Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
File:                     _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json)
Hash identifier:          jj+ksheY/pkCr/jYkNMB3O1p1asJAD+jyvwCWocXMFM=
Subject key identifier:   D2:19:C3:7F:28:7A:BE:36:AB:15:E2:71:BA:18:02:B3:41:B7:91:F2
Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91
Certificate issuer:       /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
Certificate serial:       0199FB460BF876AD7AA73268F08E4E7302DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 07:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:35 +0000
Files and hashes:         1: 5o12bWwrOgNj5T2QC_xsDzw2auo.roa (hash: z+dRGRfQAE/aaRQhADQq91xi62QWjaX7M/KM35XckmU=)
                          2: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: ghLdhihT2oXZIm9am+5V6v8HkYsyTl3hCLeZyDkC6Uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:0b:f8:76:ad:7a:a7:32:68:f0:8e:4e:73:02:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91
        Validity
            Not Before: Oct 19 07:01:35 2025 GMT
            Not After : Oct 20 07:01:35 2025 GMT
        Subject: CN=d219c37f287abe36ab15e271ba1802b341b791f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:f1:26:6a:a3:23:69:25:ac:74:b3:fb:11:
                    d0:ca:09:24:1a:1d:b5:25:b5:e7:13:42:b1:85:b8:
                    2d:f4:75:09:09:a9:4d:81:86:68:de:08:c9:5b:d4:
                    03:16:d8:47:aa:5b:f8:99:7d:ea:82:be:72:92:6a:
                    a1:dd:db:01:a2:38:48:4d:1b:77:df:6b:47:01:bd:
                    d1:ec:95:4b:bc:b8:36:1b:f3:a7:e0:2f:e5:c0:13:
                    14:98:29:6d:42:1e:6f:96:64:aa:7b:2a:c9:22:56:
                    24:01:04:d8:ba:48:f7:6d:3e:90:2d:db:fa:f9:fc:
                    77:c1:87:51:6e:c3:85:96:21:5e:64:08:00:25:4b:
                    e5:ba:6f:df:1f:04:0d:04:36:a0:a0:05:e2:96:85:
                    15:80:b4:62:09:ec:f4:f9:8d:2f:c3:0c:c4:be:b4:
                    d4:31:10:53:ca:a7:da:17:33:1a:44:be:5b:69:dd:
                    6b:8e:bf:be:bd:8b:ce:5d:64:0c:cc:3b:5e:e4:34:
                    5e:17:e2:60:11:78:e0:87:92:e3:3a:f9:16:56:53:
                    7c:14:11:96:41:b5:a1:5b:c7:5e:36:cb:4c:43:8c:
                    0b:8c:46:23:60:8f:89:97:11:22:69:a0:78:90:f0:
                    30:35:8a:f0:f6:9d:00:66:9c:57:9b:8f:43:39:78:
                    0e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:19:C3:7F:28:7A:BE:36:AB:15:E2:71:BA:18:02:B3:41:B7:91:F2
            X509v3 Authority Key Identifier:
                keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:f7:bd:86:93:2a:7d:24:17:3b:dc:07:d2:ff:72:1f:22:
         20:4a:e3:0b:f9:d4:bd:a6:50:61:e7:12:d7:a3:ce:4b:ff:84:
         e7:68:35:0a:05:ff:3b:e0:e5:3f:e7:88:b0:89:65:0b:37:6b:
         aa:cf:ca:8b:a3:74:c9:e7:41:b6:d4:5d:b7:74:c0:35:3e:90:
         f2:0f:a7:8f:41:bf:7f:43:e0:99:68:1d:c7:c8:ab:a5:a1:72:
         18:92:76:9e:5d:e5:f4:8b:b5:02:a9:80:ab:70:ed:f7:b6:d8:
         ef:68:80:04:dd:7f:9f:d1:06:78:94:ff:d0:97:e9:f2:62:a0:
         95:f8:52:eb:4f:7e:de:3e:32:82:a8:0d:04:d6:72:2d:ce:50:
         6a:7f:d4:85:9f:8c:90:b8:ac:01:e6:85:a8:fb:0a:86:be:77:
         f6:1d:09:9f:4a:cd:30:5f:4c:11:e5:75:be:3b:b1:4b:17:53:
         43:3a:eb:28:a2:5c:63:f3:30:f4:03:3f:df:a4:cf:64:1b:ce:
         40:36:21:e5:81:f0:ba:65:c9:94:4b:c2:81:85:81:21:ef:f8:
         97:64:ec:fd:6e:53:c1:be:e8:24:62:7b:e3:7e:55:09:5b:ee:
         09:d3:3e:e6:29:4b:33:ab:f6:f4:02:0b:d9:eb:97:bf:5f:c9:
         5a:41:64:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:52 2025 by rpki-client