Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
File:                     fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft (raw, json)
Hash identifier:          pEnCUUuU6D869EC9SY/4LjL59fbR+SQ8nPNo39t/Smo=
Subject key identifier:   49:4A:A9:9A:C9:8F:DF:B5:3E:88:CF:44:75:46:E1:AA:D5:5D:9D:B0
Authority key identifier: 7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8
Certificate issuer:       /CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
Certificate serial:       019A239BFE1CC92FD0A5002D5E84B0346F91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
Manifest number:          16FC
Signing time:             Mon 27 Oct 2025 03:00:16 +0000
Manifest this update:     Mon 27 Oct 2025 03:00:16 +0000
Manifest next update:     Tue 28 Oct 2025 03:00:16 +0000
Files and hashes:         1: _YypdYwNnlrSxn7Xk5pVVLuYXRI.roa (hash: UMpoA6QJ7yrchwDrkwz1jDoIaBrnsc3wqSmOPTPFUrQ=)
                          2: fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl (hash: RffXJKcU62lyKQjnmyWx1pIEuzrku8IhpDBAN9OR10M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 03:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:9b:fe:1c:c9:2f:d0:a5:00:2d:5e:84:b0:34:6f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2c0ccf1ffbfcdb8b61d738201301b8791184e8
        Validity
            Not Before: Oct 27 03:00:16 2025 GMT
            Not After : Oct 28 03:00:16 2025 GMT
        Subject: CN=494aa99ac98fdfb53e88cf447546e1aad55d9db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:c1:18:c6:e4:6d:08:0b:74:1e:99:df:a3:
                    91:ad:91:9c:a7:01:c3:db:3a:36:2c:99:6a:e7:c8:
                    0a:a0:82:92:63:74:78:db:1a:ec:eb:68:02:b3:8c:
                    a4:a6:30:1f:aa:a9:b0:e7:59:4d:42:4d:b7:02:76:
                    44:d0:5b:f6:43:30:2f:ee:71:f3:79:a4:8e:e6:cd:
                    8f:c2:bb:db:4c:0e:09:8f:d5:13:e7:ae:ca:9d:8e:
                    e9:87:11:28:18:a3:a8:9a:4a:85:f3:06:d5:51:ca:
                    66:d5:23:f9:51:c8:5e:1b:58:b9:a2:6a:83:af:8d:
                    7d:4f:b3:19:ec:42:28:be:df:1a:d3:05:96:6a:be:
                    eb:2c:02:63:d9:24:a3:8e:71:64:a6:ac:ae:6e:24:
                    86:40:5c:19:dd:e8:ff:30:36:b0:ea:74:8b:16:dc:
                    8f:c4:8a:19:38:cc:01:1e:b8:fa:eb:6f:0b:7a:f4:
                    45:8b:9f:62:22:bb:9f:c0:dd:2d:31:3d:27:1a:a0:
                    36:a3:6e:58:69:fb:75:92:d6:21:78:fd:bc:2b:26:
                    7b:33:98:7d:db:82:c4:dd:63:b4:61:7c:a5:ff:6c:
                    bd:fc:d0:6f:8d:d2:4c:63:81:7f:0c:ce:ad:99:e0:
                    c5:4f:27:da:ca:fb:28:04:df:57:e1:7e:4c:5b:f8:
                    b3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4A:A9:9A:C9:8F:DF:B5:3E:88:CF:44:75:46:E1:AA:D5:5D:9D:B0
            X509v3 Authority Key Identifier:
                keyid:7E:2C:0C:CF:1F:FB:FC:DB:8B:61:D7:38:20:13:01:B8:79:11:84:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiwMzx_7_NuLYdc4IBMBuHkRhOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cdf2d7-b11e-47b2-9fc9-79091c78ab48/1/fiwMzx_7_NuLYdc4IBMBuHkRhOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cf:b1:12:a4:dd:28:32:4a:9f:db:7f:1b:39:be:5c:4b:99:
         92:fa:c1:e0:3e:c9:67:b4:39:e9:fd:c5:d5:d5:0a:60:73:b5:
         88:7b:30:70:11:c3:a7:52:aa:cb:e6:b8:99:fd:bc:28:c7:14:
         8d:06:ba:20:8a:8f:eb:5f:a2:69:b9:fd:4e:c6:8b:4c:c5:56:
         c3:a9:8a:e8:e8:18:13:8c:a0:34:22:42:03:d8:e6:8b:5a:51:
         34:1c:4c:1e:d9:0c:97:5a:79:67:8c:34:23:71:7f:67:55:05:
         cd:e7:e5:f9:2b:48:3b:36:25:b6:84:2a:9a:ee:95:8c:50:d8:
         2f:4b:78:33:21:3e:a8:9e:f3:75:ae:51:1e:00:39:38:8f:92:
         1b:d4:6f:70:e4:bd:4e:ad:cf:1b:3f:f4:0c:1f:2f:36:e7:e9:
         34:fd:d3:56:cb:f7:fb:a3:fe:a8:69:b0:0b:94:16:04:a9:9d:
         2b:70:6b:a2:54:bc:db:08:76:a2:35:bc:7c:bf:4f:0a:33:62:
         4c:c6:77:ec:fa:7c:93:30:7e:7f:cf:6f:8c:18:19:9e:43:42:
         a5:d6:78:ec:7d:44:25:c9:29:46:ca:bd:6b:12:63:2f:71:08:
         1c:d8:79:cc:68:74:b4:8f:63:ee:25:ac:26:93:b9:2a:3e:4b:
         38:ac:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:50:43 2025 by rpki-client