Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          qLGSSECJBWHYHbHYpXzQi1sJh4h5h6jiDaHIfafOZxc=
Subject key identifier:   AF:06:79:CA:5C:63:6A:FB:D1:FF:B0:BB:A9:2B:1E:09:5D:5F:EF:86
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       0199221EAAC3645DA95A8C5366CE9B8D30E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          0358
Signing time:             Sun 07 Sep 2025 03:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:59 +0000
Files and hashes:         1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: a9BCN2JvLvYUs30LA5TFgEDwMfkEVzNp38QNWN3VGcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:aa:c3:64:5d:a9:5a:8c:53:66:ce:9b:8d:30:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Sep  7 03:00:59 2025 GMT
            Not After : Sep  8 03:00:59 2025 GMT
        Subject: CN=af0679ca5c636afbd1ffb0bba92b1e095d5fef86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f0:dc:8b:7d:d1:f9:71:51:13:ce:2d:0d:5e:
                    32:75:2e:df:16:f3:5d:fa:e4:9d:ac:c1:48:0d:e5:
                    26:d1:92:2b:fe:d5:14:3f:6b:96:b8:3b:15:d6:04:
                    dd:9c:7e:87:71:a4:c0:50:76:22:a3:12:fd:a0:ce:
                    08:60:86:0d:b2:11:05:24:03:35:fc:f8:3f:93:58:
                    3d:8e:a6:0a:c4:49:87:30:62:b8:d6:7e:bd:47:f8:
                    93:24:48:9e:d7:d6:ab:a6:0e:30:2c:4e:25:e0:51:
                    54:36:b8:37:5b:65:83:d7:5c:d7:8c:a7:d6:dd:04:
                    de:28:69:67:f8:d2:03:cc:2f:fb:8e:e0:ca:21:8b:
                    17:06:ab:81:8e:74:de:9d:c0:79:a2:75:d5:bb:fd:
                    b9:3d:ed:d9:73:0d:0d:65:4e:51:64:cd:ad:9f:34:
                    54:e4:a1:03:67:78:27:8e:43:b2:bd:2c:27:04:d5:
                    81:d8:75:6f:8e:96:6a:cf:eb:20:29:92:cc:23:86:
                    01:14:03:e3:05:89:d4:f6:f4:2a:9c:92:61:e3:9e:
                    dc:dc:98:e1:ba:70:84:2b:4b:14:b7:2f:0b:3b:dd:
                    5d:9e:0a:73:f8:c7:6b:a8:ca:0b:a2:c5:77:6d:91:
                    27:ce:36:43:5a:cc:17:0f:b9:36:86:3a:0c:96:b9:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:06:79:CA:5C:63:6A:FB:D1:FF:B0:BB:A9:2B:1E:09:5D:5F:EF:86
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d1:d7:81:b1:63:ad:4e:56:d2:c5:c6:38:c0:1b:6a:22:59:
         de:3b:12:68:65:cf:82:d4:c7:9c:58:5f:8b:4c:ef:f4:0a:32:
         cd:c8:ca:29:55:a6:72:73:69:b5:b4:4b:4f:b5:cf:46:92:9c:
         4d:72:9b:dc:5d:3a:c7:dc:88:27:c2:9f:23:8c:6f:ea:04:99:
         78:37:ea:cf:47:7f:6f:bd:ad:36:99:1d:70:d8:b3:d4:0f:76:
         d7:32:d9:6f:b0:87:b2:06:24:e1:7c:91:04:2a:32:e3:a3:f9:
         b8:33:0f:55:f9:97:3d:67:e2:9e:bf:93:48:60:37:36:3a:a1:
         96:14:dc:34:87:d9:5a:cf:3c:b5:1b:f4:98:42:9d:31:06:ea:
         fa:95:12:ae:0f:e8:73:34:3c:0f:52:c2:8d:3c:b6:6b:12:b5:
         15:3a:7f:49:9f:af:1e:e5:bb:a4:0d:9b:3e:ba:81:70:d2:68:
         8b:85:4b:a9:b9:de:aa:f9:a5:b8:6a:47:7c:3f:60:fc:81:29:
         1b:24:67:3b:58:54:32:f4:f4:a8:85:b0:e4:e4:49:1a:9c:c2:
         aa:4e:04:b7:2b:d7:66:c3:69:32:57:20:30:ea:a9:9b:f5:02:
         73:6a:8f:2d:a3:d5:c1:2a:be:f5:4b:bc:03:72:6f:20:ac:22:
         59:6e:5a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:52 2025 by rpki-client