Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
File:                     fUOw7HmVHV1VgBM-UympDy_uHFs.mft (raw, json)
Hash identifier:          z0V2dfHEJxTqpyOKdZvs0sHI97Emai/5Eg/lnwcB3zk=
Subject key identifier:   71:E4:D2:E9:43:0B:5F:B9:33:AC:2E:B0:D1:DA:66:88:80:6C:63:1E
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Certificate issuer:       /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial:       0199FDD9E1FC4F69FBC7D1184799E93DAE1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
Manifest number:          16EC
Signing time:             Sun 19 Oct 2025 19:02:18 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:18 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:18 +0000
Files and hashes:         1: fUOw7HmVHV1VgBM-UympDy_uHFs.crl (hash: CPODaIKA5/8Y2zy1VeqJzRdU1w7E3VMJdo/NzQPPCrY=)
                          2: xgmy0sqwA2aGVF5twml3PF6jHVs.roa (hash: TiGnF5pl1wlg4dnvVcdyr5lG9rpTWjsJi0mQ3O+Hoq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:e1:fc:4f:69:fb:c7:d1:18:47:99:e9:3d:ae:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
        Validity
            Not Before: Oct 19 19:02:18 2025 GMT
            Not After : Oct 20 19:02:18 2025 GMT
        Subject: CN=71e4d2e9430b5fb933ac2eb0d1da6688806c631e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:e2:fe:92:05:40:82:16:39:2f:2c:38:7d:
                    34:b3:eb:7c:46:b3:80:17:d9:f9:1c:12:ac:15:6e:
                    c9:19:da:7c:ab:f0:1d:f2:b9:2c:8e:d4:4b:54:73:
                    b1:2e:57:1b:26:ea:c9:5e:a4:08:94:f5:f3:e5:f0:
                    48:a7:7e:08:2e:d4:ad:a5:a9:92:ba:a3:47:8f:24:
                    13:34:d1:73:59:48:f0:3b:f8:04:63:c0:9b:59:bd:
                    1c:4f:ee:3b:fb:2e:dd:20:09:fb:39:62:25:39:24:
                    cd:39:15:a4:a2:d3:ec:b3:ce:90:11:de:24:05:2d:
                    3d:ed:fc:56:31:65:38:65:3d:15:9b:a2:23:5d:38:
                    24:86:a2:d5:4d:f8:68:df:fc:2f:e1:f1:ef:6e:d8:
                    89:32:56:0f:55:00:8a:6c:32:6d:f5:56:62:2a:0f:
                    19:42:ec:d8:4a:c8:8e:c3:00:dc:b3:96:9c:04:00:
                    36:44:58:cf:e9:46:80:f1:db:86:47:26:d0:e1:03:
                    42:32:de:0c:a9:37:a2:52:44:3a:7a:5a:4c:a2:f7:
                    d9:35:fd:65:c6:6e:df:ac:f4:78:58:ae:5a:36:9e:
                    07:c7:1e:19:f8:d0:b8:ed:bd:17:67:02:d5:1a:ca:
                    a3:a4:31:c5:0a:32:7c:f7:85:76:11:03:ab:0e:28:
                    e2:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E4:D2:E9:43:0B:5F:B9:33:AC:2E:B0:D1:DA:66:88:80:6C:63:1E
            X509v3 Authority Key Identifier:
                keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a4:bf:ab:c1:c6:d5:0d:3e:31:1b:6e:d5:93:31:27:4c:69:
         92:24:30:70:8a:84:6c:2d:9e:68:aa:06:8c:5c:99:ab:9b:ca:
         13:63:78:61:c6:84:6a:a5:b2:ff:45:05:75:b1:bf:71:fa:fc:
         f4:19:ed:89:55:8a:fc:32:09:05:e5:2a:9f:81:98:67:f3:72:
         2d:fd:ca:29:9d:82:e7:29:85:6f:6d:86:11:41:7b:5b:7e:9b:
         5c:a6:f9:a4:da:77:0f:12:59:59:ed:cc:38:39:f4:17:7e:5d:
         f9:c0:42:30:2c:d9:a8:a0:f2:49:af:22:db:8e:cd:9f:a7:82:
         61:05:b7:bc:e7:95:a3:ec:9c:0d:c1:13:be:74:f9:93:e1:4b:
         90:01:90:9a:40:cb:d1:a9:a3:8d:46:a2:f5:fd:49:50:a1:d3:
         f9:88:51:ad:32:a4:95:4a:ea:14:a5:2e:8c:d4:49:33:55:f9:
         56:68:ed:11:18:fa:4a:17:3b:2e:c2:84:c8:1f:52:17:79:64:
         ec:5c:2b:e2:89:6d:41:22:5a:f2:17:f1:62:75:fd:0b:1e:7d:
         ba:3c:95:fd:b5:24:66:39:d9:07:ec:16:c5:72:95:92:94:93:
         04:b6:34:d5:a8:8b:71:9a:b0:46:bc:9e:62:1b:f3:2e:4d:ec:
         65:9f:57:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:36 2025 by rpki-client