Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File:                     fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier:          3g00kkGVksZ9701dB6rYMSsq+ObKi51xaCjEblsM1b0=
Subject key identifier:   52:E7:1F:78:88:ED:D2:95:63:22:22:8C:98:9B:36:16:C5:B1:81:AA
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer:       /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial:       0199FC58EABEFF157E5A9B96140D0E6788A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number:          0CD5
Signing time:             Sun 19 Oct 2025 12:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:49 +0000
Files and hashes:         1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=)
                          2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: 6mTwuZENPsegI+dJGS9OOlpde3DXAHcOs+kDE8+Ho4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:ea:be:ff:15:7e:5a:9b:96:14:0d:0e:67:88:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
        Validity
            Not Before: Oct 19 12:01:49 2025 GMT
            Not After : Oct 20 12:01:49 2025 GMT
        Subject: CN=52e71f7888edd2956322228c989b3616c5b181aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:e2:15:a4:c7:84:db:93:e7:73:d3:f5:a5:
                    67:5c:ff:f4:c2:b3:f1:6f:35:83:41:62:e0:34:9e:
                    a7:49:4a:81:58:7b:47:01:36:a6:c4:21:08:70:08:
                    72:1c:f4:cc:9c:7a:dd:75:2e:d1:09:7a:75:ba:11:
                    60:e1:ce:7e:c3:34:ce:f7:85:d9:c1:a9:1d:e6:40:
                    61:cc:d7:9b:84:3e:b9:a7:9a:9b:3e:70:2d:68:df:
                    aa:60:fb:ea:cb:a7:68:9a:12:b9:48:ec:88:92:c3:
                    7d:9b:df:16:24:8b:da:29:ef:c9:b9:62:6f:32:4f:
                    16:53:00:89:50:45:bf:28:08:27:46:03:cc:83:20:
                    eb:9f:2d:91:13:0b:31:7c:31:f1:96:53:d8:74:81:
                    33:0d:71:2e:ff:8d:db:45:25:5f:d2:90:0c:80:bb:
                    2b:85:8b:45:8b:90:b7:4d:35:fb:9c:e1:3e:67:49:
                    53:52:d5:10:50:02:63:a0:e4:b2:7a:c2:01:6b:ce:
                    67:6e:39:94:ca:cb:4c:53:de:c4:2b:b9:54:20:57:
                    a4:58:71:bd:7a:7c:7a:63:74:63:be:e0:ca:b3:be:
                    f5:48:61:70:31:21:08:a2:7b:a1:d3:8b:89:6c:73:
                    57:d9:5e:bb:e1:1e:63:7d:60:9c:eb:1d:c2:cb:d8:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:1F:78:88:ED:D2:95:63:22:22:8C:98:9B:36:16:C5:B1:81:AA
            X509v3 Authority Key Identifier:
                keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:21:36:97:e4:60:a2:bf:5c:f9:a7:5e:d6:4d:34:d7:20:
         9e:80:40:a8:dc:38:05:62:41:24:db:63:9c:ca:b9:7e:a5:76:
         ff:bd:96:ea:5e:00:88:55:86:6e:4d:35:42:57:1b:97:ed:4b:
         ae:10:1c:82:a4:03:fc:7c:64:76:d6:e3:9a:64:c5:5e:ff:0f:
         71:fb:c7:9a:28:63:27:e4:a8:e3:91:3e:6f:92:4d:7e:7b:ab:
         e1:04:7a:dd:5f:61:96:d9:38:b0:18:65:f6:24:75:e8:8f:92:
         72:8a:4a:06:5a:38:d2:47:f3:36:6d:0b:62:8c:3a:f2:4c:f6:
         61:51:a4:bf:32:64:0a:1f:5a:9d:83:79:ae:34:c2:e7:bb:c6:
         5d:63:16:05:17:7b:a3:64:30:50:3a:06:20:c7:56:ed:3c:28:
         7e:59:3a:00:0f:9b:b4:ae:4f:7e:5f:2d:d3:f6:5d:40:15:fc:
         88:91:15:97:ae:0a:83:78:46:66:b0:63:33:7a:2a:5e:15:bc:
         9f:5e:61:5d:6e:00:5a:b6:4e:bb:8d:dc:13:bc:12:be:94:d2:
         f3:e0:a4:ca:4b:6a:78:6a:6e:90:b4:36:11:ff:b9:ee:e4:ed:
         07:23:66:ff:e1:31:65:5b:14:32:a8:a2:0d:94:48:17:44:dc:
         59:1d:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:09 2025 by rpki-client