Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          pqU1K8+/VW8R86wPYfY5wmwoVByXDMzzWyNjnoTXhpU=
Subject key identifier:   A3:13:E9:FF:6D:ED:E1:B3:2A:61:60:A3:32:41:59:22:A8:26:91:A0
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       019A4D3D4D3FE418F70666630C807EBFF749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          1020
Signing time:             Tue 04 Nov 2025 05:00:54 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:54 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:54 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: LyCwLtR2qTRcJDMSv/cjc08PtPn7WWtyUMy6dYRPJOI=)
                          2: 5h1ttuT1xe8MQqiFLClQXEEG4xI.roa (hash: K15KK7htu+WW4WVVGCjjbJDrrjHd40ite1VZJn9QCX0=)
                          3: dL6QyTMH147RYvNbATR7wK8mAf8.roa (hash: lSk9mx0oL0nyVdSJ+hGB8xudUQAwa8IcLy2XJ8XP0tY=)
                          4: q1cKMx3v15DpBk7XfHsCbT0Hr0M.roa (hash: kJPl8z55kb+AOqX1mvjlXQAxwXPA4H1QahAgTk9/aUg=)
                          5: rm06Swzk55gS84j69N9wUHADa3g.roa (hash: EamVaUPfEGjAAZCep2zHyRQqfCPogilef0zQIPWb7CQ=)
                          6: zMv4vXM8dPStyIaP6YAH3FrSdFM.roa (hash: VWJ6HSGgCLyVghdMpKY1d9rx6m4eAxvybOUx+qVtZ3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:4d:3f:e4:18:f7:06:66:63:0c:80:7e:bf:f7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: Nov  4 05:00:54 2025 GMT
            Not After : Nov  5 05:00:54 2025 GMT
        Subject: CN=a313e9ff6dede1b32a6160a332415922a82691a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:b0:6d:75:1e:b0:0e:76:9c:05:bf:4f:55:
                    67:73:57:58:72:f5:7d:af:af:dc:cb:56:16:99:90:
                    f7:1c:28:7f:26:c3:cc:65:aa:9b:49:aa:ef:40:a2:
                    7f:c5:fe:c0:6d:85:a9:3a:8b:be:fc:af:68:2d:b9:
                    92:c1:69:5c:3b:ae:a2:f7:13:e1:0c:4d:07:c7:55:
                    8e:c3:e5:3c:71:fc:96:f0:e4:b4:d9:85:c5:4f:07:
                    94:04:84:17:9f:41:0c:87:13:56:ea:bd:22:cb:41:
                    f0:f6:2f:12:9f:d4:bc:b3:46:b7:9e:23:67:58:8c:
                    6f:cb:18:04:2d:33:8e:2e:6a:e9:e4:18:79:d2:09:
                    d3:b2:82:fb:71:ab:29:66:b8:b7:61:1f:79:e4:75:
                    0b:18:cf:92:9a:31:c7:c6:80:ba:b1:9a:69:0b:da:
                    3a:90:ee:4e:b9:80:eb:16:3f:43:7d:ba:b8:ae:12:
                    9e:55:9a:ab:29:26:ea:2b:4f:c6:76:0a:90:28:7e:
                    f5:b0:d7:85:f5:30:bc:10:5c:78:c8:74:48:33:6f:
                    9f:07:e9:cc:9a:47:70:87:c8:ab:01:b2:54:ae:e8:
                    8d:d6:a1:d2:15:cc:5c:22:4b:b1:d1:dd:2e:3b:a1:
                    f5:32:e6:6f:9b:f5:9f:25:7b:a8:85:87:ee:2b:b3:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:13:E9:FF:6D:ED:E1:B3:2A:61:60:A3:32:41:59:22:A8:26:91:A0
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:73:df:f8:be:17:73:40:d5:89:ee:7c:fb:fe:b6:e0:1e:a4:
         9b:8f:39:19:46:8a:ba:1d:0a:5d:47:e2:8c:81:30:a6:87:de:
         bf:f1:dc:82:c4:fd:82:0c:4c:92:83:c6:32:9b:12:e4:57:11:
         33:41:da:84:41:17:9d:1d:4e:bb:ea:81:a2:3a:ff:fd:af:eb:
         7e:4c:22:9b:46:bf:96:e5:65:7f:2b:7e:47:61:c7:8f:6b:03:
         ea:4b:d8:a7:b5:d6:64:a8:ac:eb:ba:f7:4e:e2:96:54:59:80:
         70:22:32:90:ac:71:fb:ab:3a:19:ea:4a:f2:34:78:68:03:d8:
         e3:69:03:8d:65:81:4a:c7:5c:13:a2:17:8b:c4:87:87:6e:4b:
         42:34:06:01:5f:d4:b9:a0:59:02:d0:52:81:69:33:01:c0:91:
         b6:be:b4:4b:9b:cb:0d:4d:c5:19:6b:b4:b9:0c:92:fa:49:f5:
         b5:88:4e:62:5a:a7:3b:5c:3b:30:68:03:49:3a:5c:f1:55:6b:
         6d:27:e1:11:d8:e3:90:17:6e:48:45:47:1b:23:21:19:a1:f1:
         d6:ea:3a:78:97:6b:55:27:e5:c0:e6:26:4c:5e:ab:20:61:8a:
         05:e7:bd:12:5e:c1:98:74:3e:3b:a7:65:d0:5f:71:d7:f9:a2:
         91:20:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:00 2025 by rpki-client