Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          YL/bQQ4b34uVlcwQx5WhhoK5PWMxTYApHpmpbpx/eKY=
Subject key identifier:   29:63:BB:C9:7E:3E:69:2B:E7:52:F9:A5:62:BE:E9:88:5F:0A:0E:DD
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       019A2409E855C7ED1C08171BCDFC24590113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          16FE
Signing time:             Mon 27 Oct 2025 05:00:20 +0000
Manifest this update:     Mon 27 Oct 2025 05:00:20 +0000
Manifest next update:     Tue 28 Oct 2025 05:00:20 +0000
Files and hashes:         1: HHlEIHLaS3GMguRjiZVeXZtaB1U.roa (hash: YlDlqGcFKkVbm+bI6++WiC8vTEcJ4i7q+bRlRvHQvDM=)
                          2: JFfXWjIJHVSFeGbySM8n0cwBw74.roa (hash: kgkONWoOOrXSbcj6bdCOVH5+Q3j9I/JtMm/NZI6wPhU=)
                          3: YWh_o51jvYOy_7yJxKWIzC6AjVw.roa (hash: 5h6ADSbcLhyyb1o530CRr7FXSLev1xEONn8X3G0ic1Y=)
                          4: f0wCPyNuTeQIvdOaxmoM9zgS-yA.roa (hash: f/FLhL5iK4w35mAjQuNFPLV5x3iPtqx+dEGqwTvpyc4=)
                          5: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: yRvzTLYT/UKEcmFc/EQG1wnphcis/JSt6vbSUC7k7tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:09:e8:55:c7:ed:1c:08:17:1b:cd:fc:24:59:01:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Oct 27 05:00:20 2025 GMT
            Not After : Oct 28 05:00:20 2025 GMT
        Subject: CN=2963bbc97e3e692be752f9a562bee9885f0a0edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:05:37:bd:12:cf:f7:54:45:89:6f:1a:d0:
                    92:29:d8:5f:ef:f2:57:1b:95:ad:c4:ed:c7:85:2c:
                    8c:ee:a6:e7:13:ee:31:b4:1e:fc:34:1a:a8:d0:0b:
                    6c:3a:99:fe:f5:b9:7e:99:d1:65:7e:a3:48:a5:c7:
                    9d:c6:8d:04:0c:52:51:ab:34:9d:ef:d3:7a:56:ca:
                    6b:43:a5:e8:30:5c:a9:4d:93:f6:f7:53:b9:b6:1a:
                    09:7f:8b:24:b5:f9:34:86:fa:c4:3b:82:2b:d9:5b:
                    3d:39:55:3f:6f:f8:c7:c8:da:d9:f9:ed:a1:f8:67:
                    84:6c:28:92:64:7f:72:08:e3:8e:b8:05:f3:df:d5:
                    ef:21:a1:35:dc:91:f0:8a:e6:fa:7b:be:72:5e:a3:
                    8e:89:2d:be:69:14:83:07:08:68:6a:c2:66:b0:97:
                    8c:0f:f9:d6:e8:33:0e:b6:94:76:1b:82:74:26:28:
                    fd:16:b1:9b:a0:57:ab:3b:d0:da:66:ce:7c:6e:b8:
                    14:0f:53:2f:8b:09:de:b7:cf:8a:92:81:76:b0:a4:
                    40:71:b2:01:b1:d7:8d:5e:1c:67:c9:d4:f2:50:a8:
                    3c:7a:e3:49:d1:ac:bf:e4:e3:e4:39:ae:3d:7a:93:
                    72:a1:8d:58:82:5c:9f:54:0c:43:53:15:d0:b6:ec:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:63:BB:C9:7E:3E:69:2B:E7:52:F9:A5:62:BE:E9:88:5F:0A:0E:DD
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:31:e3:e3:27:02:4c:6b:9e:ac:9f:4c:4e:26:27:5a:4a:cd:
         f8:99:97:ca:23:68:0d:22:ba:65:6a:50:cc:93:6e:90:e3:ef:
         28:27:03:e6:fe:84:d4:03:ef:26:de:66:6e:33:99:74:e2:db:
         90:06:7d:bd:32:b5:65:f1:3c:dd:2f:33:d0:b5:25:20:bb:94:
         1f:0f:35:91:cb:c4:c4:a9:24:28:a8:dc:ff:de:1a:e0:e3:43:
         39:dc:22:ad:af:9b:da:bc:62:fe:93:d4:6e:14:3d:dd:bd:24:
         8a:29:4e:69:da:06:40:b4:fc:d1:1f:1b:e5:da:7e:4b:dc:65:
         77:96:b6:c4:f7:c2:3a:31:74:18:48:f8:b1:e7:4f:07:05:c8:
         13:1b:1d:f8:45:59:a0:30:1a:03:78:a8:8e:dc:2a:6e:b6:e7:
         d2:91:38:c3:4c:4f:65:e8:09:82:86:a7:44:f9:55:64:fc:42:
         58:de:02:2e:34:c4:b4:9d:78:50:d3:37:37:3c:8c:ee:8e:ab:
         5f:21:f9:cf:fc:b7:1d:4a:e0:92:6f:d0:54:c0:36:16:68:22:
         dc:ee:56:c4:88:aa:6b:21:fd:1c:40:6c:9c:a5:86:f2:58:af:
         4a:ae:d2:27:6b:da:d6:52:72:3a:63:45:91:1f:48:ad:4b:98:
         8c:b2:23:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:39 2025 by rpki-client