Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
File:                     fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json)
Hash identifier:          vBTmkXdFQW6cWHTh/JXCJ8afYUadKfEkjc+Ps7+tKMo=
Subject key identifier:   FE:9E:E3:71:BB:6E:5F:03:16:0B:4A:DF:D2:6B:4D:41:1B:FC:24:DB
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Certificate issuer:       /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial:       019A71131542E4520830FC69FD117CAFC343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
Manifest number:          0A6B
Signing time:             Tue 11 Nov 2025 04:01:07 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:07 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:07 +0000
Files and hashes:         1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=)
                          2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: G02lLe5+j0a3fCnWsXrhP3edBDe0jWs79JBTPqxNlQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:15:42:e4:52:08:30:fc:69:fd:11:7c:af:c3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
        Validity
            Not Before: Nov 11 04:01:07 2025 GMT
            Not After : Nov 12 04:01:07 2025 GMT
        Subject: CN=fe9ee371bb6e5f03160b4adfd26b4d411bfc24db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e0:6b:d1:e1:44:ac:d4:c3:70:b1:ea:f5:ae:
                    22:fd:1e:3f:27:cd:50:f4:c5:97:06:68:91:3c:8d:
                    18:12:8e:3b:b4:d5:81:16:e9:77:ca:3d:3d:17:30:
                    a8:3f:56:e1:8e:f2:e7:40:6b:6e:1a:d9:f2:14:0c:
                    11:f3:f7:89:22:22:2f:d7:fc:c4:a9:e5:2c:d1:59:
                    3d:9d:92:d6:cf:5c:5c:31:ee:7d:9b:87:f8:72:b6:
                    51:15:a8:d6:0c:af:f4:6a:3a:83:ae:14:c2:cd:ca:
                    e4:bf:f9:f3:8e:43:88:12:c9:b0:93:c3:c9:4a:9e:
                    6f:ee:9c:0c:d9:d6:c5:08:fb:44:f0:4c:be:c3:22:
                    0d:51:9a:08:3e:36:d8:88:d8:fa:c5:f2:3d:eb:ec:
                    b3:cf:9c:33:4d:10:6c:42:0d:5d:a6:5a:43:de:34:
                    6f:56:7a:1c:c2:c7:fc:98:5b:80:18:31:9c:48:7d:
                    79:29:56:80:82:33:c1:06:b2:7b:f0:5b:6f:f3:bb:
                    13:14:0b:03:6e:08:6e:e7:c9:ef:68:0d:2a:12:c1:
                    c5:9d:1d:f2:d0:a7:19:0f:88:a0:72:5c:aa:06:fd:
                    c6:8d:42:97:b5:0a:9f:91:93:f3:ae:d1:f1:34:6a:
                    8e:5d:c5:3e:03:dd:7e:62:14:40:e6:27:2a:d4:c4:
                    d4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9E:E3:71:BB:6E:5F:03:16:0B:4A:DF:D2:6B:4D:41:1B:FC:24:DB
            X509v3 Authority Key Identifier:
                keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d8:c3:c9:08:55:6c:92:05:5e:72:9f:1a:e9:a6:ef:b9:fb:
         0b:ad:9f:b2:23:00:b4:d2:dc:08:30:04:68:59:f8:99:73:00:
         f8:5d:4c:11:b9:19:f1:49:f8:c6:06:a4:22:5b:4d:07:32:96:
         5b:11:ca:81:87:13:72:7e:c1:b4:8f:f5:32:2f:bf:c4:70:2c:
         83:7a:f4:65:53:d7:0e:22:1d:e2:b5:7e:76:60:df:88:ee:48:
         15:65:6d:d2:48:78:f8:4d:aa:c4:0d:b5:ce:c6:f7:6e:54:7d:
         00:ce:ee:c3:0c:4b:77:70:5e:0c:19:34:90:b6:66:5b:8d:61:
         fa:c9:e4:25:a1:f4:c3:8f:63:2b:67:26:0b:ff:e0:b8:31:10:
         cc:fc:3b:d8:8a:ca:91:32:08:8e:47:1f:79:3a:00:1d:98:fe:
         71:2e:8e:d5:d6:49:b5:da:3b:47:50:b1:ba:09:01:ed:54:8b:
         15:c9:b0:39:c1:4b:94:bc:ce:53:96:cf:55:16:16:c0:39:e4:
         42:2c:28:c5:1d:a8:a2:7c:52:1e:21:b4:ac:e3:95:97:3a:9c:
         bf:91:cb:32:c5:20:74:8b:29:8b:a5:00:1f:95:79:11:a5:ce:
         39:cb:22:20:6a:c1:dd:18:22:53:30:e6:13:5c:c7:51:b9:be:
         21:bf:68:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:54 2025 by rpki-client