Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File:                     tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier:          mUD826TEBjQwheSDJZPk60hweF4pjIglx8pNDxW5MLk=
Subject key identifier:   FC:FA:02:48:C5:44:98:62:37:52:B1:56:12:1F:EF:03:C1:E8:34:B7
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer:       /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial:       0199FC8F83BF77D55461DEAE1A9ED67E236F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 13:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:27 +0000
Files and hashes:         1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: uQKRULqrFAbLjC2FKuKgrRDeUKqw5iOZSGMMI+XsI7Y=)
                          2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:83:bf:77:d5:54:61:de:ae:1a:9e:d6:7e:23:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
        Validity
            Not Before: Oct 19 13:01:27 2025 GMT
            Not After : Oct 20 13:01:27 2025 GMT
        Subject: CN=fcfa0248c54498623752b156121fef03c1e834b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7a:24:8d:91:4c:45:7a:ab:5e:9e:34:40:70:
                    a4:30:b6:f1:74:7b:9a:a3:c5:b3:66:f7:41:bb:13:
                    75:4d:77:12:b0:d1:37:fe:2d:2a:b0:f8:97:6d:5b:
                    97:f4:d2:d7:11:c4:7d:74:be:23:a0:a7:f3:b9:a7:
                    9e:88:d0:21:01:3f:08:46:d6:e6:b9:f4:94:a0:cc:
                    f4:75:39:35:12:7a:30:42:3b:b1:83:09:97:4f:90:
                    78:ca:d8:0f:2b:ea:43:42:d9:55:42:3b:3f:5f:23:
                    1b:3a:33:3b:76:c5:70:85:07:4f:b4:57:1f:0d:c6:
                    6f:23:cb:96:0c:a3:8f:90:8c:68:d9:6b:d8:0b:8f:
                    2e:c0:85:87:bc:87:90:b2:97:8b:89:77:ce:3a:c4:
                    90:3a:b3:f4:21:6b:ad:d3:93:94:12:14:a8:de:2d:
                    d0:29:e5:c6:c8:4c:e4:d1:b7:36:23:0f:63:17:d2:
                    b5:cb:cb:d9:aa:e3:98:10:62:0f:3d:58:9a:13:69:
                    48:f8:73:7d:76:17:c7:8d:8d:1b:9a:49:89:d5:b5:
                    8a:57:99:db:eb:cc:c6:a2:88:0a:d1:5c:b2:f2:3c:
                    c4:ef:f6:fe:53:88:d8:24:e8:46:47:3d:c5:67:20:
                    19:6b:8b:34:5d:bb:b9:de:f4:04:70:57:d9:37:49:
                    cf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FA:02:48:C5:44:98:62:37:52:B1:56:12:1F:EF:03:C1:E8:34:B7
            X509v3 Authority Key Identifier:
                keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:34:60:58:c8:9b:8d:19:eb:50:7c:26:04:40:62:b7:6e:50:
         4f:44:8b:04:89:8b:3b:de:b8:da:56:49:a4:05:6d:25:1c:48:
         63:05:b6:16:ef:82:85:bb:e8:dd:02:a8:71:84:34:57:ef:e0:
         d4:37:22:e0:2b:df:24:e5:ba:5b:26:0f:d1:39:bd:91:6c:ef:
         53:38:a1:18:e6:c8:e9:c4:cb:b3:8d:37:48:3c:11:45:f4:38:
         6a:ff:22:7d:0b:68:fa:b3:81:cc:70:47:0a:af:b5:98:bc:38:
         bb:08:ca:f4:05:5e:9b:c8:88:83:f8:62:ed:58:dc:36:c2:09:
         37:44:09:f4:a8:79:f6:50:16:ab:56:1d:92:38:bf:3b:2a:c8:
         8e:60:69:48:79:71:bb:0b:71:0d:2d:ba:c4:88:a3:9e:81:50:
         be:e8:a4:52:00:be:29:84:0c:f4:5c:47:be:22:7d:55:96:92:
         e9:c2:bf:25:59:d0:64:0a:54:fd:77:05:b8:47:0b:de:c5:6a:
         5d:27:25:b1:ee:58:8e:ec:9b:79:97:2c:85:3a:ba:de:a9:a3:
         34:80:fe:7f:44:7b:44:e3:f7:1e:0e:2a:c7:0c:d5:5a:ce:b9:
         27:40:72:67:7e:cd:78:ee:04:98:ee:40:a6:0d:cd:22:5c:38:
         36:21:c3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:22:31 2025 by rpki-client