Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
File:                     fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json)
Hash identifier:          Wmvp00L036zspkGmR1aNXieOE63cEgEDpWyp6TpvPzw=
Subject key identifier:   FD:50:6B:FB:B6:90:B6:A6:5B:1A:5D:F5:04:29:9D:16:B4:97:60:CC
Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09
Certificate issuer:       /CN=7e2e2918432849eb71e95dc40d1079ea865f6109
Certificate serial:       019921B2176B4F195FF5F617699BEF1E1489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
Manifest number:          098C
Signing time:             Sun 07 Sep 2025 01:02:23 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:23 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:23 +0000
Files and hashes:         1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=)
                          2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: 57kHg2FMqVCI6h5wx7yMXT0LqSswksnwW53k3V+DkXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:17:6b:4f:19:5f:f5:f6:17:69:9b:ef:1e:14:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109
        Validity
            Not Before: Sep  7 01:02:23 2025 GMT
            Not After : Sep  8 01:02:23 2025 GMT
        Subject: CN=fd506bfbb690b6a65b1a5df504299d16b49760cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:e3:ab:f7:1b:51:93:0c:d8:f7:5b:47:35:
                    5b:45:ac:9c:ac:1c:69:9f:13:95:27:da:e6:10:6b:
                    3a:21:37:b3:96:ce:93:f1:96:3a:d8:17:77:1f:07:
                    b7:51:bf:59:4f:2a:e0:33:b8:08:22:dc:b1:6c:2f:
                    0d:fa:29:53:84:df:f9:67:63:97:e8:b9:00:62:63:
                    6f:e9:ea:18:3e:86:78:f7:2c:0d:d8:73:7e:47:a2:
                    69:ee:6f:3e:7c:3b:2d:5b:ac:6e:d8:ec:6e:92:48:
                    0b:ac:6d:f3:18:cb:04:55:51:a4:d3:52:86:39:41:
                    6f:24:6d:d3:a2:65:14:7b:42:f6:34:0b:bd:10:4b:
                    5e:2b:a0:c2:24:4c:e8:ca:1b:73:6c:90:bb:2f:e4:
                    cc:ee:5c:96:57:0f:20:85:45:f1:8a:aa:84:4b:32:
                    ef:09:7a:cc:d6:f2:56:a1:dc:77:9d:bc:33:1d:20:
                    17:93:ce:e5:87:d0:72:91:f8:9c:7e:31:a1:52:30:
                    ea:c6:04:3d:00:bb:4f:1c:57:94:dd:3f:c9:e7:3c:
                    18:0c:c5:d8:0e:86:04:97:41:92:ae:ad:cc:55:55:
                    2c:21:6c:83:f4:e9:f1:17:9d:3a:05:dd:52:17:be:
                    12:d5:26:6b:dc:12:a8:5f:99:3c:ae:60:ac:f7:4e:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:50:6B:FB:B6:90:B6:A6:5B:1A:5D:F5:04:29:9D:16:B4:97:60:CC
            X509v3 Authority Key Identifier:
                keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f5:34:ed:b9:4d:34:13:68:b0:b1:61:56:9b:40:99:0b:60:
         b4:bc:98:b1:e2:e3:ae:54:54:2e:f4:82:90:c1:7d:b1:4d:eb:
         d8:58:a8:2f:ed:29:c6:9b:c8:30:f2:ef:0a:5e:c4:6a:1e:96:
         95:1d:5d:4c:74:a4:af:87:d0:49:bc:e1:79:ef:34:36:25:15:
         83:28:ea:6d:ee:64:82:9a:91:a7:a5:2c:f3:40:98:6a:a7:68:
         08:11:2e:ca:08:c7:3a:c8:da:cd:7b:b4:9e:ac:d0:ec:53:f4:
         37:63:fd:08:be:ea:57:5f:81:ba:fe:6f:47:b4:97:71:83:ab:
         68:73:fe:03:68:e2:e3:2d:5d:e2:41:f9:86:78:5c:f4:03:4c:
         16:e3:e7:d7:61:ae:97:06:ab:27:e4:4d:a7:b9:bc:0b:e3:e7:
         58:eb:28:aa:e6:5c:92:86:95:bf:e4:a4:ab:9a:8d:a7:a9:17:
         81:ab:65:88:a6:30:62:d6:d3:3c:fd:03:01:2e:8e:eb:22:57:
         6b:9a:35:6b:fd:96:cd:cc:ad:dd:7d:5f:83:9a:29:76:3b:f9:
         f1:b6:ea:b7:fd:97:88:0f:a0:18:c5:5a:ba:0a:e7:9f:71:01:
         5f:24:29:6f:57:e5:4f:b0:36:85:33:05:1c:42:57:a0:7d:c4:
         c7:61:4e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:39 2025 by rpki-client