Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File:                     FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier:          spENJOCsV55AhZ2IlcapMyRSEE3qAd2unYBGArqw9ew=
Subject key identifier:   5C:7E:A9:97:74:09:80:99:00:A9:12:83:53:F7:51:A4:F5:51:D5:A5
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer:       /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial:       0199FEB4B93474D86939FB3EBC9E42942D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number:          15DA
Signing time:             Sun 19 Oct 2025 23:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:20 +0000
Files and hashes:         1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: j1/0Qi599NsX7Sbh+eXJMzpABvB3VO3hF4Sj4kB/FWs=)
                          2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:b9:34:74:d8:69:39:fb:3e:bc:9e:42:94:2d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
        Validity
            Not Before: Oct 19 23:01:20 2025 GMT
            Not After : Oct 20 23:01:20 2025 GMT
        Subject: CN=5c7ea9977409809900a9128353f751a4f551d5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8d:e2:5e:9d:0d:ae:d0:eb:63:06:eb:c6:d9:
                    53:ad:2c:0c:23:35:5f:29:e2:d0:a1:0d:f9:87:7f:
                    5e:85:7d:8e:e6:64:8e:64:94:bc:50:07:0b:8f:09:
                    c6:13:01:0c:ae:6b:17:5c:df:9b:85:a3:de:5d:55:
                    67:85:a0:0f:c1:80:fa:e3:0b:55:6e:ac:54:f3:36:
                    cd:cf:27:68:1d:ca:97:7e:45:5d:11:85:28:52:ae:
                    63:2a:83:32:ce:23:12:b6:f0:76:08:24:3a:0d:43:
                    ed:e9:da:69:ae:a2:6a:d2:cd:2c:d2:e7:fb:5b:46:
                    83:ab:99:91:8f:55:09:37:62:86:45:83:76:3e:e4:
                    0f:82:77:d5:15:5b:9d:ae:4c:70:33:66:53:4c:0c:
                    e9:44:da:bf:83:87:fc:1d:f6:08:28:dd:a1:db:f5:
                    1d:72:fc:ff:07:dd:09:29:0a:f8:c2:5f:db:43:9e:
                    5a:c8:6f:8f:99:20:d7:81:42:54:39:89:fb:bc:04:
                    b8:ec:1a:42:bb:27:fc:57:69:e5:9a:67:12:85:37:
                    6e:c4:d2:97:85:51:7b:ac:3c:84:5b:70:ea:af:80:
                    df:ba:cc:3e:ed:53:25:47:6a:41:17:3c:23:6a:6a:
                    3b:06:d0:33:51:06:3c:1f:99:d0:1d:94:93:7d:38:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7E:A9:97:74:09:80:99:00:A9:12:83:53:F7:51:A4:F5:51:D5:A5
            X509v3 Authority Key Identifier:
                keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:54:ef:8c:2c:70:d1:d7:6f:43:25:9f:82:ab:f9:18:b3:fc:
         5e:a2:63:05:81:25:22:d3:99:22:46:0d:a3:0f:6d:9b:08:cf:
         e1:ff:5e:a2:58:44:67:d0:92:7d:67:3e:da:20:3d:83:9c:fd:
         a2:99:98:af:6f:c3:b7:ec:52:83:2b:7f:2e:08:17:38:02:fb:
         dd:39:74:f7:00:f3:7f:87:80:7d:67:29:37:47:4e:c1:f4:12:
         51:18:14:9e:ba:08:27:1f:85:de:8a:65:72:7b:71:23:ab:34:
         f3:94:f4:a0:6d:f0:08:9a:b7:13:41:30:83:e5:bb:27:85:1d:
         24:65:8e:76:03:e7:92:ae:a5:3e:a6:ae:76:0d:cb:9d:b2:96:
         90:4c:d6:43:50:f2:0e:07:6b:45:5a:24:6c:1a:90:62:58:54:
         c4:86:4c:0b:f5:c4:2f:b5:c4:79:0c:6f:f0:08:6f:16:70:26:
         ea:26:4a:95:f5:76:40:da:07:62:93:9d:b6:e9:60:c1:4e:54:
         07:48:2b:e1:b6:27:36:98:41:13:4d:ae:6b:8b:10:cc:b6:52:
         c1:e3:a3:ab:07:bb:7c:85:23:85:41:f6:1c:77:8e:25:1d:bf:
         29:3b:5f:57:61:90:48:57:04:75:f3:b6:ff:8b:3a:ec:d3:3d:
         59:8c:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:55 2025 by rpki-client