Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
File:                     FMEnKYgtb8xADSTHoWGR6_ea064.mft (raw, json)
Hash identifier:          MX3utmYjeI/VzJ7yUc+SL3LDUq+I8uLvgERFBhz4jD4=
Subject key identifier:   CF:A6:4E:5E:EB:01:AE:CA:E9:4F:A1:F6:B4:DF:2D:7E:C8:27:7E:FF
Authority key identifier: 14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE
Certificate issuer:       /CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
Certificate serial:       019A2778A733C1FB3AC43457DE2FB027D3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
Manifest number:          1693
Signing time:             Mon 27 Oct 2025 21:00:09 +0000
Manifest this update:     Mon 27 Oct 2025 21:00:09 +0000
Manifest next update:     Tue 28 Oct 2025 21:00:09 +0000
Files and hashes:         1: FMEnKYgtb8xADSTHoWGR6_ea064.crl (hash: XrDthsUZaNsGYXCg165kAFjtb/bmYX390yzxpLm/plY=)
                          2: gTXc09MBtqnmw3GOQ02qrwpMS84.roa (hash: c/faZAzER1FA8lwrLMG8MZsQ5SgoZv9mWu1aAorpMcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 21:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:27:78:a7:33:c1:fb:3a:c4:34:57:de:2f:b0:27:d3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c12729882d6fcc400d24c7a16191ebf79ad3ae
        Validity
            Not Before: Oct 27 21:00:09 2025 GMT
            Not After : Oct 28 21:00:09 2025 GMT
        Subject: CN=cfa64e5eeb01aecae94fa1f6b4df2d7ec8277eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:7e:5b:22:79:ee:74:7a:f2:c9:d7:2d:fe:
                    0d:77:d0:96:7f:bd:ec:ff:04:84:a0:b4:78:a3:5e:
                    80:26:12:5f:f9:44:13:d9:68:76:49:1d:a7:55:6e:
                    e4:99:90:93:44:2d:16:32:2e:39:13:20:93:00:70:
                    a0:72:2a:ec:88:8e:4b:d3:d9:c7:b4:fa:d6:a7:9a:
                    ad:bc:6c:e0:94:04:11:e4:be:9c:1e:ce:5b:5d:a9:
                    fc:8e:15:24:2c:b3:95:fb:6a:b8:93:13:f0:3c:90:
                    2d:de:9e:06:b1:a1:5c:b3:b9:0e:c7:56:92:e0:55:
                    b9:2e:83:f4:be:3a:89:1d:d6:81:a1:d3:b6:fa:04:
                    51:73:33:b3:22:c3:21:5a:6e:ed:df:13:df:42:7c:
                    9a:00:46:ad:2a:6d:71:ad:fd:d9:44:d0:31:40:32:
                    9a:25:2d:67:13:71:89:70:26:19:dd:85:2c:86:75:
                    f1:01:4c:6d:db:ae:7b:1c:82:63:eb:6f:74:a6:d0:
                    47:ed:5f:23:22:96:e7:fe:54:64:a2:6d:a0:3e:7e:
                    98:b3:cc:5c:83:84:fa:bf:f6:2f:bc:ef:af:35:aa:
                    d2:56:46:b3:b3:6c:c8:46:9c:b3:5e:da:65:0b:26:
                    72:63:47:68:e3:68:10:7d:5c:b0:f6:0a:e6:e0:b6:
                    e4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:4E:5E:EB:01:AE:CA:E9:4F:A1:F6:B4:DF:2D:7E:C8:27:7E:FF
            X509v3 Authority Key Identifier:
                keyid:14:C1:27:29:88:2D:6F:CC:40:0D:24:C7:A1:61:91:EB:F7:9A:D3:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMEnKYgtb8xADSTHoWGR6_ea064.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cb3a53-0887-4c2a-9dd2-dd70fd679efb/1/FMEnKYgtb8xADSTHoWGR6_ea064.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:e5:41:07:d8:87:d6:e8:09:97:e8:1b:cd:12:17:6b:fd:
         43:ab:cd:e4:88:8b:7a:52:85:25:f9:b8:d3:ca:1b:8a:e2:a0:
         a2:0b:6e:82:62:60:16:c0:d6:38:e7:38:4c:fb:0b:13:5b:4c:
         7a:83:24:5e:6f:4e:24:e4:1f:96:f6:00:75:38:c6:2a:33:3f:
         f0:24:47:6c:a8:b0:28:a9:35:b7:b9:4e:40:9b:b6:e8:e4:4b:
         69:e0:9c:29:0a:c7:22:0c:56:f9:86:66:5b:cb:b6:9d:72:b0:
         81:02:cc:81:8f:74:30:d3:0b:fa:f7:9a:3c:36:33:97:b3:6b:
         eb:8d:b2:97:34:00:62:34:99:0d:b7:28:b0:62:91:35:8d:9f:
         26:ad:b7:7b:1a:39:b0:b9:90:ad:5f:f6:fd:48:c3:d1:48:39:
         e5:c8:44:1c:79:35:3a:35:90:00:54:93:b4:10:1e:9c:a8:c7:
         e9:6b:01:44:86:04:e3:5d:a0:e3:74:69:9b:f2:bf:7e:19:66:
         e9:86:6a:73:4d:c5:aa:16:ca:22:f3:38:c0:9f:2d:75:fc:76:
         b7:48:82:d6:87:d1:fb:b9:d8:ab:74:80:77:48:e8:8c:99:59:
         ad:b2:0b:51:29:bd:a4:3b:0e:ed:74:28:b5:99:49:b7:e0:cf:
         06:75:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:18:57 2025 by rpki-client