Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File:                     _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier:          cX6lWK+tNn4yObcKu/z8ylAdTChOY49Kqc2aUgDq/n4=
Subject key identifier:   C6:C3:ED:52:80:5A:F2:AC:4B:F4:50:B2:FF:6B:58:BB:4D:7B:13:C3
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer:       /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial:       0199FC8FA0B2D34CC00ACF038DAA2C90F78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number:          0608
Signing time:             Sun 19 Oct 2025 13:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:35 +0000
Files and hashes:         1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: sP65LSmlmLYdFRP/xJjpQW10Ws1xYSPPIqI74Fry1t8=)
                          2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:a0:b2:d3:4c:c0:0a:cf:03:8d:aa:2c:90:f7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
        Validity
            Not Before: Oct 19 13:01:35 2025 GMT
            Not After : Oct 20 13:01:35 2025 GMT
        Subject: CN=c6c3ed52805af2ac4bf450b2ff6b58bb4d7b13c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:fe:e5:d8:de:0d:b0:d0:14:99:bf:6d:a7:
                    fc:f1:5f:81:eb:fb:f0:ff:08:aa:ce:cf:7b:4b:22:
                    5a:3f:58:23:8c:3d:b8:4c:4a:f8:1b:7a:39:aa:7c:
                    1a:b4:51:d9:dc:0e:99:d1:84:50:32:fb:a0:13:5a:
                    4c:a0:3e:43:30:11:2c:d5:b0:91:8f:ee:d7:a9:0e:
                    a5:24:07:f6:4f:38:f0:92:f2:25:b5:c2:8f:6e:d8:
                    eb:4f:f3:34:13:97:08:f4:69:50:61:ba:d8:bf:f3:
                    83:70:e3:3f:38:c7:cd:60:2b:4c:79:e6:f1:39:06:
                    78:c0:8f:fc:ee:4f:ef:95:23:72:d6:be:ff:1e:78:
                    1f:e3:b4:e3:87:d4:7d:77:96:57:c9:84:48:79:37:
                    68:f1:a5:73:55:c6:a8:07:a2:92:bb:43:24:a1:98:
                    70:57:94:c2:b5:d8:93:29:b7:38:0e:71:c5:85:2f:
                    d8:74:cc:4a:ef:4f:92:dc:ab:61:30:8a:f4:da:73:
                    2f:4b:fc:36:f3:87:b7:b9:32:4b:b7:a4:82:32:a0:
                    11:a2:b6:e6:67:a6:56:b7:b2:9e:59:d6:13:71:cb:
                    e6:fb:8e:c2:53:8c:a4:03:7b:25:04:f0:42:e1:e6:
                    d6:8c:71:62:4c:a7:b1:30:5d:18:e6:4d:81:7a:8e:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C3:ED:52:80:5A:F2:AC:4B:F4:50:B2:FF:6B:58:BB:4D:7B:13:C3
            X509v3 Authority Key Identifier:
                keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:5e:e9:41:75:08:a6:dd:ae:98:f7:32:4e:7d:34:4f:18:
         45:58:92:72:b7:e3:12:cd:11:0f:3b:6c:7d:11:a2:f9:3e:08:
         9a:b1:a4:a4:d3:b4:4d:d4:bf:2d:7a:72:1d:ad:e7:1b:38:76:
         da:ff:2d:dc:6a:2b:da:2f:b1:75:ad:8c:38:6d:93:d9:0b:22:
         c7:a1:f3:59:f0:36:65:01:52:1c:e8:df:de:ef:82:84:7d:31:
         43:ba:ef:bb:0b:64:f0:ab:df:bb:04:26:5a:f4:53:d9:af:7b:
         11:41:74:c7:c9:50:60:b3:76:a7:9c:ed:bc:43:1e:5e:85:49:
         7f:69:80:ef:6f:34:91:12:2f:5b:7f:bd:d6:a3:d1:67:d9:78:
         3f:ba:7f:af:13:c3:9a:80:c7:0c:08:ca:78:e8:7c:10:30:28:
         8a:fa:df:65:76:bc:5d:40:cd:a0:dc:52:00:88:8d:df:5a:64:
         20:b6:a8:8d:13:be:70:fa:dc:1e:a6:2b:83:ec:04:2d:a5:dd:
         11:f4:50:13:dc:d9:92:b4:ad:11:53:c4:be:e0:8a:83:c5:d4:
         5b:02:a6:97:43:b3:88:8e:e2:f8:7a:b7:36:ed:df:5f:b9:40:
         5b:58:97:a1:bd:d4:03:ab:03:6d:e1:72:11:4e:05:90:f0:ec:
         65:dd:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:18 2025 by rpki-client