Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
File:                     Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json)
Hash identifier:          Q8d0oDgik063ViJtQD+UKmv40FBNWA/YCUqAFEdm2Lc=
Subject key identifier:   4B:1B:09:78:50:D5:9B:52:4D:62:58:0C:91:5F:AF:10:D4:FA:01:41
Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0
Certificate issuer:       /CN=169ea0275c765e17603eb59eef39e2fab5380ef0
Certificate serial:       019A533F9882E2D7AD408ABBBDF580A09A01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
Manifest number:          0B85
Signing time:             Wed 05 Nov 2025 09:01:07 +0000
Manifest this update:     Wed 05 Nov 2025 09:01:07 +0000
Manifest next update:     Thu 06 Nov 2025 09:01:07 +0000
Files and hashes:         1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: +uX1R37aQiKn2K6Id53Z0rp5oi2PMKMwGqLfVMxUgoU=)
                          2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:3f:98:82:e2:d7:ad:40:8a:bb:bd:f5:80:a0:9a:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0
        Validity
            Not Before: Nov  5 09:01:07 2025 GMT
            Not After : Nov  6 09:01:07 2025 GMT
        Subject: CN=4b1b097850d59b524d62580c915faf10d4fa0141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:63:49:4b:f9:25:58:79:ca:36:0d:7d:bf:fe:
                    6c:13:bf:e7:60:d4:db:eb:a7:4b:2c:57:ed:4b:83:
                    4a:65:e9:a6:a3:81:7c:3f:1a:08:7a:08:36:1b:e4:
                    42:3d:63:61:45:22:f2:b1:b3:a1:0e:ac:93:5c:e4:
                    49:2a:62:0e:c6:44:b6:e6:1e:dd:66:90:0b:ea:2b:
                    71:b8:40:13:74:37:34:00:05:be:ec:d1:4b:06:14:
                    1d:82:fa:01:90:12:52:6c:d6:d3:ce:b5:71:d2:24:
                    54:88:17:90:4c:e0:68:a7:ea:15:18:f7:12:ba:da:
                    ee:b8:07:89:01:a5:c6:ee:67:4b:bd:1a:88:ad:54:
                    a8:f2:f1:20:a2:59:23:99:11:53:f7:e4:af:c2:eb:
                    f0:af:13:6a:ba:72:44:18:71:52:d1:f4:b0:b5:77:
                    b2:4b:f8:f0:0c:93:52:a7:82:89:f0:23:92:79:65:
                    bd:ab:c3:aa:fa:59:d1:2c:e8:a5:42:da:9f:25:dc:
                    b8:30:78:3f:08:c5:36:28:96:79:43:20:61:4c:8b:
                    ba:7a:b8:8b:ab:24:77:13:29:a6:63:22:f1:99:9f:
                    34:8c:1d:df:06:de:1d:65:51:23:16:60:b8:d4:7a:
                    67:71:c1:a4:b2:54:99:e9:ac:98:ca:fc:5d:40:dd:
                    6b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:1B:09:78:50:D5:9B:52:4D:62:58:0C:91:5F:AF:10:D4:FA:01:41
            X509v3 Authority Key Identifier:
                keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:e1:89:e5:24:8e:19:6c:7e:ce:43:7c:4d:43:ad:7b:85:
         37:f2:7c:3a:4d:32:10:e2:a8:de:f1:4a:43:f0:67:a1:8e:a5:
         39:88:b6:6d:cf:54:6a:7a:bd:d2:08:2a:91:45:0d:cb:55:c5:
         57:9d:dc:bd:2d:ba:27:57:e3:b9:b1:09:84:36:f1:e7:e1:0f:
         9a:0d:3b:93:10:ac:cf:b8:46:1d:1f:da:e0:c5:ad:1a:d0:21:
         77:de:da:e5:23:77:50:f8:f4:c4:c2:a4:bc:7b:5c:aa:53:0e:
         46:6a:e2:6c:62:e0:e1:09:77:7f:c9:5b:6b:ef:ab:3d:0f:55:
         31:7e:ce:28:5b:08:5e:bf:6d:a9:3b:9f:d6:66:55:5e:fc:35:
         8f:da:b0:93:d8:1b:76:b0:3f:f5:44:43:bf:e9:30:ac:bb:c7:
         c8:15:f7:ee:73:33:1b:9b:3e:66:0d:28:0f:8e:d3:8b:d4:ee:
         70:68:f4:72:9d:a5:95:6f:75:3a:27:ab:21:e7:90:ef:66:f0:
         48:94:95:0d:38:05:7b:b4:26:05:ba:c6:29:06:92:15:e5:75:
         b8:7a:12:85:0d:16:89:91:40:de:83:2f:84:8c:f5:b2:f4:48:
         86:37:59:39:35:10:e7:bf:76:1d:c2:2d:69:ad:93:cc:b0:d6:
         06:40:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:29 2025 by rpki-client