Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File:                     FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier:          Gvz9AcUEXdmLqlK8XWyqkdzTOlNXFZ7Q6z8bDHTdRyo=
Subject key identifier:   75:93:73:6C:0C:B0:0F:20:6F:72:00:B7:D3:30:3A:A8:7A:4F:E1:0E
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer:       /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial:       0199FDD92DC0D7FB658FCEADF3D985EE74B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number:          0198
Signing time:             Sun 19 Oct 2025 19:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:32 +0000
Files and hashes:         1: 2KNjtYfkkvpIBPVL-Dk7JZfM4jU.roa (hash: YZgrPPEN8zGqhO8cwF6VGe00Dd89Opm5ALHWcKmIHgM=)
                          2: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: JfO7yGrElnJ2wfet4y4Q2K36E6w0fwH/t8RFaki2yMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:2d:c0:d7:fb:65:8f:ce:ad:f3:d9:85:ee:74:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
        Validity
            Not Before: Oct 19 19:01:32 2025 GMT
            Not After : Oct 20 19:01:32 2025 GMT
        Subject: CN=7593736c0cb00f206f7200b7d3303aa87a4fe10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:87:a5:c4:a1:a2:20:dd:f6:05:89:53:2f:53:
                    3b:6b:72:9e:e2:48:cc:78:f6:37:36:d0:7a:79:05:
                    66:44:4c:83:90:94:ee:ac:5d:7f:60:7e:64:df:17:
                    8e:79:cf:52:33:0d:c7:7d:45:44:b2:37:5c:4e:c7:
                    2a:d3:62:b5:ad:30:6a:a4:b0:10:83:bc:0a:e8:a0:
                    d0:26:b5:33:4e:4f:7e:87:1e:a4:a0:d4:cc:38:c6:
                    b4:e6:64:0e:76:8c:2d:a0:d0:18:90:20:da:c4:de:
                    69:17:40:09:6b:8b:c3:0d:0e:3d:ec:12:22:ee:17:
                    0a:c5:40:26:6d:72:87:75:60:6e:6c:91:29:13:9c:
                    fa:d9:9a:35:f6:bc:ea:1f:ed:02:6a:8d:ee:75:41:
                    20:33:a9:85:af:f8:21:16:d1:24:1b:c7:0c:0f:63:
                    13:3b:14:cd:8d:0f:53:cf:85:f9:95:84:a7:52:ea:
                    a5:61:1e:b0:f6:96:0b:e2:a3:4d:1f:05:dd:a3:4d:
                    18:4a:f8:0c:69:1e:d4:96:4e:d9:26:73:92:a4:96:
                    30:e2:7e:b7:8b:a0:c8:31:39:75:70:15:c3:84:4f:
                    57:d6:60:96:5b:9c:f9:ba:5b:c5:e8:4c:2f:08:3c:
                    af:8f:74:4f:85:55:1b:51:26:02:55:5e:f4:80:ba:
                    58:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:93:73:6C:0C:B0:0F:20:6F:72:00:B7:D3:30:3A:A8:7A:4F:E1:0E
            X509v3 Authority Key Identifier:
                keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e1:a8:89:fe:e5:eb:a9:0a:40:82:38:67:b1:5a:4a:9a:9e:
         95:bb:1b:6d:b8:bc:39:f9:26:16:96:51:9f:6c:c2:fc:4c:76:
         47:66:0e:6c:9b:5e:e6:91:8e:1f:2d:c9:48:97:11:f8:74:59:
         61:5e:42:34:f3:de:b9:8e:7c:2c:48:6e:8c:91:96:12:a0:63:
         5e:3a:8e:59:56:a9:00:d7:dc:da:6d:4b:a3:e1:10:5c:e9:83:
         fa:67:67:dc:38:2d:e0:7f:3e:de:a3:62:96:3b:ed:1e:4c:5f:
         fa:cc:6b:0d:8d:75:5b:6e:0f:1a:d2:95:dd:ed:b2:47:25:bc:
         57:d3:a1:a3:6d:80:b2:a2:c5:02:42:e0:2f:19:9d:3c:ca:55:
         a4:d0:67:36:f6:db:ea:99:67:7b:24:33:fc:5f:93:3b:4b:53:
         f7:4a:e4:dc:58:25:a2:aa:2b:d6:24:70:bf:d7:f7:99:e5:51:
         b4:c7:aa:ff:eb:db:8e:c5:2f:8f:7a:c1:a1:22:e6:e3:f8:d3:
         8f:04:38:dd:d1:31:96:a8:83:6a:dc:06:b3:94:d8:21:be:00:
         a9:a9:18:6e:7c:94:e8:c0:32:47:99:63:c0:01:81:c0:d4:d3:
         87:31:56:4c:ec:a5:73:9e:c7:28:27:16:08:4b:1f:36:7e:db:
         21:80:d1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:29 2025 by rpki-client