Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          /tG0AFtPED9ZHXvfnABgOmK55lNtU3JIz4pr6eL0hA0=
Subject key identifier:   A2:D2:E6:3E:64:74:81:C7:A5:D1:33:43:B1:73:E2:DE:0B:A9:0D:BD
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019A70A5290DE82E1F454DA34B03314A891E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          08EC
Signing time:             Tue 11 Nov 2025 02:01:03 +0000
Manifest this update:     Tue 11 Nov 2025 02:01:03 +0000
Manifest next update:     Wed 12 Nov 2025 02:01:03 +0000
Files and hashes:         1: 3UNyKDhAIctkIaiCHfw-i8AjC60.roa (hash: RbaiVZW2VnfBiQ5GEAYbSY+TEp7BHi5lhZORNmt7Iwo=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: bqCYyf340VLM00IrC68i1k96oaGfqXLL3BSQue6r2jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:a5:29:0d:e8:2e:1f:45:4d:a3:4b:03:31:4a:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Nov 11 02:01:03 2025 GMT
            Not After : Nov 12 02:01:03 2025 GMT
        Subject: CN=a2d2e63e647481c7a5d13343b173e2de0ba90dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:1e:05:45:8f:50:5d:c6:93:b0:32:dd:9f:
                    18:ea:3d:71:3f:3e:67:0d:22:64:4f:b6:5a:f4:c5:
                    42:7a:70:0b:75:1f:4c:31:9a:2f:65:c3:6e:a6:18:
                    1c:ce:4c:74:99:62:ac:84:5f:29:b0:88:85:ac:30:
                    f0:fd:86:2e:19:71:94:f0:65:6e:b2:c1:d8:d3:3b:
                    1d:bf:38:06:70:24:02:9e:61:bb:6e:69:bc:e8:e1:
                    2a:92:8e:c8:e8:02:a7:f3:92:e7:a4:d7:b3:af:ea:
                    06:8a:c1:aa:59:5e:6c:12:b0:9c:d7:49:35:0b:c3:
                    6e:c6:d4:f8:62:c9:f5:fc:2a:c1:ad:ba:c9:9a:7a:
                    34:cf:cb:37:63:f6:f8:3b:4f:b2:67:3d:c6:0f:90:
                    ba:2d:91:96:32:97:56:69:b4:3c:be:e2:5f:f0:b5:
                    df:0e:c6:e2:b9:a8:6f:d1:85:a7:22:5c:aa:b8:c8:
                    54:44:8a:db:dc:a5:cf:7a:4a:9a:f5:7a:ed:c9:82:
                    25:d4:81:03:60:31:a6:26:12:b6:f2:98:fc:ec:5a:
                    90:eb:bc:ce:0d:15:f6:75:a3:c0:a8:c7:83:78:52:
                    e2:26:9b:80:94:f5:7f:36:33:1b:2b:8c:5b:cf:fc:
                    cb:d9:1d:fd:18:f5:25:e1:e2:f5:40:6d:e4:2a:af:
                    b5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D2:E6:3E:64:74:81:C7:A5:D1:33:43:B1:73:E2:DE:0B:A9:0D:BD
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d1:5e:31:b3:b6:5d:e5:d7:8b:79:eb:07:e9:02:d8:c6:73:
         e9:72:57:26:fb:9d:8d:dc:1d:1d:d1:1f:26:ed:35:02:a0:b7:
         51:c6:52:17:9f:a7:9f:3a:39:ba:e0:44:77:55:3f:e3:1e:25:
         e5:f8:9c:b8:b4:d4:a3:bd:56:b1:13:58:a5:69:4c:9a:7b:b6:
         76:d4:a6:bc:27:f5:ba:3f:ac:51:6e:8a:7c:ea:a4:8f:b3:a0:
         39:cf:c9:ad:9f:0c:4b:c7:bb:b9:6e:d9:6e:88:ee:76:df:00:
         b7:a9:b0:26:74:97:f1:92:9b:de:eb:05:6c:81:f5:88:b0:ef:
         3b:aa:44:61:75:2b:91:07:36:47:2c:19:21:19:b2:e5:32:4e:
         6c:a8:d4:54:5a:35:f1:6f:70:ab:e7:53:94:bb:75:b0:5e:23:
         32:5c:68:c8:aa:f9:8e:3c:fb:05:06:28:d5:ef:4e:82:2f:12:
         b0:83:49:44:8e:d2:03:ab:a1:5f:9b:5d:b0:e7:1a:0d:cc:e1:
         eb:53:c7:b5:41:e3:7e:fd:08:8c:52:c5:2e:b4:b1:b9:02:d1:
         2a:1d:a6:a3:25:53:66:09:11:59:b6:b7:47:fa:b3:2d:9f:1f:
         2b:48:55:d8:14:90:ef:b0:25:4c:64:0c:c1:60:3a:79:cc:85:
         05:0b:7c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client