Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
File:                     FgnCTa4-7_y--jemiGZKyTMA71g.mft (raw, json)
Hash identifier:          b+Wq33D3IV3GdIW53JnUZ1qjPofETLZD52OL+S4x+eg=
Subject key identifier:   2F:0C:0A:C4:BB:A3:AA:71:AA:AE:AE:3D:77:16:38:49:31:CA:A0:68
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Certificate issuer:       /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial:       0199FAD85145CB12C2A77DA241E214CD30A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
Manifest number:          15B8
Signing time:             Sun 19 Oct 2025 05:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:44 +0000
Files and hashes:         1: 7b72R8YLb2SHH9MjZo55yK3DpuU.roa (hash: EOM+9zK0YudveaEnl18alhJ+F+Rk/QyUoYSZ9iQgFf4=)
                          2: FgnCTa4-7_y--jemiGZKyTMA71g.crl (hash: sdTiw9zw803xll6YEN25tHhyB+Ghawko3DypbQvnL3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:51:45:cb:12:c2:a7:7d:a2:41:e2:14:cd:30:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
        Validity
            Not Before: Oct 19 05:01:44 2025 GMT
            Not After : Oct 20 05:01:44 2025 GMT
        Subject: CN=2f0c0ac4bba3aa71aaaeae3d7716384931caa068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3a:48:a8:9a:d6:08:1f:7d:e9:0c:f9:21:fb:
                    8b:42:6d:70:c4:19:50:a9:4d:08:5b:8e:4e:c2:80:
                    e3:20:14:6f:1a:e1:88:6a:e3:ba:1c:1f:eb:92:d3:
                    b2:96:9d:a0:64:30:c0:f6:04:c6:03:2b:84:55:12:
                    18:86:67:d7:2e:9a:4b:b4:ab:81:32:e5:22:05:d2:
                    71:37:1c:58:60:98:a7:3c:9c:34:91:ce:a1:0c:ee:
                    ff:7b:31:5f:a1:a0:14:a7:9d:c9:49:24:23:7b:de:
                    82:90:6a:62:ba:ec:8e:4f:d4:16:f8:5d:c1:01:aa:
                    61:9f:10:55:f2:c0:cd:4a:d7:81:b3:f9:ad:5e:56:
                    b2:9b:ac:3d:48:0e:b1:be:2b:c8:ee:a5:ab:2e:a8:
                    0a:21:0d:32:84:d9:d4:a9:00:42:1d:ae:78:f4:a3:
                    fe:18:9e:dc:a4:21:63:7c:d4:fc:9f:58:45:45:36:
                    0f:97:01:f6:e7:19:3c:ed:c9:67:f7:03:77:64:84:
                    c5:a0:2a:98:d7:73:cc:58:64:55:36:1e:97:61:dd:
                    a1:d6:8e:23:91:71:3d:af:c3:69:0d:d0:a5:c6:33:
                    10:92:ca:1b:2b:90:fb:58:55:f8:67:87:42:b7:2f:
                    7b:11:65:65:52:30:17:b6:f9:f6:bb:1e:9a:26:29:
                    eb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:0C:0A:C4:BB:A3:AA:71:AA:AE:AE:3D:77:16:38:49:31:CA:A0:68
            X509v3 Authority Key Identifier:
                keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:be:c5:d5:94:3d:e9:ff:e5:5a:77:0e:41:61:46:e7:cb:
         41:82:86:b0:78:63:65:ac:fe:a9:a2:b4:cc:e7:71:24:d7:dd:
         c9:bf:5c:f2:4e:ea:0a:d8:e0:58:21:82:a6:f7:02:87:02:8f:
         dc:38:d6:e2:0d:3a:e1:a0:4d:1f:ef:dd:ce:87:dc:d8:c2:a6:
         4d:c1:ea:0a:40:eb:b3:c7:d5:09:70:1f:c3:f6:4c:ed:8e:aa:
         28:a1:a5:5a:67:50:d6:51:b7:d0:23:02:bf:c4:a1:01:a9:c5:
         77:35:40:6d:10:5c:69:21:8a:1a:f2:6d:33:e7:32:43:79:97:
         e7:be:bc:fa:70:ce:ec:62:f9:b2:31:b1:4c:d5:d4:6b:ba:f8:
         28:fa:59:20:53:1f:cd:fd:33:16:3a:cd:2b:5f:d9:e1:9c:86:
         a7:41:0b:7d:0c:f2:5f:08:07:fe:dd:ba:80:91:89:0f:fd:d5:
         58:22:24:9c:66:26:24:27:cc:1a:6c:ca:ed:58:00:92:47:22:
         eb:ac:84:01:6e:52:67:3f:06:a3:e7:98:df:c3:99:2b:8b:69:
         2e:c8:f9:8e:12:91:e1:41:05:c8:4a:e6:02:98:ed:17:52:97:
         42:d1:09:5e:71:93:67:c1:cb:da:7f:0e:03:b3:cb:ca:ae:5d:
         46:ba:9c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:56 2025 by rpki-client