Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
File:                     ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft (raw, json)
Hash identifier:          X9cf2w8nGc2qIizdnUJuoUlhWLaQEPkH+zwHxgGaorI=
Subject key identifier:   01:28:C3:2C:1E:32:DA:2B:AE:0A:31:70:E6:BD:F9:CD:84:43:4E:28
Authority key identifier: 79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A
Certificate issuer:       /CN=79bc498edc4189584874b7cb45025ef542481b6a
Certificate serial:       0199FDD9F34FEFA9AA72785F7622BE8EBA64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 19:02:23 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:23 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:23 +0000
Files and hashes:         1: ExFZnWBQn5cqmvM7pWfDaD1X2HY.roa (hash: eH4HREDaejA4whIwpydNeuM6y5JIFXG0KP1gYkkghPQ=)
                          2: ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl (hash: YtjAy5/nNuBao0oWud1WBO6O8Y1A8u6VsRoVo0q7E90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:f3:4f:ef:a9:aa:72:78:5f:76:22:be:8e:ba:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bc498edc4189584874b7cb45025ef542481b6a
        Validity
            Not Before: Oct 19 19:02:23 2025 GMT
            Not After : Oct 20 19:02:23 2025 GMT
        Subject: CN=0128c32c1e32da2bae0a3170e6bdf9cd84434e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:1e:d9:6f:50:22:fd:77:bb:6a:72:a9:f2:
                    91:b2:16:a6:eb:47:82:23:18:4b:eb:59:93:42:36:
                    4e:9c:fd:1e:a9:c1:c0:89:0a:7f:4c:be:d8:af:43:
                    4b:b8:b3:61:eb:ce:92:28:75:ce:29:17:d3:bd:de:
                    be:17:42:3b:6c:9a:99:23:37:5a:b4:41:22:e2:05:
                    12:63:ae:9a:16:97:1c:79:17:78:7f:df:88:02:d5:
                    6b:55:06:7b:d8:cc:bd:e9:3c:64:91:0a:99:6f:d1:
                    f2:af:f8:be:66:80:e6:44:b3:db:39:f2:85:07:e3:
                    e0:1b:5c:aa:f3:7a:ef:fb:c4:23:b4:96:bf:fd:6d:
                    05:a1:87:52:e0:bb:77:cd:e1:a6:f7:28:83:f1:a7:
                    40:e3:8b:07:d1:0a:7c:9a:d5:78:0a:f1:26:bd:38:
                    b0:f4:95:d2:6a:7d:16:5d:23:69:8e:a7:26:48:c8:
                    46:73:94:2d:2b:ea:d6:20:0d:86:19:86:f9:ac:b5:
                    4c:6b:1a:34:e2:2b:88:3f:ce:e0:14:4a:fc:6f:8f:
                    1b:77:18:f9:e2:40:4d:4d:8c:d1:c4:16:99:dd:44:
                    00:5f:a8:ce:0c:79:b3:7b:8f:d7:f9:8d:b9:ee:81:
                    e8:5d:36:03:9b:c4:36:61:51:43:4b:31:16:7b:36:
                    90:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:C3:2C:1E:32:DA:2B:AE:0A:31:70:E6:BD:F9:CD:84:43:4E:28
            X509v3 Authority Key Identifier:
                keyid:79:BC:49:8E:DC:41:89:58:48:74:B7:CB:45:02:5E:F5:42:48:1B:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebxJjtxBiVhIdLfLRQJe9UJIG2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4f784c-d121-417e-bcd2-e3b406c7980e/1/ebxJjtxBiVhIdLfLRQJe9UJIG2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:2a:e1:11:1e:09:28:c0:af:9d:a9:0e:76:14:c1:68:0b:64:
         ec:81:c9:39:10:b0:84:d7:c0:f9:73:e5:05:f2:e6:a7:0e:a5:
         28:fe:41:82:4e:75:18:6b:44:78:6a:ec:a3:34:0a:d4:8e:7e:
         77:67:e5:8f:b8:9f:ec:fb:9c:35:9e:94:0a:49:22:b6:9a:3f:
         e1:43:d2:e3:e5:65:e7:d5:64:e0:21:0d:b2:d4:01:51:8e:dd:
         25:a5:92:83:4c:ba:19:fe:b6:cf:01:44:ae:8f:51:77:a4:19:
         b5:33:55:b3:e9:6b:9e:bd:e6:b7:6a:d8:77:8f:86:35:18:8a:
         c4:ab:54:8f:ad:9f:3a:e9:59:a4:ea:5e:77:40:d5:28:00:ae:
         df:6b:2e:e6:b5:fd:8d:ad:8a:ad:2e:31:04:72:af:f7:b5:00:
         27:3a:5e:29:fd:55:89:d7:05:41:d9:24:33:1e:bb:54:6a:a2:
         d5:19:1f:da:89:e6:6c:05:ff:04:1b:7d:a5:6a:38:25:74:ef:
         93:83:75:aa:09:fa:bd:58:a7:cd:92:d7:d0:96:fd:29:ec:53:
         49:83:7f:67:22:e9:62:ec:bd:72:9c:a8:99:ee:64:8e:f7:43:
         7d:c4:f7:bb:cb:fd:42:b6:7b:97:8e:cf:63:28:19:1f:90:86:
         08:87:9d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:19:05 2025 by rpki-client