Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
File:                     FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json)
Hash identifier:          58jb2Go8o3hwGhiUD+Tu9URkdQ0zBkH11zXAzwrEa/Y=
Subject key identifier:   79:62:00:50:DD:7E:47:67:C4:34:85:F2:4A:79:75:44:84:E5:31:86
Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72
Certificate issuer:       /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
Certificate serial:       0199FC588B62798D9E2E7285C5436A07135F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
Manifest number:          0517
Signing time:             Sun 19 Oct 2025 12:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:25 +0000
Files and hashes:         1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=)
                          2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: y8Q3n2/cjTozdAZkHFNUDLHEIbm1aOR4yXrxstw4lyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:8b:62:79:8d:9e:2e:72:85:c5:43:6a:07:13:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972
        Validity
            Not Before: Oct 19 12:01:25 2025 GMT
            Not After : Oct 20 12:01:25 2025 GMT
        Subject: CN=79620050dd7e4767c43485f24a79754484e53186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:4d:3b:c8:57:ff:d7:84:db:91:cb:4c:46:
                    aa:02:5d:2c:66:94:81:23:64:48:57:b8:b9:8f:1a:
                    a6:53:3c:03:ea:c4:82:a6:40:bb:0f:b8:4a:2a:95:
                    ce:1a:85:82:7b:84:2f:96:1c:a5:25:a4:dd:12:1d:
                    a5:95:fa:82:49:45:89:8a:07:2b:4f:b7:f2:a4:15:
                    7f:ce:59:fe:7f:b2:7f:7d:5c:42:c3:38:57:d2:c5:
                    2b:b9:b4:69:58:a7:12:2b:c1:67:b5:7e:81:34:aa:
                    b5:33:20:7f:18:23:e8:05:27:77:6e:39:9a:20:96:
                    57:e4:8a:2f:a7:2a:62:cc:fb:c0:e6:71:36:22:3c:
                    f9:a3:3a:b4:66:d5:99:35:ac:02:77:66:39:7f:88:
                    83:ae:aa:fc:64:45:74:e1:f0:67:d4:81:ef:4b:52:
                    b8:86:83:28:8a:b6:47:f8:3a:a7:77:b9:aa:f0:e4:
                    2f:05:b7:8f:8d:32:ba:cb:b6:3e:f8:7a:11:75:2d:
                    ef:44:7b:c2:8b:41:22:45:b2:ab:88:d2:10:1e:af:
                    b4:62:be:b6:c0:ae:e3:0e:c5:91:5d:b2:f3:1e:e1:
                    87:5a:8c:45:a6:58:44:e6:e0:a6:6e:a0:0e:b4:31:
                    48:42:2f:41:c2:14:bf:b2:3d:c3:62:01:74:d0:d6:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:62:00:50:DD:7E:47:67:C4:34:85:F2:4A:79:75:44:84:E5:31:86
            X509v3 Authority Key Identifier:
                keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3a:56:99:be:5b:c8:53:22:0b:7c:4e:78:e5:f2:bb:44:24:
         a9:86:2a:fa:b0:62:00:96:03:a9:af:4b:e5:da:61:1c:f8:3a:
         57:bf:18:f6:fe:6b:23:7f:ef:3d:d6:79:b8:90:3a:ec:2b:f1:
         02:38:df:20:3e:d8:c0:02:d7:14:d3:5c:c7:a4:1f:d1:91:5e:
         2c:59:e1:b8:00:0e:2f:60:9c:24:f6:f8:8a:4a:ea:6c:30:ac:
         0c:70:80:3f:99:13:bb:12:19:b1:58:b6:9a:1b:e6:55:65:df:
         f6:ab:21:92:57:e2:fa:fe:fc:49:3c:ef:8f:ad:51:72:41:a9:
         fa:4c:ac:19:04:bb:ff:53:06:3f:47:9e:c4:61:79:f0:12:7d:
         b8:a0:b2:92:c2:ba:76:9e:75:57:6e:06:2c:1d:15:1f:b5:8d:
         22:24:2d:4e:59:e7:44:4b:bd:13:90:5d:a4:2b:59:c8:db:7e:
         d0:47:a1:c7:b3:65:96:a2:0e:15:32:1b:67:45:4d:29:48:54:
         fe:e8:53:7a:da:35:6b:95:50:9f:81:4e:ff:8e:46:97:c0:58:
         87:35:3e:e4:57:a8:b4:76:9d:3e:6a:a4:92:5c:ab:d9:74:32:
         63:52:38:34:6b:1f:72:16:49:ef:33:11:31:ae:aa:68:3a:39:
         22:e2:7d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:23 2025 by rpki-client