:27:
         3e:24:65:19:42:ed:03:ed:dc:a0:27:ba:f6:f7:fd:58:97:11:
         d3:54:cc:00:3a:36:c8:a3:6e:28:85:62:3c:0e:0a:a2:cc:26:
         da:29:95:9e:9d:b6:b0:64:a5:8f:0f:98:85:00:2c:e2:f9:16:
         1e:31:be:91:df:cb:77:07:2e:58:9f:04:2d:83:9f:b4:c5:fa:
         5f:a1:54:86:86:26:fa:44:c6:9a:fc:29:c9:50:03:14:eb:20:
         62:55:d1:f5:4a:2d:1f:f9:55:33:7a:9d:25:c8:c9:d7:eb:1a:
         b0:74:e7:d3:5f:4b:ef:c5:e8:a9:64:16:c2:31:15:67:04:ed:
         f8:bc:99:92:4f:e8:48:1b:bb:38:db:da:7f:d3:ed:c5:15:59:
         7e:15:40:12:d3:b3:76:1d:03:d1:20:f9:b9:90:a7:1e:df:32:
         0b:98:08:cc:79:ed:4a:f1:04:aa:e3:ac:95:f8:44:02:51:b4:
         04:c8:b8:d7:6c:8a:61:4e:9e:cf:cf:d5:31:b5:b3:59:48:dd:
         e0:f2:8b:5d:37:c0:9d:27:85:e2:91:85:e9:85:31:56:85:80:
         01:fe:14:d0:86:5a:04:d5:72:a9:3e:e0:38:06:24:50:d7:76:
         56:7e:ef:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:24 2025 by rpki-client