Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
File:                     sTCZw4tkd6aMmAGf9uAECAgHi5A.mft (raw, json)
Hash identifier:          hv6AEoeW2nHTlZvT4XfjMlKMCvIgWMs7Zq1SxnxbpFU=
Subject key identifier:   AE:CC:F0:1C:47:A9:5C:2E:34:3A:BA:79:8D:31:08:48:03:BC:89:37
Authority key identifier: B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90
Certificate issuer:       /CN=b13099c38b6477a68c98019ff6e0040808078b90
Certificate serial:       0199FBEB84C9B8A10EE7DB6B47DAAE9620E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 10:02:20 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:20 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:20 +0000
Files and hashes:         1: gF7OF-sH3XFh2hq8KjpdxJgt63g.roa (hash: EpA0qsYa3m/WYOamet70LyZkiEfTFAk3SQEWKz+UC8w=)
                          2: sTCZw4tkd6aMmAGf9uAECAgHi5A.crl (hash: kNalzJ6OPrUUw4ThxdEAC2NmBg+x1Gw6dOmnvmMBT0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:84:c9:b8:a1:0e:e7:db:6b:47:da:ae:96:20:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b13099c38b6477a68c98019ff6e0040808078b90
        Validity
            Not Before: Oct 19 10:02:20 2025 GMT
            Not After : Oct 20 10:02:20 2025 GMT
        Subject: CN=aeccf01c47a95c2e343aba798d31084803bc8937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:61:e5:40:a8:e4:d0:34:a7:a9:6f:61:ac:
                    64:26:a5:3b:3f:32:e2:15:51:d5:98:f8:ab:80:f2:
                    ee:3b:cd:3d:d6:48:26:31:10:67:d2:42:71:a6:bb:
                    a9:79:4d:3b:0c:15:b8:50:c0:4c:de:d8:9b:14:20:
                    54:a5:9e:39:33:00:2c:61:72:7d:af:1a:dc:a0:7a:
                    7b:52:f5:ad:c3:9a:d4:16:5f:88:6b:dd:bd:c4:ad:
                    19:c3:db:e2:e3:62:dd:c2:9a:87:f5:f9:07:17:e8:
                    46:ec:e8:3d:7c:34:0e:2d:3d:d8:be:0f:8e:58:a9:
                    4a:72:dc:74:61:1f:5e:8b:69:cc:c2:bf:c7:e3:77:
                    b0:b7:af:44:75:9a:78:de:6d:a4:bb:79:fc:77:fd:
                    6d:ab:ce:75:17:8f:77:5d:43:94:7b:b2:95:9e:05:
                    43:38:94:3c:2a:eb:47:bd:36:a4:35:43:73:7a:d3:
                    47:e9:3a:7e:8b:d8:f0:cc:e9:ff:ea:02:29:df:36:
                    81:36:cb:c6:7f:a5:74:3c:c4:cc:b2:f3:27:26:c3:
                    d3:99:37:c9:aa:bd:7d:38:61:52:46:ac:ad:c4:04:
                    04:c2:a8:22:a2:4c:10:f2:63:dd:27:73:76:82:10:
                    92:9a:5b:ea:54:8b:e9:7e:63:a2:b8:fc:38:50:2a:
                    9f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CC:F0:1C:47:A9:5C:2E:34:3A:BA:79:8D:31:08:48:03:BC:89:37
            X509v3 Authority Key Identifier:
                keyid:B1:30:99:C3:8B:64:77:A6:8C:98:01:9F:F6:E0:04:08:08:07:8B:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTCZw4tkd6aMmAGf9uAECAgHi5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/592cf0-03df-4886-b061-284f7c9622b5/1/sTCZw4tkd6aMmAGf9uAECAgHi5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:9b:1b:e0:da:74:ab:7d:7a:ef:05:87:c2:39:d7:60:24:
         e6:0b:a2:ce:e8:be:be:bf:57:d7:42:84:8d:cf:9d:12:51:81:
         16:13:97:53:e0:63:84:76:5d:d9:df:bf:d2:c0:0c:9a:3d:56:
         4a:bc:c1:b8:97:db:c0:50:e7:4a:0c:37:58:91:94:08:ef:1f:
         59:08:73:32:13:83:75:e9:b1:a9:ad:f6:3b:d4:99:4d:19:f4:
         bf:2d:ca:a6:41:d1:ca:f3:a9:de:50:d0:44:12:4a:49:1f:3b:
         50:d4:26:db:36:be:f0:8a:8b:a0:c3:46:92:ae:2c:72:50:2f:
         a7:5d:69:ab:b2:6d:9b:ec:f5:54:d7:be:e4:2a:71:30:8f:b9:
         a5:3d:bb:19:fb:3f:f0:1f:25:30:c7:f9:67:e5:c0:06:52:d1:
         83:32:42:18:d8:85:7c:82:a2:13:b0:b0:b9:85:ac:55:ef:b4:
         95:6a:06:97:e6:5b:e7:82:c3:0d:ab:f6:8f:76:04:f0:52:4b:
         11:31:c1:0c:67:5b:30:18:db:e3:11:a4:cd:82:27:4b:82:6d:
         e1:77:56:ae:8f:ae:09:56:d2:49:58:ea:e7:37:62:6c:ce:ec:
         5e:a8:ad:a7:d3:b9:2d:fc:7a:89:83:92:00:7c:f5:a3:3a:02:
         53:d3:28:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:42 2025 by rpki-client