Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
File:                     aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json)
Hash identifier:          2rBaEWdFDOjZdYh6CHf7ty2SObQtqshS/pxMGoJFB/0=
Subject key identifier:   FA:AB:EE:B2:DB:7B:83:8F:57:93:64:E3:A5:FF:D9:AE:B8:B8:C6:5F
Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E
Certificate issuer:       /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
Certificate serial:       019A54C01F1C9C57D8D7CF383556C510D73F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
Manifest number:          1710
Signing time:             Wed 05 Nov 2025 16:01:08 +0000
Manifest this update:     Wed 05 Nov 2025 16:01:08 +0000
Manifest next update:     Thu 06 Nov 2025 16:01:08 +0000
Files and hashes:         1: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: tSOKWFJCJCxQbtVXI3N7SZOW5RRvbdW+s40kGn3Zd3s=)
                          2: qnXqSBmvIClWRdSX3rmYASI_2Pc.roa (hash: 2FNK4DlE8j3wOu3WxQxB7a85ZmjXWPid3Sa9pj/6S3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:c0:1f:1c:9c:57:d8:d7:cf:38:35:56:c5:10:d7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e
        Validity
            Not Before: Nov  5 16:01:08 2025 GMT
            Not After : Nov  6 16:01:08 2025 GMT
        Subject: CN=faabeeb2db7b838f579364e3a5ffd9aeb8b8c65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c6:d1:90:af:27:e2:3e:ef:fa:70:2e:18:5c:
                    4a:ca:98:1b:58:47:28:23:6d:58:25:fd:8b:0a:c8:
                    5c:f3:0e:30:88:72:89:85:17:f2:35:41:71:af:90:
                    ce:42:3d:36:5e:d4:7c:45:2c:99:02:ed:20:5c:0d:
                    3a:53:ef:96:0f:cf:e7:e5:75:2c:c5:22:04:2b:75:
                    5d:7b:e2:b1:f4:94:6f:be:78:c6:2b:29:af:49:5d:
                    b2:8b:19:e9:08:bf:8c:06:fe:ee:65:71:31:a3:f8:
                    e7:52:67:1b:6f:43:ab:e0:95:b5:9a:a5:7b:a7:01:
                    0a:2f:95:bb:e3:64:03:a4:77:13:4e:9b:b1:55:55:
                    1c:46:d6:48:53:5c:c9:d3:5d:07:fe:60:8c:fd:9d:
                    ed:e8:a2:8c:e4:f2:e2:dd:4d:df:4b:4d:b4:bf:6f:
                    7a:2d:b1:03:b0:71:02:84:a3:ac:5f:f6:2d:15:b3:
                    88:44:45:3c:ef:82:95:89:92:9d:8b:18:10:a0:4f:
                    43:0d:14:69:94:cf:aa:5d:10:c8:7f:f7:ec:fc:e1:
                    f1:b9:96:5b:aa:da:37:a8:6c:7a:32:a0:ff:bb:31:
                    ea:17:20:34:4a:4d:04:15:9e:1a:58:17:e6:3e:f1:
                    40:73:a9:7d:3a:9a:79:57:92:b5:95:64:74:28:13:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AB:EE:B2:DB:7B:83:8F:57:93:64:E3:A5:FF:D9:AE:B8:B8:C6:5F
            X509v3 Authority Key Identifier:
                keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0f:d0:84:76:b1:61:47:33:63:c5:94:0a:2d:c7:e2:34:a9:
         2b:e9:23:64:ed:47:42:b5:dd:63:13:4e:dd:a0:a6:54:e5:1d:
         dd:0e:cb:c5:b9:0e:3d:b1:51:70:cf:f9:a0:58:5b:00:a9:05:
         f9:2f:dd:57:bf:ac:82:fe:7a:d0:03:4c:ec:c9:c0:79:7f:a1:
         2e:3d:2a:97:05:c2:04:d1:5b:95:63:90:8b:4f:7d:5a:a9:ae:
         82:6a:c1:11:c9:b7:ea:83:67:17:e5:f5:6b:68:97:52:0d:b1:
         40:61:42:ef:a9:0b:28:46:dc:7a:9c:81:c0:de:17:a3:66:16:
         4b:6e:d4:46:2e:35:1f:f9:ff:79:30:9b:22:c1:25:34:4f:af:
         f3:d5:13:61:e5:b3:9d:dd:4e:64:04:aa:8a:5e:07:4f:05:b1:
         35:2b:60:7b:33:91:d3:7e:e5:cb:1e:38:66:84:67:82:b0:45:
         e2:92:37:22:11:4b:84:ad:65:5c:67:1e:5c:0d:cf:28:b3:1c:
         70:5e:7d:60:7f:71:92:30:b4:86:90:ae:15:d8:19:29:21:4f:
         74:10:58:b6:fa:5a:81:06:28:33:4b:c3:78:fc:83:0b:5f:8e:
         ba:fc:04:93:60:1f:98:3e:5e:c8:77:3e:74:17:d3:e9:4d:c4:
         67:ef:64:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:50:36 2025 by rpki-client