Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
File:                     FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft (raw, json)
Hash identifier:          U9EPz5Oixb4uhuqHOGELxlEkSTCcEuWc+3uWBg4MPuQ=
Subject key identifier:   4F:9C:12:C8:A5:D8:41:DA:D9:8D:1F:73:D3:38:0B:58:69:B6:08:4B
Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79
Certificate issuer:       /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
Certificate serial:       0199FBB37039BC601C8209951ACF5DE2BB58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
Manifest number:          94
Signing time:             Sun 19 Oct 2025 09:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:04 +0000
Files and hashes:         1: Dex_n_k-87_gKk-kcEbrOiGhsDE.roa (hash: I+5HrvSZROiMeA2q8oaiOPlDXynPqoc3wBpebl+G13s=)
                          2: FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl (hash: zt4O0YgH1fVoy/J+m2n4xY3+xGrkeRd3WPk95KNXwTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:70:39:bc:60:1c:82:09:95:1a:cf:5d:e2:bb:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79
        Validity
            Not Before: Oct 19 09:01:04 2025 GMT
            Not After : Oct 20 09:01:04 2025 GMT
        Subject: CN=4f9c12c8a5d841dad98d1f73d3380b5869b6084b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:24:d6:2e:8c:54:37:30:cb:ea:f0:89:a5:
                    f9:5b:b1:d0:76:60:10:fd:0a:47:d3:7b:7f:2f:dc:
                    e5:e5:e6:e5:e3:41:f8:c6:e9:ad:f8:78:38:8b:33:
                    b0:52:3f:2a:18:45:16:fb:60:f3:3e:a0:7b:01:37:
                    de:51:44:58:20:4b:24:b3:16:bd:24:f7:79:1f:ec:
                    24:79:92:79:52:36:e0:df:75:ad:77:28:1f:cf:b8:
                    31:da:17:00:09:12:69:a6:51:2d:7e:cf:55:98:2a:
                    24:fa:e4:72:2b:ea:3b:f0:0a:af:df:10:77:a4:1f:
                    9a:3e:04:03:54:28:27:75:6d:72:4c:21:1f:f9:6c:
                    75:bc:d0:24:31:e5:09:12:eb:c1:03:a2:cb:7f:af:
                    9a:63:b8:3b:8d:5f:ed:2c:7c:03:00:a4:13:d1:e7:
                    80:3d:89:33:84:7a:50:53:f8:b2:ca:7f:49:e1:6c:
                    0c:12:4e:a8:06:75:f6:00:f5:48:62:fd:03:99:1e:
                    b9:61:5b:c5:04:9d:22:f5:59:17:01:ed:9b:86:1c:
                    35:a4:91:d4:81:4d:c6:6c:50:80:54:6a:3f:53:69:
                    71:57:1d:cc:b9:c8:13:0f:6d:ed:d4:cf:12:65:a4:
                    12:c4:ce:51:45:70:1b:fb:bc:66:5a:0e:d8:5c:5e:
                    8e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9C:12:C8:A5:D8:41:DA:D9:8D:1F:73:D3:38:0B:58:69:B6:08:4B
            X509v3 Authority Key Identifier:
                keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:4d:5e:eb:fe:6e:ae:29:5c:c6:e2:b3:c8:cc:b2:63:da:
         f8:5b:b0:0b:1b:d8:52:16:84:bc:16:8d:64:b2:6f:db:88:07:
         ff:98:af:b6:0d:af:b2:a8:8b:32:b7:de:58:f2:21:ac:9b:a4:
         f6:23:41:cb:23:0e:b2:c0:c6:c8:88:d9:24:31:85:62:7b:57:
         fd:4d:97:7e:04:e1:9e:cb:5f:f6:fb:09:05:02:7b:ea:81:a6:
         2e:68:09:fb:d5:f0:52:e6:59:e9:6e:6a:1f:14:b1:c9:97:4c:
         79:ca:6d:01:f0:b3:45:6d:5c:97:27:6d:7c:d8:b1:90:ea:fb:
         e6:5f:e3:b3:f3:d1:76:84:e6:72:f9:58:38:43:65:bb:08:63:
         35:fb:31:e2:4e:51:8e:68:2e:ce:df:2c:e0:b3:5d:bc:9b:a1:
         08:5a:8c:4e:db:44:e1:38:36:cd:8f:59:8e:51:d4:66:b3:3c:
         a9:7d:df:bb:89:68:bd:06:56:e0:c7:55:b7:10:ca:42:32:16:
         a6:91:30:aa:d2:db:62:04:41:01:90:29:af:ba:62:e6:93:b8:
         3f:9f:9c:98:bd:dd:04:ea:08:88:cb:02:b6:5f:fa:b7:f2:cf:
         83:ed:cf:84:d1:2b:9f:f7:b4:93:c3:e4:5c:15:cc:a1:98:ce:
         9b:91:b5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:13 2025 by rpki-client