Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          wMPMulYMvyMQWa8ZFIvZua1LS3+UTnCH0MLswu0zRWY=
Subject key identifier:   90:CD:18:5B:B8:A5:03:4A:E2:83:FD:DF:57:3F:AF:9C:4A:E2:28:34
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019A2B8C8C88AC6B43ADC7027C861AD13329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          16FF
Signing time:             Tue 28 Oct 2025 16:00:22 +0000
Manifest this update:     Tue 28 Oct 2025 16:00:22 +0000
Manifest next update:     Wed 29 Oct 2025 16:00:22 +0000
Files and hashes:         1: CbWOEpiwCrppRA8DVC4XzZMGIMo.roa (hash: PCw7t89Xuux83a7nB0OMpGHDzsoTVJA+nWtRPUVTD0g=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: MGRimYP8Eoq6sAho/wvI0ROXCM+QDvd0JTbLBMDROaU=)
                          3: G7aptrRzlRJ8DBRVo4J_IAindWA.roa (hash: /KruVTSwaUIasJgr9QHP+KNfyw0nqXuPE6AH63Tq7a4=)
                          4: b6hTkKbNOfIbaG8yD7-BS_Yj6KI.roa (hash: vo3HwfgLG2dbcNhI9BKjmqquo/hk8biJHEghUjke/Vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2b:8c:8c:88:ac:6b:43:ad:c7:02:7c:86:1a:d1:33:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Oct 28 16:00:22 2025 GMT
            Not After : Oct 29 16:00:22 2025 GMT
        Subject: CN=90cd185bb8a5034ae283fddf573faf9c4ae22834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:f5:62:28:12:4f:86:67:23:9a:b2:02:c0:
                    b4:a7:99:07:a9:f6:0b:17:c7:92:20:41:68:23:31:
                    48:4e:9a:52:e3:f7:80:66:a0:79:81:e0:2d:77:75:
                    79:1f:d6:b2:d0:60:9e:60:fe:f3:28:3a:80:c8:f4:
                    4a:15:7f:20:84:ab:87:1a:b9:3d:bc:cb:5c:d3:c9:
                    aa:cb:c7:6f:99:27:f5:66:c9:89:cd:79:2f:dd:af:
                    01:f3:a5:4b:fd:3c:6f:20:3f:5e:84:61:97:a9:2b:
                    aa:b5:29:46:1f:9a:18:78:33:3b:15:ba:ff:b7:18:
                    3a:ae:58:40:5c:b7:82:c2:09:41:97:54:5b:69:26:
                    60:6f:c8:1d:f0:47:9b:c7:7a:46:50:4a:3d:db:2f:
                    f5:db:27:ff:ec:01:e9:d7:f7:46:d3:13:d0:77:19:
                    4c:e1:6f:88:21:77:75:f5:54:f1:3f:da:18:b1:de:
                    d6:c1:cd:7c:59:15:a9:0d:f4:db:23:7a:f2:fd:62:
                    fd:62:a8:a5:10:e7:5b:96:5c:16:5a:8c:2e:c5:34:
                    ac:23:b3:d0:17:af:e3:ec:a2:f6:e9:57:25:bd:8d:
                    9a:77:1f:04:8e:2a:fd:05:20:a3:5f:05:0f:70:63:
                    fd:c8:1c:e7:48:a0:fe:c8:6d:17:96:bd:ae:09:4a:
                    3c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:CD:18:5B:B8:A5:03:4A:E2:83:FD:DF:57:3F:AF:9C:4A:E2:28:34
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:76:65:a3:90:88:64:01:90:2e:37:31:a7:2c:0d:dd:09:
         a4:2e:99:0f:c6:a3:2a:4b:55:12:c5:7c:26:6c:42:fd:e6:2d:
         70:76:3d:55:1d:f5:a3:1a:ba:0e:53:5a:c9:21:93:76:0e:00:
         34:13:d6:52:0e:dc:20:d5:6b:f6:89:0e:a0:ff:f7:80:d6:64:
         ba:d0:fd:d9:cd:cf:fb:9e:74:a6:2c:4d:b2:82:94:55:7d:4b:
         33:5f:d4:1a:19:e5:22:76:a6:4d:b6:5c:b9:89:85:45:b7:d5:
         60:69:f4:36:f9:c0:30:02:51:73:6c:0f:4d:a3:b8:cb:a8:c2:
         c0:27:c3:d3:76:62:e5:98:ac:50:84:5d:ea:4c:1c:9f:96:26:
         8b:d1:35:53:51:44:2a:52:bc:c6:e5:50:ac:e9:4a:65:41:7e:
         4b:e3:0e:e0:0a:9b:ae:c0:d7:42:14:4a:e1:d2:89:ee:1a:6e:
         8c:29:d4:41:27:5f:da:1c:4b:26:52:3b:0c:49:fa:6a:ce:2d:
         05:62:ff:0d:6f:3d:f4:50:21:41:13:93:c1:16:bf:ad:09:29:
         7b:59:e0:d0:01:2d:4d:fc:6d:c5:0f:7c:5d:d0:c4:71:f4:ba:
         77:1b:56:09:c1:ed:2e:ff:c6:39:5e:8e:06:75:c7:1d:35:79:
         1a:06:3b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:49:36 2025 by rpki-client