Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
File:                     FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json)
Hash identifier:          dVLiuoxTF0M8HB0VEk9b55N6MPLL0j+1H36Ltqt17SQ=
Subject key identifier:   B4:B9:A4:A7:76:26:05:A7:93:99:17:72:46:65:0C:B9:BA:C1:CB:18
Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0
Certificate issuer:       /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
Certificate serial:       019A4E4FC9D259746115E9712D66FC1CF773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
Manifest number:          06AB
Signing time:             Tue 04 Nov 2025 10:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:43 +0000
Files and hashes:         1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: FMTjyzRE6s6ClG2i4IwrqiS/aB7bZV+nNpPCcAe/1os=)
                          2: RvOaflHrUbGbCGM86DjNMJAz4Rw.roa (hash: 3Nyo7ThzTtGgNw1pACQDePiv05YOigx9XCdhwJe3hKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:c9:d2:59:74:61:15:e9:71:2d:66:fc:1c:f7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
        Validity
            Not Before: Nov  4 10:00:43 2025 GMT
            Not After : Nov  5 10:00:43 2025 GMT
        Subject: CN=b4b9a4a7762605a79399177246650cb9bac1cb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:cb:e5:b1:41:87:e3:ff:84:e2:93:5a:93:
                    05:75:ad:87:3c:d9:cb:5e:4f:98:8c:f1:fe:b6:0d:
                    db:c9:ea:60:77:20:64:23:8b:b1:54:63:55:7a:d1:
                    34:75:32:75:14:5e:a0:d4:5d:7b:7d:a2:40:4c:df:
                    6d:cd:03:52:d3:51:7a:c7:11:1b:b4:3e:72:fe:3e:
                    5d:96:05:c6:22:fb:7a:66:b0:a5:5d:ff:8a:26:f5:
                    47:42:80:22:d3:4d:23:8c:36:a1:c6:92:52:ee:9a:
                    f3:0b:b8:79:6b:83:1c:dd:49:70:ac:fe:0f:5f:23:
                    a4:6c:c7:ac:d9:24:2f:ba:76:1e:3e:65:b7:9f:a3:
                    76:9f:a1:fa:85:f8:b5:9e:79:cf:24:48:8b:58:4b:
                    09:a5:45:14:c5:0f:26:4c:db:79:c7:7f:a5:3c:81:
                    fd:2c:cb:e7:98:82:97:64:fe:13:07:32:24:32:41:
                    69:51:76:54:b2:41:76:94:da:4b:a1:93:7b:3e:5a:
                    f9:24:d8:b1:a4:e1:98:08:94:9c:2d:a5:e0:c8:0b:
                    80:4a:51:fe:bf:f9:09:54:6b:87:3c:b5:2f:71:e7:
                    fa:1d:27:90:f1:21:e7:32:eb:bf:e0:a5:94:33:a5:
                    cc:60:cd:c8:d5:a9:87:c4:e9:55:20:c6:99:0d:13:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B9:A4:A7:76:26:05:A7:93:99:17:72:46:65:0C:B9:BA:C1:CB:18
            X509v3 Authority Key Identifier:
                keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:04:3d:8a:45:e5:64:46:12:d8:c0:37:30:2e:37:a8:64:
         82:05:f6:d1:b7:6f:f8:8d:6e:1d:23:cb:6a:10:47:43:76:f3:
         8d:a9:d7:99:85:39:8e:00:30:bc:54:b0:69:2f:5c:b6:9d:51:
         55:d1:91:b6:7b:f7:f2:b4:fa:2c:7c:ca:02:50:af:ec:45:4a:
         2b:e2:00:04:16:7f:4d:04:04:e7:75:e5:00:50:5e:07:35:4e:
         b8:b0:9b:8d:de:8b:4c:11:c9:4c:98:53:b2:95:c0:9c:46:69:
         b8:a1:1c:79:44:1b:b4:99:bb:bf:0f:11:98:33:e8:ea:e8:54:
         db:67:f0:31:95:9f:de:2f:45:21:48:14:03:39:56:bd:18:14:
         0a:43:c5:5b:a0:61:e9:e2:4d:d4:21:55:e1:ff:21:66:3d:c2:
         01:05:97:70:c3:3f:e9:88:ad:af:7b:5f:82:71:27:65:11:8f:
         b4:2b:9d:f9:7b:0e:70:27:50:91:13:4b:44:c1:e6:68:2a:e3:
         9c:81:98:f6:7e:e0:5d:02:2a:69:aa:2d:9e:6f:d3:73:10:61:
         88:5a:2a:66:d2:41:d0:e4:88:2e:80:09:6d:e7:4e:0c:e9:c4:
         2e:d7:4a:c2:d0:40:8f:e9:6a:dc:ee:d1:1c:fb:4a:0f:4b:20:
         76:29:dd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:24 2025 by rpki-client