Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
File:                     fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json)
Hash identifier:          01goEDNdsmeHhbBcwEm49PCrRhKyQAvmGTKEIg6LtNA=
Subject key identifier:   FE:D1:50:37:93:BD:45:9F:1D:EB:3B:22:29:3E:4D:90:2F:27:39:A4
Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05
Certificate issuer:       /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
Certificate serial:       019A236516FBFEEA229C863A30578309D154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
Manifest number:          0A4D
Signing time:             Mon 27 Oct 2025 02:00:18 +0000
Manifest this update:     Mon 27 Oct 2025 02:00:18 +0000
Manifest next update:     Tue 28 Oct 2025 02:00:18 +0000
Files and hashes:         1: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: yiJXTL1XgACaau0sdLBPzcyRWDpnJ5IUZiqcYniy0yc=)
                          2: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (hash: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:65:16:fb:fe:ea:22:9c:86:3a:30:57:83:09:d1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705
        Validity
            Not Before: Oct 27 02:00:18 2025 GMT
            Not After : Oct 28 02:00:18 2025 GMT
        Subject: CN=fed1503793bd459f1deb3b22293e4d902f2739a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:8f:1b:c3:0f:33:18:92:13:bb:a7:8b:1e:
                    e3:b3:b6:24:aa:b6:f4:cb:ba:d3:ef:39:1a:bc:fc:
                    8b:26:e7:b1:24:e6:c8:56:1f:9f:bc:1c:49:c4:84:
                    28:34:0e:e1:d4:f4:e8:b7:de:71:cb:c2:02:4c:4d:
                    54:35:1b:9d:3d:5a:3c:f8:87:a2:0b:29:6e:5a:d4:
                    d0:57:17:df:b7:72:e5:fc:01:da:c5:00:2e:56:3f:
                    d6:90:8a:19:bc:ae:91:32:90:3e:c3:c3:7a:58:78:
                    74:10:db:c8:df:75:9b:d2:fe:0a:ce:77:1d:4c:59:
                    c4:c2:36:ed:e9:30:22:3f:fd:94:2e:75:ef:66:1e:
                    e9:6c:b0:92:1e:d7:53:05:63:b3:a4:4b:c1:29:3a:
                    af:6d:76:f7:6e:8e:d1:c3:9e:1a:39:70:26:43:0d:
                    7e:55:34:f3:e5:05:fc:43:d6:1a:01:0e:da:4f:cd:
                    0d:52:28:15:0b:25:24:60:4e:66:e3:d9:30:6b:25:
                    55:02:81:f0:1c:32:ef:a5:4d:97:5e:d6:77:a8:61:
                    fa:14:38:96:fc:a5:c6:0e:df:3f:6c:44:eb:8d:9d:
                    f1:75:57:08:a7:08:3d:28:b3:d4:de:c2:98:21:f0:
                    71:9d:55:11:b9:a2:83:3a:ed:41:97:9c:7a:87:f0:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:50:37:93:BD:45:9F:1D:EB:3B:22:29:3E:4D:90:2F:27:39:A4
            X509v3 Authority Key Identifier:
                keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7c:56:ce:f4:e2:35:f7:0b:7d:d8:af:0a:5c:21:ef:fb:51:
         c6:20:89:f0:42:d3:18:97:f6:a4:1d:6b:c7:e9:7d:e8:18:6b:
         26:f8:d7:7e:77:23:73:72:81:19:fa:6b:9c:c7:1b:ec:df:c9:
         0d:46:68:df:8e:54:cd:0e:6b:a4:8c:48:bd:85:bb:ad:d4:8b:
         db:0c:e8:f5:99:18:30:4f:a0:60:aa:9d:85:f4:9a:b2:44:99:
         0d:83:74:66:cb:df:45:2e:a0:5a:15:fc:16:e8:2d:c8:d4:fa:
         ef:10:e0:85:08:ba:7f:de:b5:53:83:92:4d:a4:39:b7:df:03:
         a0:e8:2d:9e:89:ff:f2:fe:6c:e6:fe:7b:1d:cb:91:82:16:a5:
         a0:40:c3:bd:cb:69:7f:cf:8f:a7:ef:af:78:f4:9d:63:11:f7:
         2f:57:02:77:37:79:51:0b:b7:97:92:c0:e7:9b:fe:7c:fe:22:
         ea:ee:e1:61:b6:b8:95:02:5f:11:34:67:fb:cc:65:ac:2f:42:
         6c:90:4b:f4:bb:39:84:07:42:1f:d1:ea:5e:55:36:6c:39:25:
         47:13:29:f2:17:6f:02:13:f6:99:da:41:25:6e:87:dc:58:e8:
         48:e4:7e:62:e5:87:2a:be:29:81:cc:17:a0:a9:9e:e4:fb:46:
         d6:d0:2f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:26:51 2025 by rpki-client