Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File:                     F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier:          iSFMYYSTBcwcxcSOy4LWNANFZi4xeGqkFlg0e8AA+0Y=
Subject key identifier:   D9:C0:D6:54:70:D1:A8:32:66:8F:6D:44:48:6F:78:8A:08:0B:B7:F8
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       019A5676B28578DACF7A34E7EAB8F59872BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number:          1723
Signing time:             Thu 06 Nov 2025 00:00:10 +0000
Manifest this update:     Thu 06 Nov 2025 00:00:10 +0000
Manifest next update:     Fri 07 Nov 2025 00:00:10 +0000
Files and hashes:         1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: n4j0jnfWko5M1NpMT6r0qo7DB0NUC9rSCS/jrgCMb1Y=)
                          2: TVFn8SEC2xk2K9kTba56N04TXws.roa (hash: bEjcW9v0b6AFyRx1s5DtJswmBb7q38sD7gnKfblja1c=)
                          3: sT64_r4WthvCyzVyB3E-Psv_afc.roa (hash: JV3KmP839OiGVkSCgS8tVdnI3cJc0KWSQvX/RcZE/68=)
                          4: xSZmjgKKN9mMG3JDQoWyY_2tpzE.roa (hash: J/Ga6J6sfLJW3CEZ/9em1QDzAEf2XIPOwnBQgDlRhhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:56:76:b2:85:78:da:cf:7a:34:e7:ea:b8:f5:98:72:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Nov  6 00:00:10 2025 GMT
            Not After : Nov  7 00:00:10 2025 GMT
        Subject: CN=d9c0d65470d1a832668f6d44486f788a080bb7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:60:92:ac:9b:2b:ad:fd:ae:72:c3:0b:cc:
                    03:f1:3e:b6:11:88:6c:ef:1d:03:58:12:24:27:d0:
                    a7:86:7b:2d:8b:55:5d:bb:dd:f3:e9:4a:05:cb:de:
                    db:fb:a7:58:75:c1:2f:4b:a5:cf:ac:6f:34:8d:b7:
                    21:ae:01:c6:c7:82:c8:d2:73:b4:9c:c4:07:5e:a9:
                    5b:fe:6b:64:5b:dc:2a:00:1a:c9:f0:85:2c:27:7b:
                    21:eb:67:ce:b0:80:b8:51:6f:31:2d:af:f3:91:46:
                    0d:52:37:ad:07:e9:4f:aa:87:0b:34:63:5e:2e:04:
                    f8:17:c4:e5:57:70:67:cd:2b:16:6a:7a:0f:26:1d:
                    9c:ba:59:ec:b4:de:33:f2:ef:7c:11:4f:35:13:a8:
                    90:81:0d:ed:58:91:cf:71:e9:7b:90:ea:c7:6f:d8:
                    39:22:41:74:ba:9d:c5:c4:3a:79:07:81:e6:c5:2c:
                    a1:e6:eb:b1:a6:2f:a3:5d:9d:fb:8f:88:81:34:f3:
                    41:c7:e8:73:b7:47:10:45:5b:bf:79:8a:43:44:fe:
                    05:2d:47:b5:5c:aa:95:41:63:32:97:63:16:aa:53:
                    0c:c0:c8:80:d7:f0:99:5f:13:64:0c:82:a8:5a:14:
                    75:6d:bc:72:3b:25:0a:8c:b2:fd:d8:96:58:a0:5e:
                    a3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:D6:54:70:D1:A8:32:66:8F:6D:44:48:6F:78:8A:08:0B:B7:F8
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d8:c1:79:97:87:25:49:00:26:0c:44:0f:b5:6f:c1:a8:c6:
         72:63:b0:1c:8c:00:16:de:cc:09:56:03:8a:1e:21:c9:14:63:
         01:9a:1f:aa:f1:92:2a:22:f1:5e:b1:a9:9a:2d:8a:59:0f:48:
         49:3f:ec:36:50:72:ed:2c:f0:10:38:67:c1:96:70:ec:3d:c8:
         59:95:f9:4b:9c:22:77:2e:43:95:1e:2d:9d:bc:d6:06:a9:45:
         4e:c3:98:49:e6:67:b2:e6:fa:2f:75:71:98:d2:6f:b7:fb:6b:
         36:1e:5b:da:62:c7:1f:d3:3b:ef:e1:44:54:ec:64:69:d3:e9:
         f2:20:8c:1b:60:6e:ae:ad:86:9b:af:2d:01:ee:63:d2:66:75:
         f1:eb:2f:ac:db:41:06:ff:79:1d:6e:eb:fe:83:3c:72:ef:aa:
         1c:ef:f6:5c:7c:cd:3f:d6:6c:88:85:4f:d5:93:2f:03:22:21:
         1d:91:ec:5a:d5:74:f7:64:be:b5:81:18:13:13:86:f3:fc:ff:
         9f:74:10:60:b4:c9:94:24:36:f2:37:10:aa:8c:f5:54:58:6d:
         58:98:8b:4d:0a:8f:0a:e0:c6:cf:31:17:8a:b4:c9:f5:2e:03:
         de:7f:7e:b9:2d:94:5c:2e:33:3d:73:15:e3:22:f5:be:37:45:
         b1:8d:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:10:51 2025 by rpki-client