Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
File:                     fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json)
Hash identifier:          lIoHoyy8RNlazFCDg0EPl+yl5jvvuH38/jqAGGr2a1c=
Subject key identifier:   2E:BB:EC:80:23:4B:46:36:4C:8D:2F:C4:38:D7:6A:71:C5:A8:DB:DD
Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA
Certificate issuer:       /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
Certificate serial:       0199FB7CEB27D4026ACED3FAAD4C81D11705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
Manifest number:          0697
Signing time:             Sun 19 Oct 2025 08:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:31 +0000
Files and hashes:         1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: qEwhCSJkcSZjOiokYBBj7YC0f1Z+FtuMASg7liaTfj0=)
                          2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:eb:27:d4:02:6a:ce:d3:fa:ad:4c:81:d1:17:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da
        Validity
            Not Before: Oct 19 08:01:31 2025 GMT
            Not After : Oct 20 08:01:31 2025 GMT
        Subject: CN=2ebbec80234b46364c8d2fc438d76a71c5a8dbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:a8:d3:98:7e:3e:db:c2:15:1f:97:07:62:
                    20:37:92:35:24:6a:a3:4b:26:3c:16:5e:72:ff:e1:
                    84:9b:12:9a:a0:93:48:1b:f2:9a:c0:db:10:4a:4c:
                    38:08:73:55:42:02:1f:9e:a3:28:9f:25:70:c1:57:
                    f2:cd:2b:de:e6:74:c4:34:13:c4:b9:6a:68:2b:d0:
                    6a:44:99:5c:f0:01:bd:71:71:b7:bb:ab:c3:c0:94:
                    fc:68:1d:cc:14:9d:da:0b:0d:5b:8c:30:83:7c:e1:
                    ea:95:3c:69:ff:30:f1:af:d8:83:d4:21:38:14:84:
                    11:1a:dc:99:e6:60:e6:8b:b5:32:d2:8c:68:9f:d7:
                    28:08:18:8e:5d:d0:88:d4:e6:50:ea:8b:4f:00:b4:
                    87:20:a7:9b:e3:b4:ce:e5:1a:44:e6:95:d2:4c:4f:
                    f6:3e:fc:55:d0:33:47:40:4c:7c:2c:7f:ee:07:6b:
                    86:a7:27:18:12:4b:19:0c:23:0b:5a:f1:5f:7a:28:
                    d7:7d:32:ae:90:47:95:6d:90:06:05:9b:7f:80:d1:
                    fd:ff:23:0c:40:bf:a8:7c:22:e1:a7:df:77:32:21:
                    af:e4:72:18:18:ab:95:0b:9c:4c:cd:9e:b0:fa:ea:
                    bf:dc:ba:6d:5d:61:6e:37:a7:01:1b:28:2e:4a:62:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:BB:EC:80:23:4B:46:36:4C:8D:2F:C4:38:D7:6A:71:C5:A8:DB:DD
            X509v3 Authority Key Identifier:
                keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:0c:d4:8d:bf:df:ee:c1:b8:8f:ee:90:3d:30:42:c2:af:
         53:d8:a3:49:c9:21:9d:b9:1a:31:87:5c:f5:21:52:73:93:fb:
         b5:e9:0f:cf:73:bc:cb:44:49:de:ec:3d:fb:41:a8:f7:35:9d:
         6d:82:bb:0f:ef:b2:37:0a:60:3c:49:ae:93:fb:1f:9f:bc:b1:
         f3:59:17:5e:9a:42:ee:ca:8c:da:fd:cb:43:9e:3e:de:34:fd:
         a0:44:ad:9c:62:2a:0e:fc:fb:bf:31:41:b5:68:81:45:59:73:
         2a:43:9a:10:11:be:29:21:d0:89:8e:ca:28:97:df:a2:bb:cd:
         dc:9d:f1:70:2b:56:4d:b0:87:90:78:08:a9:08:26:e7:f7:5f:
         9b:27:b8:b2:6f:71:cd:02:af:0f:3d:8d:d9:2b:5c:37:a6:89:
         ff:1d:e1:84:a2:6e:54:9d:f5:7a:e6:57:0f:b7:f3:79:d6:ce:
         1f:8b:2b:fe:99:ff:bb:55:30:55:7a:d4:24:ad:f8:b0:36:b4:
         76:1e:8b:53:1e:00:03:72:38:2c:0e:7b:da:2d:f2:f6:cc:83:
         50:10:d6:1b:1f:14:e9:d6:cf:5f:26:09:08:47:d0:2e:f3:77:
         8d:b5:38:ee:9b:5f:3e:b8:71:d8:a3:10:9c:23:23:76:82:04:
         ea:72:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:18 2025 by rpki-client