Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          HyT8zXUWWhEizSGHpQeSJwjrtm4AmujNk6PhnxWJ20M=
Subject key identifier:   F7:6E:44:AE:AD:FD:B2:3A:78:BF:1A:78:3D:EA:AE:2E:C8:CE:9E:69
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       0198D404F79EB865173BFD4DACD88073CFCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          06A5
Signing time:             Fri 22 Aug 2025 23:02:31 +0000
Manifest this update:     Fri 22 Aug 2025 23:02:31 +0000
Manifest next update:     Sat 23 Aug 2025 23:02:31 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: yxeSWPWV87VuE+6sENWZmt7XwneiM5HZYDdwXK5/89M=)
                          2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=)
                          3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=)
                          4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=)
                          5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=)
                          6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=)
                          7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 23:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:04:f7:9e:b8:65:17:3b:fd:4d:ac:d8:80:73:cf:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Aug 22 23:02:31 2025 GMT
            Not After : Aug 23 23:02:31 2025 GMT
        Subject: CN=f76e44aeadfdb23a78bf1a783deaae2ec8ce9e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:46:4f:8f:b9:79:a5:87:d2:65:83:ec:27:3a:
                    64:b6:a6:6a:6b:cb:7b:ab:7a:86:1d:c9:fc:c6:37:
                    a0:8a:47:1f:da:29:58:8e:64:4a:e0:b6:0e:a8:24:
                    43:24:70:3b:c5:4d:83:03:88:06:7e:38:82:8a:e1:
                    14:a3:c9:12:49:be:49:8a:ea:66:fb:ba:39:2a:67:
                    43:1a:85:96:bd:9b:78:a7:06:9a:a5:a2:84:68:9b:
                    72:42:45:6d:3b:ad:01:4d:db:b3:49:0d:f0:d1:bc:
                    d7:dd:be:5b:ee:2a:99:89:d1:6f:f8:75:43:8a:1c:
                    15:31:73:83:22:1e:17:de:39:ff:8d:fb:14:39:c5:
                    e0:ef:3c:16:15:1c:70:51:eb:bd:ae:65:ca:66:c7:
                    a2:40:bf:da:82:73:22:20:c8:bd:67:21:34:e5:c7:
                    f9:87:1b:7f:7e:89:c9:bf:bb:27:71:e4:96:61:42:
                    7a:c7:a0:4e:27:64:8d:40:77:ea:d3:fa:24:d6:cb:
                    9e:bc:99:e7:a9:ce:10:cd:ac:a0:a9:66:66:40:84:
                    4f:0a:6f:cc:ac:e6:64:c5:56:b7:5b:63:5e:91:cc:
                    c2:53:7f:17:a8:36:63:d4:0b:e7:24:40:ce:d3:39:
                    bb:2b:da:35:3a:60:ff:89:7b:2f:77:9a:d3:21:65:
                    57:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6E:44:AE:AD:FD:B2:3A:78:BF:1A:78:3D:EA:AE:2E:C8:CE:9E:69
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:36:fc:e3:1e:a4:6e:a9:ab:7a:a6:96:82:4f:70:09:27:00:
         8b:44:fa:4e:e0:90:70:7e:cb:3f:6f:a8:a8:03:60:d7:5f:0e:
         18:16:56:44:de:3b:a8:40:bd:77:e6:d9:4e:4a:ea:c9:0f:9a:
         43:a6:58:99:a7:49:46:d2:49:97:38:95:80:09:4a:99:96:34:
         f3:ca:01:eb:6d:dd:38:d6:3a:ee:1e:ec:ec:c2:16:2c:2c:6b:
         72:e9:7a:7c:0c:f8:f3:02:14:95:bf:83:50:33:e4:5b:d9:a7:
         bb:98:72:f0:f8:33:46:0f:7d:38:f5:52:47:fe:61:7a:d3:b9:
         50:7f:ff:56:8c:b2:ef:01:39:02:c9:5d:07:b0:2d:fb:3a:be:
         ab:13:b2:7c:e3:ac:7f:89:cd:97:d4:66:cb:82:60:a2:61:00:
         be:c4:14:1c:a2:f2:38:f5:97:3a:61:27:a7:f2:fd:16:64:a3:
         a3:bd:b5:eb:5b:0f:4f:1e:28:23:4e:22:7a:e4:1d:fd:ad:84:
         2d:23:58:c2:ae:a7:fc:bc:fc:00:a2:01:5e:70:8f:45:2b:fc:
         21:5b:80:5f:23:26:6a:b2:74:f3:55:93:f5:33:19:95:f1:66:
         31:5a:43:bf:37:39:98:d3:ed:87:e8:82:4e:73:ce:2f:a6:94:
         c5:61:6f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:51 2025 by rpki-client