Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File:                     f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier:          9012jbhpP5FUEiEbJd6YIPNTzRSHTtJ5rdC6sGRTkyI=
Subject key identifier:   F7:F0:A0:CF:76:5C:ED:70:15:E9:3E:21:E6:EF:35:F3:92:4A:BB:25
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer:       /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial:       019A221B63263EB8FBC58894F14902973C9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number:          054F
Signing time:             Sun 26 Oct 2025 20:00:11 +0000
Manifest this update:     Sun 26 Oct 2025 20:00:11 +0000
Manifest next update:     Mon 27 Oct 2025 20:00:11 +0000
Files and hashes:         1: FBjUV3haJWMHiHYLmmKX3BoInLo.roa (hash: oKEaDRSFjba7izBu4ZUdfN2GUSpLeb9v8sA33inleqs=)
                          2: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: v5NOJGKkqXvGl/kxBMEX9wv1FV8D1E/WUS4BCQSnHJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:1b:63:26:3e:b8:fb:c5:88:94:f1:49:02:97:3c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
        Validity
            Not Before: Oct 26 20:00:11 2025 GMT
            Not After : Oct 27 20:00:11 2025 GMT
        Subject: CN=f7f0a0cf765ced7015e93e21e6ef35f3924abb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:18:c8:17:df:f6:f4:9f:27:56:54:f2:10:c3:
                    bc:58:89:11:a6:93:bb:57:7c:2f:b5:72:cb:d4:28:
                    2f:13:f6:b1:5b:80:8a:e3:35:f0:d3:98:f6:e0:30:
                    95:2c:a7:a1:62:6d:dd:06:df:e9:ac:42:13:fc:79:
                    05:9d:8d:e3:30:06:db:a6:67:73:e4:c5:68:26:63:
                    31:92:7a:df:3b:13:a4:50:c4:44:55:93:a3:a5:91:
                    2b:57:12:01:a2:68:a8:8b:81:59:a3:8c:04:2b:a5:
                    aa:e8:85:79:3a:97:07:37:10:e7:7d:20:36:92:e5:
                    d3:fa:4a:59:f8:52:9a:25:0c:66:0c:e1:09:0e:5c:
                    10:5f:17:3f:74:0f:2c:b2:f9:44:17:71:09:10:65:
                    ba:8e:10:e1:99:58:3d:5d:7e:3c:ed:b5:b1:74:67:
                    06:8d:de:d8:6c:6a:f2:27:bf:d9:5f:42:07:8e:be:
                    1c:fd:5c:17:14:5c:32:31:85:f3:5f:85:9d:f2:74:
                    62:0f:e3:a0:c3:8a:d6:5c:51:3c:5d:c4:2a:00:67:
                    fa:4d:aa:20:a1:ae:89:8d:32:b0:fa:20:a0:ce:4f:
                    23:17:ee:6e:99:49:79:d9:0a:fc:8e:42:58:61:e2:
                    31:0d:03:7b:57:3d:36:de:64:b7:fc:b4:2b:d4:fd:
                    a4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F0:A0:CF:76:5C:ED:70:15:E9:3E:21:E6:EF:35:F3:92:4A:BB:25
            X509v3 Authority Key Identifier:
                keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9d:9b:ef:ff:8e:cb:5e:01:38:03:e9:bb:a9:bb:29:51:38:
         9b:ec:ae:00:c0:89:3c:e0:6d:a2:e1:d3:4f:58:be:be:b5:93:
         5a:13:54:c6:82:ab:2d:54:e1:59:1e:24:4c:88:da:fe:7c:33:
         96:25:33:9f:0f:ac:b7:da:21:8e:62:bd:a7:9d:1f:3a:37:9c:
         cd:4e:b9:17:b8:36:70:6b:e3:86:42:af:2e:dd:1c:84:d1:79:
         3b:d4:43:aa:38:39:68:8e:13:d7:9a:fd:d2:04:56:d7:a8:90:
         65:d7:36:1a:11:7c:50:4b:fd:70:4d:d7:d5:72:d4:5f:7e:30:
         6e:32:41:b1:9f:6a:1d:c1:c0:b7:6e:31:5d:f9:ae:d6:7b:73:
         72:8a:db:69:e2:a0:f1:46:a6:08:97:9a:09:32:4d:5b:6e:ee:
         c4:2b:35:49:8d:ac:42:d5:3b:b1:c2:e1:26:fb:cf:b0:51:a0:
         f7:20:77:cc:49:17:07:49:10:6d:7d:6d:a2:59:e1:6b:7d:b9:
         ca:ae:b9:a0:79:dc:70:74:79:c4:8d:fd:07:48:a6:d3:30:83:
         3f:b9:f5:98:69:ec:38:95:cc:ca:14:4b:da:fa:c2:21:57:a6:
         77:75:cb:c7:5c:9c:cd:a2:bc:86:fd:62:9d:d8:e7:d6:5e:1d:
         d0:e5:47:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:44 2025 by rpki-client