Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
File:                     9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json)
Hash identifier:          I+eepBR2jW0vt2/qPLXzJ6Y9gIvknnYnE5UhrCAQEfg=
Subject key identifier:   6E:A7:CC:2B:11:D5:99:7A:6D:1E:C7:99:EF:70:EE:21:C1:16:58:6D
Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8
Certificate issuer:       /CN=f4c9baa4429da786591b72525852e6d97b32c1e8
Certificate serial:       0199FCFD9A435AB7ED7DC53CD605B7D89109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
Manifest number:          13D0
Signing time:             Sun 19 Oct 2025 15:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:42 +0000
Files and hashes:         1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: SAU2GgZxhQoqT7uaoH+rhud2yrLmC0i0JbdCeei4BW8=)
                          2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:9a:43:5a:b7:ed:7d:c5:3c:d6:05:b7:d8:91:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8
        Validity
            Not Before: Oct 19 15:01:42 2025 GMT
            Not After : Oct 20 15:01:42 2025 GMT
        Subject: CN=6ea7cc2b11d5997a6d1ec799ef70ee21c116586d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:d4:80:8d:83:3c:92:d5:39:99:c9:37:2c:
                    e0:31:98:10:75:ee:4e:59:ee:74:b0:fa:35:22:ad:
                    62:7f:2f:a4:6b:28:48:c6:75:49:ca:37:7a:20:11:
                    a8:4f:8d:a6:66:88:0a:2f:d0:fd:50:b3:74:f4:e6:
                    96:34:c7:72:25:62:b5:e7:d3:93:91:1b:ac:dc:7a:
                    81:d9:50:01:a5:f3:11:de:11:99:bb:31:b8:ce:79:
                    2b:74:4b:d8:f0:28:f3:58:38:60:29:66:b5:b4:c0:
                    12:e4:db:3a:f7:3c:60:a5:4d:aa:a7:89:8d:ea:97:
                    0e:cb:6f:ba:06:0a:fc:0f:8e:ae:46:13:2d:c6:b5:
                    09:07:a5:e1:ef:4a:47:7b:07:8b:80:ac:79:21:da:
                    12:87:f7:f2:54:40:62:ab:dc:fb:b0:e6:8c:02:72:
                    b8:16:bd:91:a5:d4:cf:80:2e:99:b6:a0:64:ee:60:
                    da:7d:6a:b1:3e:50:75:7f:1c:9b:fc:55:4b:41:0b:
                    dd:65:bc:ab:ba:de:0a:0d:e8:b7:08:76:c2:c5:e9:
                    c8:5a:ef:15:2e:4a:bb:56:ce:34:59:7e:fc:f1:04:
                    a8:ca:aa:45:f1:fc:7c:16:fe:20:c5:04:7a:c7:e8:
                    a1:8e:64:65:13:b6:b4:21:e9:81:8f:d2:b9:b1:73:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A7:CC:2B:11:D5:99:7A:6D:1E:C7:99:EF:70:EE:21:C1:16:58:6D
            X509v3 Authority Key Identifier:
                keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c7:09:63:a4:e1:29:20:ca:39:f3:6b:ad:57:d6:ae:2b:eb:
         ea:99:b9:3e:3e:ff:3f:e9:7b:47:ef:54:62:80:ca:ae:b9:cb:
         35:ac:ec:c7:4c:7f:08:0a:28:b3:f7:b4:d2:18:4e:95:61:5c:
         a8:5d:49:ec:3b:58:59:82:99:a5:6e:54:c0:8e:8f:26:a0:8e:
         8c:ad:f7:47:b0:ad:25:61:7b:86:91:7c:24:51:0c:64:ab:28:
         19:fa:88:a5:52:eb:f8:2d:f8:58:d0:aa:e2:4d:ae:ae:e0:b0:
         5f:6d:40:f5:75:3c:eb:5c:60:0a:6d:4a:94:8e:a6:c5:04:cc:
         16:3f:a3:73:db:54:df:f3:82:fc:9a:ec:67:62:2a:07:af:4e:
         52:02:ae:c8:30:ad:11:16:88:77:c9:bb:7d:4f:d5:e1:b8:cf:
         e2:cc:0d:55:ae:cf:1d:b7:07:16:06:ae:f8:e8:cb:9d:cc:44:
         92:d4:64:b4:ae:05:a3:31:b6:d4:38:68:0e:ec:ef:f1:96:43:
         f4:3f:f8:b9:b6:85:df:e6:bf:d0:a8:c7:ac:86:df:4a:8b:6d:
         a7:e0:5d:1f:2c:61:68:22:4c:a4:53:6f:2b:93:5f:f8:58:5c:
         03:6d:10:b1:1d:24:12:ff:74:02:b3:d5:75:a9:34:4e:30:f0:
         20:2a:6c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:10 2025 by rpki-client