Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
File:                     FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json)
Hash identifier:          2o38AHmYFomR8O4QXvaYLJRMxGt5Xm8IGM8MkCIVZPY=
Subject key identifier:   04:C6:21:A9:7D:73:A7:FC:9C:AA:2F:56:02:A5:6E:AB:A2:E3:9C:89
Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD
Certificate issuer:       /CN=14336c78d52ba8115741002b6b070d117ae9bfcd
Certificate serial:       0199FAD7EF567AC2E97456F7331EB70AD9F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
Manifest number:          127D
Signing time:             Sun 19 Oct 2025 05:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:19 +0000
Files and hashes:         1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=)
                          2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: /OQdvd/XMbzXo1qzZV/tS7gPbAkpA7idxo0bsKl62C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:ef:56:7a:c2:e9:74:56:f7:33:1e:b7:0a:d9:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd
        Validity
            Not Before: Oct 19 05:01:19 2025 GMT
            Not After : Oct 20 05:01:19 2025 GMT
        Subject: CN=04c621a97d73a7fc9caa2f5602a56eaba2e39c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:fa:0c:3c:24:d8:a3:51:57:62:0d:cd:b1:
                    c9:3b:fa:9c:da:07:fc:db:ab:64:67:0c:c2:03:f6:
                    64:f5:f5:78:ee:0b:05:2a:53:ab:e0:38:c7:ff:8b:
                    34:e0:64:e8:f8:a0:26:78:ad:1c:ba:1f:91:3a:92:
                    c9:c0:57:0a:c6:80:0f:f3:ee:b6:03:40:ae:4c:2e:
                    42:92:df:be:cb:f3:1e:ca:eb:c7:36:98:86:00:2d:
                    1f:fb:0b:53:cc:72:c9:d8:0f:06:9e:60:cd:32:40:
                    9e:62:e2:29:cb:88:f3:03:8a:5f:2d:f0:1e:53:e2:
                    0f:78:ac:02:db:4c:b1:99:03:a4:07:49:48:fd:73:
                    b6:bb:f2:33:ed:71:1a:3f:e2:5f:7e:52:e4:26:0c:
                    31:5b:f3:8f:ad:b5:27:38:da:96:71:18:00:03:fc:
                    b6:27:cc:3c:f7:41:03:a7:13:ee:d2:30:80:89:7f:
                    34:bd:e2:18:24:bc:66:ea:38:98:82:b3:75:21:2c:
                    c4:df:2b:3d:16:0e:f6:93:38:9e:d0:05:5a:33:21:
                    71:3a:c4:ad:c6:53:87:d1:b4:94:7c:97:2c:1c:38:
                    6f:5c:26:cd:1b:df:99:0e:6b:50:59:27:72:28:b8:
                    10:70:6d:77:dd:55:cd:13:78:f5:84:6d:e6:86:0d:
                    56:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C6:21:A9:7D:73:A7:FC:9C:AA:2F:56:02:A5:6E:AB:A2:E3:9C:89
            X509v3 Authority Key Identifier:
                keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:64:08:60:7b:88:5b:ef:a5:29:fd:d0:fe:29:27:95:a4:13:
         34:01:2e:27:ff:30:0d:8e:4c:f1:d3:1f:c3:66:16:0a:3a:ec:
         0c:0e:5c:d2:c9:51:4c:57:13:70:4e:be:15:c7:5d:1f:6b:e1:
         7d:8c:a1:79:94:bd:30:bc:dc:0d:30:ae:74:e6:5c:1b:13:0b:
         10:bd:05:07:31:ea:5d:03:d1:f9:98:64:58:94:64:43:5e:d1:
         3f:36:a7:30:88:f1:e3:9a:d0:05:0b:99:32:54:3f:7d:68:e6:
         62:d1:a2:4d:91:19:2c:92:f8:08:41:df:b8:49:1e:53:55:b2:
         a8:dc:1d:52:c3:7b:a7:bd:17:8d:6e:51:25:81:63:ae:1b:db:
         3a:cc:ea:57:5a:35:5e:f3:f9:e9:bd:98:18:39:7d:02:5a:a9:
         aa:c5:d2:69:09:5a:1b:4a:c3:05:cc:e5:e6:23:5f:87:20:39:
         fe:de:4d:4b:63:54:31:69:aa:42:9d:af:4c:f8:53:09:a4:d7:
         50:8b:d0:76:76:98:75:d8:83:9a:5c:14:33:7f:0b:48:8e:83:
         3a:ce:48:d2:14:dd:cc:0a:7e:1f:57:c9:f2:85:c8:f0:8d:41:
         5c:df:fe:bf:22:c4:54:c8:b4:a8:d2:3e:be:36:6b:84:44:20:
         cd:5d:60:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:39 2025 by rpki-client