Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File:                     FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier:          2ZKCfUydLdSw67e8JWtkJdcQfMcqpJHg89hl9uDaXG8=
Subject key identifier:   82:0D:90:18:07:F7:55:C9:69:42:ED:15:5C:CB:51:4B:70:31:2C:AF
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer:       /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial:       019A522CA1D9FA9DFDB246AE3DE8B04610DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number:          0136
Signing time:             Wed 05 Nov 2025 04:00:47 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:47 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:47 +0000
Files and hashes:         1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: tkwVN9YPNbLLej51NK67dty2k2hCCwxUFYzNgjtwEuw=)
                          2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:a1:d9:fa:9d:fd:b2:46:ae:3d:e8:b0:46:10:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
        Validity
            Not Before: Nov  5 04:00:47 2025 GMT
            Not After : Nov  6 04:00:47 2025 GMT
        Subject: CN=820d901807f755c96942ed155ccb514b70312caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:d9:3a:89:1a:c3:a2:92:49:8a:ee:7a:e8:
                    e7:0c:f9:47:17:b5:2e:33:56:39:e3:00:b7:3a:d2:
                    59:56:99:96:69:4d:2a:9b:56:41:e9:4a:44:30:a5:
                    1b:66:dd:05:4d:7e:a0:7a:33:bf:f7:1a:4e:90:8c:
                    40:2c:09:19:a9:fd:71:05:4b:47:9e:6d:49:10:97:
                    b3:da:c4:1f:42:f7:cf:d3:2a:34:d2:21:a2:a7:cb:
                    be:8a:30:d8:9a:0d:58:5a:fb:ad:75:67:31:52:79:
                    87:72:64:d8:fd:81:15:2d:66:1c:de:91:53:89:c3:
                    57:0f:c3:1e:21:cd:9c:0e:e7:c4:75:fa:a8:6f:08:
                    f2:2d:ff:a7:28:9c:f2:8d:1f:54:a6:70:72:51:b8:
                    51:28:c0:32:c4:81:04:71:d1:ef:cc:37:31:70:b1:
                    05:3f:8e:58:98:6e:45:02:f7:b2:dd:a4:0d:0a:0a:
                    9a:47:be:a7:aa:4f:d1:8a:d0:ae:38:a7:90:1a:68:
                    85:bf:5b:91:c7:ad:77:1c:fe:2c:14:6d:21:86:8b:
                    4b:8f:3e:20:89:54:fc:f4:4e:f9:77:a9:2c:d2:c3:
                    90:c2:2d:a4:db:d7:44:36:be:11:dd:3b:c3:55:e5:
                    6f:f6:23:04:c0:f6:95:56:9c:a8:0e:28:8b:8c:93:
                    04:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0D:90:18:07:F7:55:C9:69:42:ED:15:5C:CB:51:4B:70:31:2C:AF
            X509v3 Authority Key Identifier:
                keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:36:63:8d:48:c0:78:20:90:14:58:4a:dc:0f:dc:09:5d:6e:
         b4:ff:bd:da:6a:80:63:c0:26:60:f4:3b:42:db:db:50:9f:d2:
         89:ab:65:cc:c2:b7:f9:26:31:20:e6:b2:da:d7:d8:2c:66:bd:
         be:f3:c9:3b:83:16:f9:f8:64:d6:d5:bf:4e:0a:06:94:68:77:
         cd:96:af:a4:4f:c5:f4:83:30:04:0a:af:88:a8:7d:cb:2b:80:
         09:d2:3e:14:68:87:22:5c:6c:3b:ea:ee:6d:37:97:8e:30:9c:
         44:1a:97:e7:15:bd:00:5c:eb:b6:cd:23:cb:47:96:93:65:39:
         12:f2:39:20:6e:42:c3:3b:84:ee:9c:31:a3:b9:e8:5f:0b:be:
         d2:62:5d:b5:0d:8c:87:77:ed:a9:61:af:18:7d:70:1f:22:ed:
         e6:5c:28:22:d8:2e:bd:c1:b0:00:05:2e:16:d5:f9:07:f2:93:
         f2:89:83:eb:c6:ea:a1:44:c9:24:31:64:16:a2:04:95:d8:c2:
         3e:b8:74:bb:05:90:d5:1f:91:d3:7e:f0:33:86:26:30:58:a8:
         61:d7:1d:3c:30:9b:ac:c0:3e:08:55:79:26:05:a3:3a:2c:6c:
         e5:e8:ae:cb:1f:30:b7:da:75:75:20:4c:3a:60:be:52:fe:68:
         64:00:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:37:29 2025 by rpki-client