Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          pFvlTTJ0vHiKpE5B0zjxr5gETffdwb0lLGk60p5aBHs=
Subject key identifier:   07:60:C9:6D:68:03:18:C4:D9:AA:5C:93:25:DD:47:78:44:59:67:95
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       0199635A33E24571D2DF750F5C4F24ABE9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          0562
Signing time:             Fri 19 Sep 2025 19:01:19 +0000
Manifest this update:     Fri 19 Sep 2025 19:01:19 +0000
Manifest next update:     Sat 20 Sep 2025 19:01:19 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: vm+TeQL+LqBAzEsfTZTKLES6Vwa/Us3qQK+Xcn8SF1c=)
                          2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:63:5a:33:e2:45:71:d2:df:75:0f:5c:4f:24:ab:e9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Sep 19 19:01:19 2025 GMT
            Not After : Sep 20 19:01:19 2025 GMT
        Subject: CN=0760c96d680318c4d9aa5c9325dd477844596795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:de:5a:3e:be:2f:7c:50:de:3f:09:11:63:0a:
                    e3:9b:e1:f8:40:c2:b9:04:63:7c:5e:50:a5:03:f3:
                    95:2b:68:c1:7c:1c:27:1e:6d:f6:e1:1d:fb:64:16:
                    d5:e6:99:0a:1c:db:c3:f7:38:cc:bb:39:e0:b4:1a:
                    78:69:f8:0c:ea:0e:bb:b9:f4:c8:13:63:d1:d5:08:
                    0d:a1:db:3a:b9:21:a0:ca:04:13:3e:f6:3a:43:a1:
                    c0:05:b4:38:97:67:18:27:71:53:81:06:be:00:ad:
                    cd:3c:a9:9b:f0:62:80:be:90:fb:8a:47:a5:84:3b:
                    d6:3c:b1:7f:cd:b5:98:5f:b4:fd:74:0f:87:1a:58:
                    c8:06:a9:f9:b5:4a:f8:74:42:52:2e:99:20:e0:78:
                    1c:aa:66:3c:f3:77:a1:85:5f:9d:0e:eb:51:60:88:
                    cd:13:6e:3c:f5:5d:aa:cc:71:01:bb:59:95:2f:e7:
                    47:fe:d6:6d:8e:63:25:45:21:56:c2:6f:dc:b7:61:
                    bb:73:b0:c7:ce:16:89:9c:70:59:36:4a:2d:2c:be:
                    84:ef:1f:a6:e4:9d:89:9c:82:35:32:99:16:3c:8c:
                    c8:22:3b:07:6d:33:27:6a:f1:3a:b8:fe:83:bf:97:
                    9c:dc:ad:67:e5:37:83:3b:30:2c:cf:72:fb:65:d9:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:60:C9:6D:68:03:18:C4:D9:AA:5C:93:25:DD:47:78:44:59:67:95
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:89:86:bc:01:8b:c8:91:52:67:8f:6d:a4:d5:09:f6:19:b9:
         6c:37:f0:66:cc:4c:ac:14:84:12:b4:87:41:0f:bd:6e:da:be:
         c7:5c:03:ed:f5:46:36:3c:4c:4b:3c:bb:30:c6:e2:f3:b0:99:
         80:42:30:5d:36:a0:db:1d:04:01:8f:d7:58:93:39:e3:52:84:
         0d:51:ff:f5:71:28:da:b6:66:e2:8e:6d:c1:65:60:ab:67:75:
         56:1c:16:11:f9:62:16:ab:5e:be:23:93:21:7d:fe:ae:da:d8:
         e1:69:f3:ea:92:2c:3f:20:7d:72:d4:22:2a:a2:c5:e3:5a:3f:
         12:be:2d:fd:d4:5a:25:f8:4c:53:89:0c:8e:59:4f:dd:05:fc:
         9d:25:11:42:ef:38:a9:78:85:cf:a9:d6:b7:34:86:2f:95:5c:
         83:3e:87:78:65:5f:f3:9b:cc:60:a6:48:84:6a:4e:7f:ea:f8:
         d7:eb:c5:2c:28:d4:c8:4a:ba:6e:f2:f8:d1:32:c6:cc:ce:cc:
         20:64:16:ae:c6:9e:4a:ab:ea:50:54:b8:89:e0:d0:14:4e:a9:
         38:18:dc:ff:9a:ff:fe:ad:e5:de:12:27:d8:3c:eb:5a:a3:49:
         87:61:64:f6:81:29:c3:cb:7f:6d:3d:66:24:57:03:5c:da:42:
         55:b2:95:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 00:34:48 2025 by rpki-client