Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File:                     FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier:          UPsgdf+swlQYYGuN46QCinLmbpEy1g/2riFMg6K5uqY=
Subject key identifier:   B3:25:CC:2E:13:D0:58:1F:1C:F4:53:05:71:DF:55:49:11:39:66:46
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer:       /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial:       0199244410CC0D1A15577422F6E80AFE47B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number:          0916
Signing time:             Sun 07 Sep 2025 13:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 13:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 13:01:04 +0000
Files and hashes:         1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=)
                          2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: k2QrcMrnq13xhVows9bZdvy1kRByvvDFBrFs5f4LBtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:44:10:cc:0d:1a:15:57:74:22:f6:e8:0a:fe:47:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
        Validity
            Not Before: Sep  7 13:01:04 2025 GMT
            Not After : Sep  8 13:01:04 2025 GMT
        Subject: CN=b325cc2e13d0581f1cf4530571df554911396646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:0c:2a:f3:cf:f6:3a:50:91:c3:fe:91:4c:
                    53:b1:08:76:aa:b6:06:2c:14:eb:68:fe:33:e3:79:
                    bf:18:43:bd:d7:8a:4f:35:8f:8e:d6:e7:74:1b:1b:
                    a2:ed:b5:04:24:a8:1b:44:7d:fd:17:98:34:25:62:
                    e7:87:67:81:cb:fa:07:2c:a5:a2:70:3e:b5:6b:ec:
                    a7:cd:29:04:a7:dd:17:2a:01:00:6d:af:18:9e:d2:
                    e8:f4:8d:5b:1e:80:6e:5b:de:a9:de:e6:f1:2e:61:
                    c1:18:3a:24:c9:72:9d:5a:1f:7b:6a:ea:d1:73:b7:
                    dc:ff:01:3a:51:04:45:5f:3f:d5:dc:45:67:64:01:
                    cf:0c:04:05:01:13:29:27:05:80:b3:22:4e:5f:6a:
                    ba:aa:89:45:5d:d1:07:97:1e:29:4b:67:81:65:a3:
                    f3:ef:b3:48:c6:e9:aa:db:c2:34:f8:a8:fe:d8:f9:
                    30:38:91:5c:5b:4c:33:c4:ef:8d:ea:d8:80:e1:84:
                    28:b7:43:60:f3:ed:9c:fb:82:6b:f5:ab:71:c9:d0:
                    6e:2c:4f:66:4a:a7:a8:6a:b1:11:85:2b:f5:ca:34:
                    10:ae:83:e3:ec:97:b7:54:be:1c:a5:f8:80:b2:0e:
                    92:f9:11:9b:c2:88:7c:2f:ad:90:1f:32:6c:87:c1:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:CC:2E:13:D0:58:1F:1C:F4:53:05:71:DF:55:49:11:39:66:46
            X509v3 Authority Key Identifier:
                keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:ee:26:42:74:2e:26:d5:6b:e4:ef:42:dc:11:91:80:d7:b2:
         a2:9d:4f:d0:38:a0:21:f0:53:89:ae:34:b9:4c:a3:04:42:7b:
         0a:6e:c3:ca:29:70:1a:6f:d3:b1:90:44:a5:87:a3:3c:7c:69:
         46:20:0a:2c:a3:78:c3:4d:02:44:6c:e2:39:a6:1a:6f:cb:f0:
         08:bb:31:fa:48:55:90:25:b0:59:e6:36:c8:84:7d:74:b5:91:
         a1:6d:32:81:12:0f:11:b9:6f:ea:f6:ef:9f:30:d2:b9:9a:9c:
         4a:5f:fb:5e:24:ad:6f:44:85:aa:f5:8b:1a:dc:57:70:6b:e2:
         d8:a3:1a:5f:e6:28:b5:06:28:8f:6c:63:b3:0b:6c:ef:be:86:
         2c:50:f8:0d:57:d0:11:a8:ef:bd:d8:1d:27:b3:f6:b7:a4:12:
         71:c9:0b:7e:01:21:95:01:d9:10:da:94:03:20:48:f9:36:ae:
         6e:af:05:bf:0d:f0:75:f1:d6:99:c4:4a:ed:c8:fa:d3:25:46:
         fc:b2:27:0f:b9:8e:4d:2a:38:bc:17:53:32:6f:1f:19:58:d6:
         a2:37:a1:11:8c:e0:64:95:28:c1:7a:12:6d:a1:84:1a:67:04:
         59:0a:56:31:81:4f:27:65:3b:ad:6f:95:a2:2b:ad:af:d3:8f:
         a9:ff:b1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:37:06 2025 by rpki-client