Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
File:                     Lg4zjXPnWEaEVmMvW8quB68NhzE.mft (raw, json)
Hash identifier:          EmU+X06LSEu7T/E6Y0IPcsZI4/dWoJici5Z2RTtRjx4=
Subject key identifier:   AD:55:36:2C:4D:BA:1C:C5:0D:18:84:CC:F4:5D:AC:15:E8:E6:1B:F9
Authority key identifier: 2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31
Certificate issuer:       /CN=2e0e338d73e758468456632f5bcaae07af0d8731
Certificate serial:       0199FBEBEA4A7C9A8A1ED844A8C4A3CD5800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
Manifest number:          16A4
Signing time:             Sun 19 Oct 2025 10:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:46 +0000
Files and hashes:         1: Lg4zjXPnWEaEVmMvW8quB68NhzE.crl (hash: J8QlNNqSYLuNF208pr7dklRjS3jqVEbsx4MuIeYwyKI=)
                          2: zikRvY768723iyo08jZe02hR3F0.roa (hash: M9gppb+fjlRMhi68GyyEsDrKEHbWqY+OImTK0xt739Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:ea:4a:7c:9a:8a:1e:d8:44:a8:c4:a3:cd:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e0e338d73e758468456632f5bcaae07af0d8731
        Validity
            Not Before: Oct 19 10:02:46 2025 GMT
            Not After : Oct 20 10:02:46 2025 GMT
        Subject: CN=ad55362c4dba1cc50d1884ccf45dac15e8e61bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f0:f3:b8:83:6e:82:7e:a1:36:aa:e3:20:05:
                    45:77:2a:a1:11:63:79:46:c8:91:ec:00:3b:a1:af:
                    ba:a4:3e:19:a7:29:19:cd:3d:eb:a7:6f:a3:57:46:
                    4b:8b:7f:71:82:de:9d:a4:b6:c1:85:60:57:ce:a0:
                    1c:c1:c3:ea:77:3e:81:c2:b3:2a:0f:6c:80:e3:a7:
                    00:9b:61:a1:f4:06:da:f6:25:c1:33:ea:36:f7:27:
                    a7:8c:49:62:83:b1:c6:cd:60:de:ea:98:80:a5:a9:
                    76:e1:96:0e:69:f8:1d:71:d5:5b:c1:fb:b8:7a:cb:
                    df:04:e4:2f:f9:92:c4:07:87:e6:c0:4a:c0:3f:24:
                    da:b9:e5:7d:63:ea:81:ab:53:46:2d:21:af:fa:73:
                    36:27:1c:2f:1f:66:3a:05:a7:59:4d:03:26:15:b2:
                    fb:d9:10:17:28:4a:6a:db:19:bf:02:94:4c:ff:53:
                    1c:7c:01:10:b9:43:0f:cb:ac:82:99:b9:0e:15:6c:
                    b7:ec:27:e5:73:cd:1a:b2:4c:f0:70:69:5b:aa:9c:
                    1b:81:db:cc:75:01:1b:11:79:09:6b:1a:41:18:90:
                    91:7f:25:50:38:8b:d0:80:fb:38:8d:8f:9f:92:20:
                    2b:68:ad:66:4e:78:b0:64:32:d6:53:ba:a4:60:d7:
                    06:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:55:36:2C:4D:BA:1C:C5:0D:18:84:CC:F4:5D:AC:15:E8:E6:1B:F9
            X509v3 Authority Key Identifier:
                keyid:2E:0E:33:8D:73:E7:58:46:84:56:63:2F:5B:CA:AE:07:AF:0D:87:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lg4zjXPnWEaEVmMvW8quB68NhzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/811108-e8f7-47af-bc8b-a5b7831a8ce1/1/Lg4zjXPnWEaEVmMvW8quB68NhzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:91:09:ae:aa:83:5d:99:b0:1a:bc:85:e0:22:71:a2:ab:7a:
         40:96:a8:39:1e:8d:8b:9d:6e:dd:2c:12:26:7a:58:f5:83:c0:
         2f:06:b4:80:21:6e:f7:8a:42:5e:a7:37:04:ac:4c:35:c9:4a:
         ff:2e:2a:f1:c8:cd:95:74:e8:c4:5d:c1:4e:48:31:6f:8d:39:
         81:3d:38:05:6e:86:c8:17:5a:bd:db:59:98:83:50:90:13:b9:
         66:80:e4:bd:60:6e:8a:0a:c3:b8:7a:6e:e7:76:07:1d:c1:a9:
         43:28:a4:0c:86:81:cb:4b:e2:14:e0:39:0d:cb:36:9b:45:dc:
         84:89:18:94:1c:45:b8:cd:59:9d:c6:84:ac:75:51:79:0c:11:
         6e:c0:a6:71:13:55:38:96:25:d2:92:27:90:1a:5a:14:80:51:
         cc:41:20:75:15:fe:3a:6a:4f:01:cf:ca:02:5c:a5:8d:f2:e4:
         90:c6:c2:bb:b2:7d:d1:9c:53:82:19:2a:47:97:d3:12:cc:ea:
         2a:15:76:5c:04:da:2b:90:69:64:c6:a3:77:4c:58:81:9d:0d:
         e8:c3:ba:48:32:e0:45:37:da:45:18:37:9b:75:19:eb:86:20:
         06:34:d6:f8:83:19:dd:a2:6d:5c:0c:5d:7b:0c:c6:e2:c7:b3:
         88:a2:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:33 2025 by rpki-client