Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft
File:                     FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft (raw, json)
Hash identifier:          ImJpHUvTxEck8bherQOWh5Tpp4grXaqu3SuBEc98APo=
Subject key identifier:   85:39:99:F4:5A:EE:15:76:88:51:AB:29:F5:62:10:FE:32:75:17:E9
Authority key identifier: FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C
Certificate issuer:       /CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C
Certificate serial:       3DE417FA2F86D0AB585415E090335A1E485D9A69
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft
Manifest number:          96
Signing time:             Sun 19 Oct 2025 16:48:42 +0000
Manifest this update:     Sun 19 Oct 2025 16:43:42 +0000
Manifest next update:     Mon 20 Oct 2025 19:38:42 +0000
Files and hashes:         1: 326131343a373538333a313030303a3a2f33362d3336203d3e20323135313038.roa (hash: Uc2wuWBne08reeuhGMV9FbwTFk0eKIo5Ei95b36hJuE=)
                          2: 326131343a373538303a373030303a3a2f33362d3336203d3e20323135313038.roa (hash: bvyg3HtIyqBCxLiPY89KCRG9IWT8nd/t/MqdudiybDI=)
                          3: FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl (hash: wkNteAHFElLwNkyU70ipRnyJ7BXZz7ywzvFsHvAw59M=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:38:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e4:17:fa:2f:86:d0:ab:58:54:15:e0:90:33:5a:1e:48:5d:9a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDEE16BDC5420A60A3D6A8A29BD302650937B88C
        Validity
            Not Before: Oct 19 16:43:42 2025 GMT
            Not After : Oct 20 19:38:42 2025 GMT
        Subject: CN=853999F45AEE15768851AB29F56210FE327517E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:73:f0:d6:6d:f8:ca:16:c5:09:0b:cd:a1:
                    2c:20:b9:1b:08:90:82:b0:c2:5b:51:c7:00:34:06:
                    a2:2e:53:9c:df:63:f1:43:43:04:be:bb:bc:60:fb:
                    b2:d3:96:ff:50:82:39:4b:9f:cb:a4:cb:e0:bf:97:
                    3c:03:56:a7:b1:8a:32:74:65:f4:ec:1c:c2:29:1f:
                    a3:04:7f:40:ef:58:29:96:bf:22:c0:9b:27:e1:0a:
                    9b:2b:d5:a3:0e:54:2b:2d:a2:d0:fb:7d:3b:78:e7:
                    06:bf:cf:d9:07:16:7d:e3:50:9a:36:d0:f3:d2:bc:
                    9a:ad:c5:fc:ec:70:94:13:a8:c0:02:d0:52:91:e2:
                    0d:ad:ea:cc:89:05:e2:72:8f:fe:ba:7e:01:74:71:
                    3a:27:5b:86:64:e3:35:7b:04:35:a6:e6:f1:2f:a4:
                    2a:dc:49:8b:1d:29:95:fd:4c:ce:1a:cf:eb:9d:bc:
                    f5:2f:dc:61:bf:31:cb:39:0a:b6:1c:a2:1b:ac:c4:
                    ee:0d:79:7b:0e:93:c4:85:00:3a:c2:e0:c0:f6:7d:
                    d7:21:3e:9f:c4:b0:4f:26:af:07:5f:17:b9:14:7b:
                    97:1c:68:9e:e7:19:d5:c2:73:86:e9:e3:4d:4f:cc:
                    c2:3d:37:a2:db:70:40:82:93:82:51:41:08:05:6c:
                    84:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:39:99:F4:5A:EE:15:76:88:51:AB:29:F5:62:10:FE:32:75:17:E9
            X509v3 Authority Key Identifier:
                keyid:FD:EE:16:BD:C5:42:0A:60:A3:D6:A8:A2:9B:D3:02:65:09:37:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/705b1897-d907-4dfc-b68b-77f485f58d6c/0/FDEE16BDC5420A60A3D6A8A29BD302650937B88C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:71:0e:0e:06:63:82:c8:c4:30:5c:4b:fb:bb:3c:84:93:0c:
         78:4e:cf:5e:db:df:e3:ec:7a:07:4a:44:a3:87:7a:8e:f5:b5:
         c2:cd:4b:4f:f2:c6:34:de:a4:5f:aa:42:80:90:53:67:b8:4e:
         1c:d8:a2:0f:3d:c5:64:28:51:d5:82:b3:06:34:b3:59:0b:5a:
         fe:5d:ff:af:eb:8f:ce:44:7b:d7:e5:64:a0:27:05:23:25:fa:
         e1:1c:b0:d0:dc:4b:cf:a4:69:3b:4e:59:0a:7c:fe:eb:ed:96:
         fb:89:71:9e:4f:1f:e3:35:90:19:4a:90:ab:59:34:1d:8b:8e:
         b4:6d:43:9c:a9:1a:7b:cb:ef:12:0f:84:63:09:ad:2b:17:8e:
         9e:96:fa:95:79:5b:f7:5a:6a:36:36:04:aa:66:cb:fc:1f:e1:
         43:1a:1b:a2:9c:23:1b:f5:60:35:19:42:10:98:aa:a9:cd:0d:
         6a:a9:82:7e:f9:cb:53:5d:b3:18:6a:2b:3a:ae:84:11:5e:e0:
         fd:38:46:2f:95:70:db:32:31:06:29:21:40:08:1f:f8:0a:7a:
         92:77:61:5a:8a:77:1a:07:6e:df:c3:0a:5c:56:4c:33:be:96:
         9b:01:bc:87:c8:62:c1:ce:02:aa:48:89:45:65:7f:07:9b:f6:
         50:ca:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:26 2025 by rpki-client