Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
File:                     fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json)
Hash identifier:          F0G0sNS6x5kBAW1bdg8DCYFZDmWSrZUnHkZr2HFwhWc=
Subject key identifier:   F3:C4:02:4E:80:92:FC:31:08:09:AA:08:36:56:50:A8:01:6D:91:C1
Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F
Certificate issuer:       /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
Certificate serial:       0199FBEAF9B30B756BC28C847773836C5B13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
Manifest number:          0BEF
Signing time:             Sun 19 Oct 2025 10:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:44 +0000
Files and hashes:         1: RdszoR0XDemrxWZ7ZuzRpfNYzZk.roa (hash: YWnaBwFSvymmXHCPjERkvxYdDqJ7Cm5zkK0Huya48uA=)
                          2: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: uSeUbmGTjlohvtTzg81iUNqT1hzW3/wlE2G3E9avPMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f9:b3:0b:75:6b:c2:8c:84:77:73:83:6c:5b:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f
        Validity
            Not Before: Oct 19 10:01:44 2025 GMT
            Not After : Oct 20 10:01:44 2025 GMT
        Subject: CN=f3c4024e8092fc310809aa08365650a8016d91c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:71:48:be:dd:4e:90:ca:fa:5a:4b:87:5d:
                    ac:11:95:2e:82:16:47:27:36:0f:70:01:c8:0f:73:
                    86:d3:8f:fe:0d:6d:3b:83:d2:f8:c2:8b:7b:55:5e:
                    a9:aa:44:fc:1e:25:f9:eb:e6:cb:3f:4a:d9:a2:39:
                    4f:6b:ca:ae:10:e4:8c:10:91:fe:a2:9d:bf:81:92:
                    74:0b:72:a1:66:31:80:c2:b4:1b:6e:44:25:00:79:
                    24:c0:35:2b:66:7d:11:12:ad:c8:94:9f:9c:c4:b6:
                    9d:3d:35:b4:0a:1f:ee:3d:7f:c7:48:13:77:19:53:
                    bc:af:67:1f:f5:b7:66:38:e9:b6:26:94:9b:f9:3a:
                    16:ec:53:04:94:f7:a6:e3:9b:bc:01:00:a6:e4:70:
                    bb:ad:2b:4d:9f:c5:ef:d9:ff:0a:12:81:5d:93:2f:
                    9f:ea:2d:dd:57:00:33:4b:06:7e:7f:bb:3b:e2:93:
                    3b:c8:02:c6:42:10:5f:f7:8d:4e:e8:3f:b3:9c:70:
                    f9:92:dd:05:52:c3:46:f2:b3:b6:65:f5:fc:83:8b:
                    e8:fd:4e:34:d5:63:09:d8:03:b4:fd:ac:b1:ad:3c:
                    bc:e5:a4:c4:51:a8:95:84:e4:4f:fc:18:c9:4d:10:
                    1f:63:72:ae:4a:81:e6:99:ae:29:8b:f1:c3:28:80:
                    7b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C4:02:4E:80:92:FC:31:08:09:AA:08:36:56:50:A8:01:6D:91:C1
            X509v3 Authority Key Identifier:
                keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:70:8f:76:25:5a:ed:30:dd:a3:b5:13:4e:e5:5a:31:49:
         9c:55:54:90:9d:4c:da:00:25:4b:2e:9f:25:72:c9:34:1f:07:
         f3:67:22:e0:bb:a3:b8:ce:07:e4:e2:79:ec:c1:10:ad:cf:02:
         d3:74:d4:b3:db:80:e3:d1:cc:60:46:93:be:f7:89:32:c8:0f:
         6f:0d:0c:3d:12:fc:9e:67:be:7f:78:58:4c:1c:92:c5:51:ea:
         6b:9f:43:f9:1a:96:38:ee:00:72:4d:75:c3:3d:21:08:05:38:
         7e:6d:ed:fd:c9:14:b2:c8:af:6b:a6:f0:74:57:8b:ac:e5:5d:
         e7:a9:cd:53:5b:8e:18:e9:28:3b:b3:25:05:25:7d:a2:c0:69:
         bd:d7:4b:1c:a8:17:d2:ed:ec:f3:1f:15:2e:58:1f:f0:17:d9:
         ec:5c:77:e7:14:fe:99:c8:e6:0b:ad:fc:08:74:26:d0:8b:61:
         bb:19:5b:00:ab:46:8f:8b:bb:24:d9:59:42:35:5b:c1:7f:74:
         f5:46:b3:e7:58:84:0f:90:c4:f7:92:55:eb:d3:d9:c7:af:ee:
         0f:01:d0:ad:8d:59:88:32:6c:59:7d:63:61:ef:16:48:42:d8:
         17:07:0e:5a:b7:28:ee:bc:d2:25:88:0c:db:ae:da:62:bd:03:
         cf:92:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:22 2025 by rpki-client