Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
File:                     DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json)
Hash identifier:          ffcMDVELUcBaEwOBQSTemXzQYjYM5MktQd925TH7OxQ=
Subject key identifier:   FC:7F:BA:F5:D1:CF:B8:C2:48:9B:1F:3B:4A:E8:B8:10:AF:0C:FC:D6
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Certificate issuer:       /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial:       0199FE47838F085D83AC1455F55314134F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
Manifest number:          1703
Signing time:             Sun 19 Oct 2025 21:02:03 +0000
Manifest this update:     Sun 19 Oct 2025 21:02:03 +0000
Manifest next update:     Mon 20 Oct 2025 21:02:03 +0000
Files and hashes:         1: 6EqmJwY45la03_mL9DqzIU_pULc.roa (hash: bAAWeDZY2eZUPUFFXbJVDE3ll20OGhbDr+oRfmrEiVM=)
                          2: 7Pzqe98aO4BoBrbjEM8VyT6sS1M.roa (hash: njNZ21C9pluyh9z/aL31IWofBM1v+N+fPmyvHPndCq0=)
                          3: 90MmzVO4MvLdyb-AJQYr53vSOsE.roa (hash: 5J/pNqbP4sJI9fRD38vzW+V+FYiLCJKVNSYkNzbkDm4=)
                          4: 9GHN6GSMWh16APWbnq7wDsfKnn8.roa (hash: JH6A2KPyYk6kU9S+YXzBoAozjZCx1I1/FQIb22szn8c=)
                          5: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: CUjrXA/zKxj/HAZgTJX2SusNXthnbz3xxwv6um8dmrA=)
                          6: QQRJC_YG8r-4Cm4-FiDTcyGseMs.roa (hash: v9L1LzSv9+QS9AJyAVCgrR0utN6Qk2ha4KHx/OIWRBY=)
                          7: WkrrwVxryAtLhNFR70baemEuAlg.roa (hash: K4NmeKi3Gvie8qG+bJIFQiovPgNvmgaWKizo+ZLILv8=)
                          8: _eU7wK7pdUxRG2CXsHdjbv2SOXc.roa (hash: ZAIXppKunQur0KGtFLAbnwIeXUabVYHwA+qIIq12IRo=)
                          9: aTMRrwo9_4SayQ9D7LTyaVFK_Xc.roa (hash: +IcvkZ/Lt7dooQvX8ekK5PfLV+YRr5hiDK4PBIh/lAA=)
                          10: bMezNCNwdlOYbtIsPbacYgXs4mE.roa (hash: fCSTVZLdEaGUz9Qyuwvw4wOBBUSjrK0cS/P0VURH6XA=)
                          11: f4tVuHbbEEExw1FgkYA_xiEVeZI.roa (hash: Ra6FxwbKM9pTj1QpToOpemmcz8OHYU34i9ladkCeWIs=)
                          12: fYrpElZs1NsSNrkwEfo6WNxBdRU.roa (hash: w1Z5VCOxpqbNZVNnJiTQLVLUsMOtA4kiHusU/VADD9E=)
                          13: rytOjYktSxYttWQbNzKnWNHr8kE.roa (hash: yLxz3XA2NehPKva17aTVpf9d8xx7CPICWNJXYP6IG3U=)
                          14: wz4Rxi2T5RISNbtekZKZj5gg7co.roa (hash: ZkBZlEwEIE4xANMo9oJsaqTSQA+2tjjnLN93XVxIic4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:83:8f:08:5d:83:ac:14:55:f5:53:14:13:4f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
        Validity
            Not Before: Oct 19 21:02:03 2025 GMT
            Not After : Oct 20 21:02:03 2025 GMT
        Subject: CN=fc7fbaf5d1cfb8c2489b1f3b4ae8b810af0cfcd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:b7:99:d3:d3:4f:dc:74:80:e1:70:4c:58:
                    37:b1:b8:93:a7:d0:3a:55:dc:28:d3:85:79:59:a7:
                    bf:6d:14:d2:f5:fd:17:63:17:21:d1:89:6a:52:f4:
                    ed:71:f0:95:93:81:6d:b3:21:d5:ac:4b:c7:5d:b4:
                    60:99:59:a0:eb:14:0d:63:b0:42:a2:92:6f:b3:f7:
                    dc:77:a4:08:67:40:e5:a0:1e:eb:71:56:9f:c2:45:
                    e0:49:7b:5d:38:ba:2a:b9:f5:d5:12:d2:40:fc:d5:
                    cb:d9:3c:af:53:60:28:f6:8d:f0:a1:f1:ca:2f:b0:
                    2a:30:98:37:67:cf:2c:d7:5f:af:18:c1:58:56:6f:
                    70:11:44:62:34:5e:72:5e:44:88:e2:e7:5c:32:89:
                    b7:de:1e:34:09:4a:66:99:92:35:a0:e0:b7:7c:23:
                    7f:4b:97:f0:fd:d0:3b:be:9a:e2:88:ff:07:72:ac:
                    98:7f:83:48:82:38:aa:31:ba:29:62:15:d6:0d:53:
                    26:69:26:20:e0:2a:8d:02:f0:93:b3:72:c3:88:32:
                    dd:9c:32:8c:b8:d6:eb:5c:1e:93:10:4f:32:10:88:
                    a2:5a:37:11:f5:57:cb:c3:e5:17:70:bc:12:2b:ab:
                    0d:26:e1:2d:24:94:0e:d3:99:66:56:72:78:85:87:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7F:BA:F5:D1:CF:B8:C2:48:9B:1F:3B:4A:E8:B8:10:AF:0C:FC:D6
            X509v3 Authority Key Identifier:
                keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:b4:42:26:07:08:47:57:4d:bb:55:1b:45:84:62:b1:01:
         9e:d9:73:b2:9d:3b:a5:26:8a:4a:22:b0:99:ba:1f:28:10:f8:
         fc:07:56:b4:dd:28:3b:82:57:d4:fd:e1:c1:90:5c:10:63:e0:
         a9:d4:00:fa:79:1f:92:5b:f6:e9:45:5c:35:8b:2a:2f:44:f7:
         ce:62:60:ec:3e:2d:a6:f2:3f:e1:6a:23:b1:9b:df:6b:08:e6:
         f7:b2:d3:b5:c7:f5:d7:19:d9:13:d6:31:5d:e2:db:fb:de:24:
         67:ac:78:ee:4f:f7:66:1a:9b:92:dc:bd:01:f5:72:d0:f0:ce:
         0e:82:4c:5c:bb:af:7a:38:2a:a5:b6:c9:a2:74:18:38:5c:9f:
         b6:52:8d:85:30:19:39:9a:7d:69:25:db:32:5b:f1:68:d2:0d:
         19:a9:5f:71:e1:43:6b:97:44:76:c1:b1:23:8c:41:1d:19:c6:
         00:4a:85:35:25:09:9a:58:f3:d5:57:e8:26:8f:c2:ec:8c:42:
         83:34:e9:cb:db:0e:cb:75:72:64:50:fc:5e:59:e7:e9:d0:f8:
         a4:3a:b6:b5:a6:5c:1c:25:c3:7f:cb:af:6c:1e:e4:b2:b6:29:
         0e:23:ec:7d:6b:3e:46:15:d1:13:83:66:d9:19:f7:c8:a2:ae:
         c1:83:11:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:57 2025 by rpki-client