Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
File:                     RMO0TLvE89paS0KFyW6jy1DU0HM.mft (raw, json)
Hash identifier:          sTU03b0VTnByBmFBipB9a/puEkfB3RV7hsIXp+z+/vw=
Subject key identifier:   FB:A6:DF:DC:8B:A8:EF:B3:78:C8:BE:1D:6A:8D:B1:7D:FD:F1:95:DB
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Certificate issuer:       /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial:       0199FFFE288C9D3A32BB00E3A3EBE546C04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
Manifest number:          0D62
Signing time:             Mon 20 Oct 2025 05:01:10 +0000
Manifest this update:     Mon 20 Oct 2025 05:01:10 +0000
Manifest next update:     Tue 21 Oct 2025 05:01:10 +0000
Files and hashes:         1: Bfc7EUchdTgGElUv3uM8P6L_JN4.roa (hash: zmd7LnQJEMvAXNDrVc3GmLiOfsPuEL2IoD+oEByUhjA=)
                          2: RMO0TLvE89paS0KFyW6jy1DU0HM.crl (hash: QhSnk07oFC4MXcArV/JO35cSZgCO+of0ez0RLWgzfgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:fe:28:8c:9d:3a:32:bb:00:e3:a3:eb:e5:46:c0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
        Validity
            Not Before: Oct 20 05:01:10 2025 GMT
            Not After : Oct 21 05:01:10 2025 GMT
        Subject: CN=fba6dfdc8ba8efb378c8be1d6a8db17dfdf195db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:3f:24:b0:04:c9:7c:0a:fc:52:05:a1:e1:
                    e5:42:33:b6:b3:ab:cd:92:09:b2:31:11:7d:72:b1:
                    ad:ae:33:b4:8a:d4:00:4a:97:1e:15:52:9d:91:54:
                    c1:bf:69:86:f9:a0:4a:79:81:f0:be:4f:f6:5f:39:
                    40:a5:5b:b0:03:3b:4a:80:aa:ae:53:b5:4a:f4:86:
                    2a:f7:ef:ae:85:22:9e:36:f4:b8:cb:62:ff:14:c5:
                    fc:d3:e4:4f:6e:b6:f7:2d:fe:b9:ac:e8:ae:32:8d:
                    bb:39:e7:5b:d9:c7:c1:49:ea:c3:44:be:53:5a:c5:
                    b0:03:9e:07:f3:5f:20:ab:86:a7:65:2d:a0:97:a0:
                    40:97:b9:50:14:e3:dd:b3:18:7f:f6:4a:e2:a3:50:
                    c5:6e:a0:27:59:2d:d1:89:01:66:a0:dc:ba:e2:41:
                    94:db:c0:2f:60:8e:47:5f:ba:e4:0b:a6:1e:00:1a:
                    11:1d:d0:fe:94:0f:0d:c1:eb:a0:84:ec:59:c0:1c:
                    f3:30:a9:8b:29:f6:64:1b:a9:95:bc:2d:cb:91:dc:
                    ec:c6:9c:e6:ed:c5:c6:76:7e:81:a4:7c:0a:fe:70:
                    f5:b3:42:30:df:ee:4d:ca:c2:13:11:07:0e:9b:17:
                    98:dc:50:d9:4f:30:94:85:b0:68:6d:7e:c7:3c:59:
                    57:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:DF:DC:8B:A8:EF:B3:78:C8:BE:1D:6A:8D:B1:7D:FD:F1:95:DB
            X509v3 Authority Key Identifier:
                keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d4:b1:b2:69:74:38:19:0d:ca:84:6e:05:12:03:65:0a:cf:
         97:ae:60:9f:b2:c0:b0:48:2d:dc:66:10:3d:0c:77:fc:ee:3a:
         09:00:f0:87:49:7b:a5:b7:a1:f4:ac:1e:5a:92:da:41:8b:6f:
         85:3b:43:dc:eb:1b:d8:f7:bf:e4:a0:79:f8:14:b0:04:9d:ca:
         31:0e:bb:97:6e:8a:0a:07:61:b8:35:a6:42:0c:7e:b7:b7:33:
         38:06:03:c0:4e:c7:56:53:9d:bd:c2:bb:ee:ee:2a:57:13:87:
         c4:dd:14:f2:31:08:7c:fa:ce:a5:9a:d0:53:67:9c:36:4b:d3:
         cc:9d:b6:41:f7:8b:d7:c6:b3:16:74:b9:b9:e3:b5:9d:65:cc:
         1b:19:f4:7b:7b:93:3e:2a:ee:68:bb:20:69:ad:fe:c3:f7:79:
         8f:14:59:0a:64:01:30:39:41:1b:f2:a5:7f:ce:57:d4:db:06:
         e3:d6:48:89:f0:4e:2d:f1:a5:e6:d6:c8:13:e0:dd:a9:d0:17:
         6c:4d:b7:c6:35:18:12:4d:c4:1e:2b:de:fc:28:33:b2:29:1c:
         85:ab:15:93:04:1c:b4:f5:e4:65:1f:11:3e:ec:e2:01:3b:23:
         df:44:f1:17:87:d4:9b:6b:f8:9e:8a:ce:df:be:9c:76:3e:18:
         e8:79:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:12 2025 by rpki-client