Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File:                     FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier:          fOgXp5BctqCbOpbwybfSLj5la7QJs3rImayuyoNaL1g=
Subject key identifier:   A2:4C:B6:25:36:B6:D1:09:7F:16:EF:66:6D:D3:17:7A:F9:85:A4:5D
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer:       /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial:       0199FAD827C4B3BE2F99C84919A404BF8F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 05:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:33 +0000
Files and hashes:         1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=)
                          2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: /2jCxPSEP3sdJ/60LEhjbboXql807ZhON8ltb5WKjdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:27:c4:b3:be:2f:99:c8:49:19:a4:04:bf:8f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
        Validity
            Not Before: Oct 19 05:01:33 2025 GMT
            Not After : Oct 20 05:01:33 2025 GMT
        Subject: CN=a24cb62536b6d1097f16ef666dd3177af985a45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:ad:b2:06:a7:3c:91:04:92:a9:ce:1c:5b:
                    91:be:85:8a:c9:9c:5e:a3:5f:ec:5e:f6:3c:91:20:
                    41:99:19:b7:75:f3:a3:a7:08:e4:07:f8:e5:7c:bb:
                    27:31:33:29:82:9e:8e:96:3e:9e:e4:db:f7:07:5b:
                    90:41:8a:7f:96:b6:63:b4:47:77:6f:4f:d9:31:cb:
                    2b:0a:86:04:d7:98:72:ce:ca:a9:1a:96:eb:6b:6d:
                    39:06:d3:1b:df:4f:10:48:27:d4:2d:b2:20:41:92:
                    2a:01:af:8e:55:59:00:85:1b:35:8e:3f:83:19:c2:
                    ab:48:1b:94:52:4e:00:11:8d:66:06:41:ca:23:0f:
                    8a:07:cd:4f:f2:64:f3:84:0a:0c:50:51:c2:a3:bb:
                    14:c5:45:4f:03:f6:f3:86:53:c5:e8:a8:f2:35:05:
                    14:2c:11:59:db:f7:21:69:89:22:0d:06:24:13:23:
                    c4:0c:99:63:d6:54:a6:fc:26:5d:c4:65:5d:30:77:
                    e8:45:2e:46:17:c9:93:ba:a3:5f:6c:05:2c:bc:04:
                    69:0d:d8:be:4a:04:ed:04:78:35:09:64:63:6e:d1:
                    43:8c:16:d1:1b:70:3a:a6:d3:c0:7a:48:00:1c:41:
                    2e:d4:ba:94:a0:00:c2:43:76:ac:f0:5e:e9:af:2d:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4C:B6:25:36:B6:D1:09:7F:16:EF:66:6D:D3:17:7A:F9:85:A4:5D
            X509v3 Authority Key Identifier:
                keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:26:f5:ae:aa:57:14:f9:6f:33:57:00:fe:88:f3:47:72:b4:
         c9:a0:46:6c:7b:b7:5e:6b:08:4a:f5:8f:45:a1:2c:03:07:30:
         5b:f5:68:79:e8:7b:8e:81:ff:65:9b:b9:f2:f0:ed:c0:d7:fd:
         aa:c4:85:14:1e:4c:31:89:c0:a0:8c:f8:73:6c:e6:36:ff:01:
         11:d0:3c:62:96:51:fb:fc:89:93:91:f1:35:30:f1:b5:7c:7a:
         36:ed:ae:c9:aa:ff:e4:d5:c8:73:22:95:26:3c:f6:b9:26:27:
         03:bc:7b:3f:f8:10:87:30:d6:ec:eb:c2:7f:38:c2:80:d6:a7:
         c2:a3:63:cb:d6:d1:e4:93:c8:58:65:c5:a7:ce:b3:a4:d2:a2:
         fa:29:a9:94:36:e7:01:e9:3a:a2:a9:c6:54:25:01:29:59:9b:
         f7:bc:ab:5e:a1:c1:a5:07:20:f6:2b:98:f7:9a:1f:b1:0d:3f:
         21:5b:b5:27:81:51:f4:54:d2:51:ec:0b:97:55:cc:04:2a:5c:
         5d:30:45:77:3e:a5:ba:f9:da:de:61:d3:92:ef:5e:c0:8c:1d:
         52:fd:36:d1:73:05:75:62:29:89:a4:a4:46:1d:d3:5a:bf:17:
         7b:da:f9:7b:e9:48:bf:91:fb:01:21:97:aa:c6:09:6a:06:3b:
         ec:02:bb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:09:51 2025 by rpki-client