Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
File:                     MCemMbtnOOtou26mxCTvSn0Uw8s.mft (raw, json)
Hash identifier:          g6kpHnOIG5spggp1nHr/64xcQ3V+if/f7EzlrUAWFYU=
Subject key identifier:   2E:DC:EA:A3:C7:FF:3C:C6:FB:4D:D7:20:BB:4B:0C:F6:CD:60:D0:55
Authority key identifier: 30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB
Certificate issuer:       /CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
Certificate serial:       0199FBEB342ABA8236C60033AF03054EE134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:01:59 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:59 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:59 +0000
Files and hashes:         1: ApyGylUq9XnJnWFVsfj0zntPv2A.roa (hash: J/AU6L4U60tQsws5n8ktoibPaB7afggy7L2/aS0YmuI=)
                          2: GebDZHzgUSVpcN28Yg77a-VI06g.roa (hash: dm+f03y/iSx5h5jyotT9d+cvRSI3pxxJ+UatUa1LFiM=)
                          3: MCemMbtnOOtou26mxCTvSn0Uw8s.crl (hash: PdLxn3F/QZQ3qSkn0lTzfW9Z3R/GtDyKGLNCcEIktgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:34:2a:ba:82:36:c6:00:33:af:03:05:4e:e1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3027a631bb6738eb68bb6ea6c424ef4a7d14c3cb
        Validity
            Not Before: Oct 19 10:01:59 2025 GMT
            Not After : Oct 20 10:01:59 2025 GMT
        Subject: CN=2edceaa3c7ff3cc6fb4dd720bb4b0cf6cd60d055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:75:fa:0b:fc:8d:7b:e5:09:94:13:0b:95:04:
                    cc:7b:eb:32:15:51:84:53:25:f2:74:56:42:b5:4c:
                    40:e1:d6:76:f1:8a:42:49:bc:c6:9e:a3:63:c7:ac:
                    c8:4e:30:f5:77:e5:d2:2a:0b:c0:c9:21:b2:f2:af:
                    4c:ac:ab:d5:8d:f7:85:a6:17:44:2a:5b:52:3c:03:
                    1c:f0:3a:94:83:7f:5a:e1:93:c3:24:05:2a:04:ee:
                    65:e7:c9:6b:56:9f:93:15:d7:97:f2:68:a4:ca:3c:
                    ee:ab:cb:c4:a2:48:61:b6:b2:e6:2e:3b:26:26:4e:
                    fe:b3:7e:69:ad:38:f7:4d:b1:02:d1:e8:85:e9:55:
                    ab:21:ec:59:a4:c5:a5:43:64:02:13:86:5c:c5:36:
                    2e:d5:4d:c0:f3:5f:24:a4:23:7b:6f:39:27:7f:1e:
                    91:a7:82:91:a0:e4:38:51:58:d3:73:b9:72:a1:cf:
                    0b:d9:fb:2a:e0:65:df:15:21:47:14:aa:83:62:3b:
                    9b:52:06:c8:e6:8f:4b:c2:da:6d:b1:4b:a1:cc:b6:
                    9b:79:46:f1:80:cb:c3:02:c1:37:c4:d3:ea:4d:d5:
                    19:74:40:61:97:7c:5f:10:eb:80:76:51:e8:d2:55:
                    b9:63:0e:9b:07:2f:6d:b3:0f:99:09:06:1e:e8:b8:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DC:EA:A3:C7:FF:3C:C6:FB:4D:D7:20:BB:4B:0C:F6:CD:60:D0:55
            X509v3 Authority Key Identifier:
                keyid:30:27:A6:31:BB:67:38:EB:68:BB:6E:A6:C4:24:EF:4A:7D:14:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCemMbtnOOtou26mxCTvSn0Uw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8d78eb-2832-4083-ae1f-1dd6d281c88a/1/MCemMbtnOOtou26mxCTvSn0Uw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:c2:4b:92:b0:86:7a:88:66:2c:50:0a:c2:21:61:a5:3e:66:
         40:13:ea:93:ba:ef:bd:fe:04:d6:d9:e0:1e:26:14:b1:bc:b9:
         e2:f2:3f:34:56:11:03:90:75:4f:4a:3c:68:17:44:c7:a9:ba:
         64:23:7f:3f:f4:3e:b1:d0:41:a3:97:27:29:ef:83:92:15:13:
         de:fb:03:ec:97:e3:d9:11:6e:98:06:6c:5c:7f:c0:f2:46:95:
         31:58:5f:dc:df:58:52:40:d1:f9:42:1c:c4:5d:9e:a6:0e:97:
         70:4a:22:0f:07:64:08:71:dc:c9:39:14:87:7b:54:6c:53:f0:
         9c:89:4e:88:71:a4:91:28:16:03:6b:5a:ba:6f:b8:b8:fc:5e:
         6a:68:1a:9f:5e:20:b3:32:2a:79:97:82:81:e3:20:a9:07:ef:
         a3:42:c8:f1:04:fb:ea:5e:58:62:60:64:81:67:88:20:42:9f:
         0c:75:1c:af:23:e9:77:ed:2c:02:bd:c8:a5:c4:5a:24:e2:59:
         30:3a:f8:5a:a3:59:78:11:cc:1a:db:97:ef:02:73:df:69:3c:
         b3:5d:de:44:59:0c:4c:de:5b:56:7d:0a:e5:ee:e5:22:da:7f:
         d7:56:9c:c8:83:6b:f2:63:02:bf:af:24:1c:cc:99:13:9d:59:
         b7:af:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:28 2025 by rpki-client