Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File:                     fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier:          Grs9pSx7L/s00aHnUpAUT8h8FAeV14bkZNUGIo8NW14=
Subject key identifier:   3D:12:F7:67:10:58:4A:F0:7E:33:79:AF:42:56:1E:27:B9:D9:3F:FE
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer:       /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial:       0199FEB467FA9FC1301C51D67FFB8C5BE3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number:          03C1
Signing time:             Sun 19 Oct 2025 23:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 23:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 23:00:59 +0000
Files and hashes:         1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=)
                          2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: bJUkv0d+3XgpYUtkejPhjTiGAUCzcm7KRCczJh7toFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:67:fa:9f:c1:30:1c:51:d6:7f:fb:8c:5b:e3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
        Validity
            Not Before: Oct 19 23:00:59 2025 GMT
            Not After : Oct 20 23:00:59 2025 GMT
        Subject: CN=3d12f76710584af07e3379af42561e27b9d93ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:d6:64:6f:98:85:ff:f8:12:83:91:4a:c3:
                    41:ce:c2:d8:4f:2f:ef:46:0b:a6:a6:4b:75:b4:5b:
                    29:12:cb:e8:22:ec:01:f5:db:76:14:1c:0d:18:ef:
                    2e:4b:e6:95:bf:34:8d:fa:12:4a:eb:0a:f9:b9:06:
                    92:80:59:01:44:16:8d:39:de:26:0d:52:df:39:b7:
                    70:16:d2:93:e5:13:ee:17:9f:8d:a7:ab:71:d7:50:
                    69:8d:02:6a:c1:62:ff:b4:1f:4d:09:e2:e9:f5:79:
                    7c:ce:30:d7:06:58:98:35:bf:75:cb:84:85:61:c6:
                    17:8e:93:19:67:a7:b7:6b:60:96:d6:c8:2a:69:76:
                    56:fd:86:58:62:df:ff:80:c6:2b:4e:90:06:e5:1f:
                    9d:52:73:88:c4:56:88:34:89:c3:28:35:30:2e:77:
                    e5:d6:c0:cb:55:3f:39:25:90:8b:4d:57:73:6f:a0:
                    fc:3a:8f:26:b5:6a:1f:c1:9d:de:8f:d9:e9:e3:15:
                    ad:f1:ca:df:0a:c7:30:24:46:a2:82:8d:58:90:0a:
                    0b:4f:95:9b:7d:84:f5:05:20:1d:40:f4:ba:5e:68:
                    19:44:a8:33:8b:8b:09:ac:d4:bb:63:84:29:60:e7:
                    a4:c7:f2:9c:24:84:d1:23:58:2a:06:a0:e4:9b:15:
                    2d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:F7:67:10:58:4A:F0:7E:33:79:AF:42:56:1E:27:B9:D9:3F:FE
            X509v3 Authority Key Identifier:
                keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:81:eb:57:39:47:15:bb:26:83:86:b4:11:75:7b:dc:64:94:
         3f:81:2d:6c:a5:37:20:b0:79:86:45:58:77:98:9f:a3:49:20:
         7f:eb:be:cc:7f:6a:27:7e:4e:8f:c0:d2:9a:e0:6e:e4:32:b0:
         0c:52:c6:1f:f6:27:fa:b5:26:ce:c5:60:8d:66:0d:53:ce:81:
         87:e2:ca:76:11:42:ce:5f:fe:04:91:e7:45:ae:f2:a4:64:dc:
         23:59:39:1e:53:d3:a3:fc:1b:93:6f:e6:6d:bf:34:cc:58:d0:
         b2:3e:e5:b1:27:24:b2:44:3c:32:6c:40:9a:d6:0d:6d:67:b1:
         dc:0e:7d:9e:cc:aa:32:9c:04:3e:4e:91:61:31:b7:1b:84:a0:
         8b:c8:8c:aa:67:1c:6e:4c:70:fe:b3:8b:a1:c8:9a:54:65:3a:
         0e:ac:b1:2b:34:d2:9f:87:85:33:41:25:f2:7b:7c:db:20:4e:
         71:a4:e0:35:52:14:da:8a:0a:b2:5d:98:3e:d1:8d:b6:a2:7d:
         b4:eb:24:be:c6:2d:7f:0a:9e:5b:0d:d1:9d:3d:8e:48:7e:e6:
         a2:48:ac:f2:d8:a5:89:f6:73:19:3a:34:51:36:6f:18:94:55:
         3c:40:56:95:e7:04:9d:ff:9c:fc:99:5b:a5:87:f3:00:7e:4b:
         6c:4c:27:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:47 2025 by rpki-client