Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
File:                     FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json)
Hash identifier:          EKXBDrpni+Z03UMbjTJg/t3urNv8oW3Fx4gbw2/q1wg=
Subject key identifier:   47:23:D9:8A:C9:27:D0:2F:37:5A:B5:C9:29:A7:0F:E8:B5:4F:29:63
Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
Certificate issuer:       /CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Certificate serial:       0199FDD8F2ACA27E161C355F49F40F4FBAE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
Manifest number:          0781
Signing time:             Sun 19 Oct 2025 19:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:17 +0000
Files and hashes:         1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: a6KNCEtumAxg6jonx6nSl3yryoj6sLu2KHtg60+fnAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:f2:ac:a2:7e:16:1c:35:5f:49:f4:0f:4f:ba:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e
        Validity
            Not Before: Oct 19 19:01:17 2025 GMT
            Not After : Oct 20 19:01:17 2025 GMT
        Subject: CN=4723d98ac927d02f375ab5c929a70fe8b54f2963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:ca:ec:d9:53:55:28:71:e5:c9:2d:65:25:
                    ea:98:89:5e:bb:b2:1b:32:a3:de:dd:95:8f:a1:c4:
                    3b:69:02:3c:5e:13:85:b8:9a:10:30:45:02:80:d9:
                    4b:60:20:70:25:53:b0:a7:ca:ad:8b:5b:37:5b:09:
                    97:61:d5:c3:70:16:d6:93:6b:8e:fd:47:76:de:ee:
                    52:3a:f5:bf:f7:09:30:17:16:47:6d:9f:b1:98:5b:
                    44:f4:58:6a:3a:91:b5:54:dc:62:65:33:c5:bd:6f:
                    ef:b8:76:0e:91:78:c1:55:01:59:13:7b:ef:57:fa:
                    b3:a3:58:28:47:d4:9c:67:c8:af:6d:14:e1:1e:17:
                    02:7a:3a:83:56:a9:a0:41:19:53:ca:f6:50:f0:06:
                    47:c2:5a:36:56:22:48:f8:6d:ed:3e:7a:88:6a:a0:
                    b4:66:11:ae:0d:79:8e:96:59:f4:db:7a:a4:30:f7:
                    c3:6f:a6:09:06:d4:d8:68:68:d9:03:e0:6e:e3:97:
                    c5:a2:d4:ba:64:2d:76:32:f2:21:f0:54:23:82:36:
                    74:0b:9b:2d:e2:b7:cc:25:c7:c7:ce:57:89:31:69:
                    77:74:11:21:6a:da:c9:54:de:1d:d1:07:2c:17:30:
                    76:53:bb:6a:41:7f:29:08:4c:5b:0d:e0:99:68:c9:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:23:D9:8A:C9:27:D0:2F:37:5A:B5:C9:29:A7:0F:E8:B5:4F:29:63
            X509v3 Authority Key Identifier:
                keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a2:2e:39:ef:93:a5:44:92:17:61:cb:33:6a:8e:50:1c:51:
         42:35:0e:f5:6a:7d:a6:fc:4c:69:b2:4d:f1:2d:00:af:7d:9c:
         9a:c5:eb:eb:06:a1:a4:14:71:df:60:ca:a9:99:7a:fc:9c:bc:
         bf:0c:b0:01:eb:85:df:12:0b:17:94:86:63:9f:51:a2:a2:de:
         fd:5e:e0:ef:0f:58:c6:87:5f:8e:63:bd:b7:86:9c:fc:93:60:
         11:93:d9:a1:35:50:82:b8:04:dc:2f:e0:59:db:b7:4b:68:a6:
         74:fe:2a:2c:f4:8f:62:c3:a6:96:bf:02:f3:f3:7e:dc:36:ef:
         a7:b4:33:33:98:9e:d3:03:93:03:b7:52:f9:16:2b:ca:c8:1e:
         4a:e2:22:9d:20:6a:f0:a7:77:98:fa:fa:8a:53:33:41:1d:5d:
         52:d2:ec:5f:7b:f1:3d:bf:71:84:1f:08:a6:8a:d7:59:62:55:
         e9:f1:46:7c:57:b1:b5:64:3b:1d:2f:71:22:18:5c:ce:f3:60:
         64:2a:2d:45:96:85:34:f4:79:c3:cf:47:1f:2c:28:6b:19:a8:
         e1:1d:fa:53:8b:af:00:f2:04:92:ce:7b:bb:de:8b:c8:7a:76:
         e2:90:23:79:3a:39:0e:6c:73:b4:9d:70:39:e1:e7:b4:61:13:
         8a:a0:e3:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92PKson4WHDVfSfQPT7roMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTE4MDcxY2MxZmFkOWMyZjkyYTEyMjkyMWFkNDc4YjEz
NDdiMGUwHhcNMjUxMDE5MTkwMTE3WhcNMjUxMDIwMTkwMTE3WjAzMTEwLwYDVQQD
Eyg0NzIzZDk4YWM5MjdkMDJmMzc1YWI1YzkyOWE3MGZlOGI1NGYyOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJbK7NlTVShx5cktZSXqmIleu7Ib
MqPe3ZWPocQ7aQI8XhOFuJoQMEUCgNlLYCBwJVOwp8qti1s3WwmXYdXDcBbWk2uO
/Ud23u5SOvW/9wkwFxZHbZ+xmFtE9FhqOpG1VNxiZTPFvW/vuHYOkXjBVQFZE3vv
V/qzo1goR9ScZ8ivbRThHhcCejqDVqmgQRlTyvZQ8AZHwlo2ViJI+G3tPnqIaqC0
ZhGuDXmOlln023qkMPfDb6YJBtTYaGjZA+Bu45fFotS6ZC12MvIh8FQjgjZ0C5st
4rfMJcfHzleJMWl3dBEhatrJVN4d0QcsFzB2U7tqQX8pCExbDeCZaMmivwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEcj2YrJJ9AvN1q1ySmnD+i1TyljMB8GA1UdIwQY
MBaAFBcRgHHMH62cL5KhIpIa1HixNHsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYt
ZTkwZjE2ZmM2ZmM0LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi81ZDM4YmYtNjM0ZS00NjRiLWI0NjYtZTkwZjE2ZmM2ZmM0
LzEvRnhHQWNjd2ZyWnd2a3FFaWtoclVlTEUwZXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKIuOe+T
pUSSF2HLM2qOUBxRQjUO9Wp9pvxMabJN8S0Ar32cmsXr6wahpBRx32DKqZl6/Jy8
vwywAeuF3xILF5SGY59RoqLe/V7g7w9YxodfjmO9t4ac/JNgEZPZoTVQgrgE3C/g
Wdu3S2imdP4qLPSPYsOmlr8C8/N+3Dbvp7QzM5ie0wOTA7dS+RYrysgeSuIinSBq
8Kd3mPr6ilMzQR1dUtLsX3vxPb9xhB8IporXWWJV6fFGfFextWQ7HS9xIhhczvNg
ZCotRZaFNPR5w89HHywoaxmo4R36U4uvAPIEks57u96LyHp24pAjeTo5DmxztJ1w
OeHntGETiqDj3Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:03 2025 by rpki-client