Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File:                     _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier:          wn0+vn7OJg+zUHY19OLB8w3+nfknd6BkXKpCSmPd1fk=
Subject key identifier:   D7:98:A7:F5:4C:DC:83:60:75:C8:6A:B8:9B:60:C2:A8:DB:C7:C0:F4
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer:       /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial:       0199FB0F32EB246C0C119BFB7C46DA71EF7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number:          0BC6
Signing time:             Sun 19 Oct 2025 06:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:41 +0000
Files and hashes:         1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=)
                          2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: AT5N1v9L35dAOs9qFJnkRqxRr1JTr5vLVCKMZpRZVTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:32:eb:24:6c:0c:11:9b:fb:7c:46:da:71:ef:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
        Validity
            Not Before: Oct 19 06:01:41 2025 GMT
            Not After : Oct 20 06:01:41 2025 GMT
        Subject: CN=d798a7f54cdc836075c86ab89b60c2a8dbc7c0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:de:28:4e:09:a3:5e:c4:2f:e3:e6:28:5f:1d:
                    0c:7b:a3:73:01:6c:18:54:dd:60:82:f6:0b:5d:2e:
                    62:59:ae:31:be:b4:b0:b6:e0:94:cc:2c:6e:81:7b:
                    9c:72:03:ac:83:8f:f6:6a:94:5b:a9:b8:3a:77:e2:
                    38:3e:ab:de:cf:8f:42:6b:7e:1b:6e:bd:62:ae:46:
                    e0:12:51:3f:eb:43:e6:a7:cb:9d:7a:ee:ac:9d:27:
                    35:be:65:9c:ea:a9:f8:ee:1c:1b:fc:8f:0a:36:8a:
                    aa:fc:91:29:3c:ec:4a:94:6f:f2:ee:c8:34:20:23:
                    fd:a0:3e:df:7d:c2:a5:31:ca:c3:d5:ac:f3:16:2c:
                    b9:d3:5f:ab:79:5c:33:e5:74:47:f6:ac:c3:32:a3:
                    1b:b5:ec:db:1c:bf:9e:e2:33:32:a5:0f:71:c5:88:
                    b9:eb:ae:3c:b9:0c:08:8d:b5:dd:95:5e:fc:92:94:
                    4e:dc:da:d5:8e:15:08:01:cb:e2:03:e5:b7:72:1e:
                    c7:87:5a:d1:9e:4c:5b:a3:e2:a6:2a:28:cd:18:8c:
                    0c:c8:33:7b:d0:9e:95:77:c0:26:8f:53:40:b1:79:
                    28:2d:22:0b:c0:b5:7d:fc:4d:47:9a:f4:8f:41:b3:
                    28:f9:67:5e:b2:45:df:5b:af:9d:e2:85:36:c5:bb:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:98:A7:F5:4C:DC:83:60:75:C8:6A:B8:9B:60:C2:A8:DB:C7:C0:F4
            X509v3 Authority Key Identifier:
                keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:7b:cc:26:37:bc:5e:20:d9:ba:9b:cf:99:2e:af:2c:52:
         7c:ff:8d:e1:3b:1d:92:b8:f7:8d:b4:81:aa:31:7e:6b:61:57:
         4c:bf:79:a2:87:ab:46:c3:76:b6:63:0e:ab:c0:e6:49:f7:ea:
         aa:fd:5c:73:ea:44:62:e0:92:6e:5c:bd:25:aa:1d:4a:18:d0:
         ff:ae:ff:1c:93:7c:b6:c1:6a:dc:57:fc:dc:e0:8f:34:18:a0:
         0d:c7:28:df:f2:21:30:c8:95:fd:46:f5:7b:0f:ae:45:91:5a:
         49:8d:bc:28:c9:64:22:8b:b7:1a:fb:70:47:dd:90:c8:72:eb:
         08:92:a3:7d:64:87:31:14:fb:41:73:d9:8a:61:7f:95:7a:28:
         83:dc:6e:66:38:60:d8:9c:07:e6:0c:ce:ec:81:1a:31:21:e4:
         f1:78:9f:76:7e:97:be:73:55:53:d6:75:de:6b:ea:54:07:d4:
         02:f1:8f:f2:90:55:6d:94:8e:6c:b6:4e:b5:d0:8b:00:c3:21:
         c4:3d:b4:2b:81:82:97:bd:79:06:8e:c9:2b:3a:61:32:9c:bd:
         94:b0:c5:46:a8:4e:3a:8a:a5:9a:f8:c5:6f:17:c9:96:d2:af:
         48:e0:40:b9:ee:e0:70:df:62:a2:92:e7:c8:1d:3d:de:5a:e5:
         ec:c1:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:49 2025 by rpki-client