Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File:                     FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier:          f+GOS/SVgHs8uW9X7ckZZs0clJvIcsaJRzWMQ6EHBX4=
Subject key identifier:   A2:B8:32:8D:9E:DE:10:19:69:31:1E:73:46:37:20:B1:06:C6:58:DD
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer:       /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial:       0199FBEB75BEC991817F707CCEE8D94B73C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:02:16 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:16 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:16 +0000
Files and hashes:         1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: UjGGKMGBjEFHBXhQXGcYM3VhGsN6yP9Ly4C00e8iu04=)
                          2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:75:be:c9:91:81:7f:70:7c:ce:e8:d9:4b:73:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
        Validity
            Not Before: Oct 19 10:02:16 2025 GMT
            Not After : Oct 20 10:02:16 2025 GMT
        Subject: CN=a2b8328d9ede101969311e73463720b106c658dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:57:41:45:a8:e8:f2:e9:67:4a:25:a3:d4:5a:
                    db:32:ee:14:0b:9c:aa:f7:43:42:d4:d3:0f:1f:49:
                    01:5b:b8:9d:15:fa:d2:0e:cc:84:47:a8:0f:e7:33:
                    df:7e:4e:89:2f:ff:0e:fc:5e:e3:43:f2:2a:b3:9a:
                    2b:6f:87:d3:43:c7:5b:55:79:76:89:47:92:ee:a4:
                    88:39:ad:eb:9e:25:d4:9f:85:4c:3f:b8:09:71:79:
                    8f:99:6a:06:fc:a9:5d:b8:e9:8b:65:86:3b:ff:47:
                    95:69:7f:ae:75:51:bf:08:28:f7:05:97:2a:d6:6a:
                    f2:22:ec:32:47:dd:c4:c0:9c:04:7e:e8:68:53:dd:
                    8d:58:a2:7f:e8:2a:e0:ab:d8:07:e8:88:cc:3e:c8:
                    96:49:84:2e:03:a3:a6:e3:b1:69:64:48:52:bf:46:
                    01:b7:00:60:70:b2:f5:5c:f9:ee:92:84:96:d8:7b:
                    34:67:71:86:a2:a3:40:4d:18:25:51:76:d7:78:be:
                    e8:8b:63:af:63:98:6d:35:cf:5b:8e:99:2c:21:48:
                    3d:c5:9d:52:84:7a:33:09:93:4c:a7:e5:fd:a3:0c:
                    92:2d:48:a4:46:42:b5:7c:24:6e:28:cc:c1:d8:30:
                    1b:96:00:d2:51:dc:83:fd:a8:64:8b:f5:54:85:fb:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B8:32:8D:9E:DE:10:19:69:31:1E:73:46:37:20:B1:06:C6:58:DD
            X509v3 Authority Key Identifier:
                keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0b:51:58:f7:14:7f:c9:17:0a:1b:f6:da:54:04:7c:08:1f:
         5e:9d:84:eb:8c:07:a0:eb:9d:96:ed:a7:8d:6a:95:ce:51:a7:
         7b:be:8d:e9:f8:e9:f5:91:f0:a2:3f:9d:e8:68:4f:7a:c2:70:
         e9:9a:11:e6:32:2a:b0:37:b0:20:73:09:3a:66:6e:f7:8b:b1:
         6e:a0:f2:8c:47:30:ae:35:bd:78:aa:48:08:23:72:2b:16:b8:
         b5:b9:fe:29:4b:0c:63:43:30:87:46:12:ad:89:49:4a:26:da:
         97:df:a9:6d:1d:a6:ed:cf:b8:6d:bf:66:96:98:2b:41:89:f5:
         1e:af:ce:5a:cc:1e:6d:5f:a1:7e:0f:b4:a3:11:53:b0:1e:d0:
         5f:7d:f8:f7:f9:19:c7:bd:16:ee:01:60:d4:b7:07:a2:9c:eb:
         4f:6d:5c:2f:27:4f:a2:77:e3:ef:f2:d8:44:7d:8e:de:15:42:
         6c:a6:5b:30:fa:43:76:32:ed:34:fe:c6:1f:0a:69:da:f1:bc:
         dd:75:b0:ee:54:dc:20:58:3c:07:93:98:ec:da:1a:50:31:3d:
         06:ed:ee:4f:13:c2:4d:93:72:dc:3f:41:1c:36:f6:64:8d:5a:
         30:40:eb:b3:c1:a8:49:a0:63:18:37:2f:23:f0:2c:57:d4:39:
         18:62:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:09 2025 by rpki-client