Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File:                     N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier:          QVTIE/KWGHqEYnYwBINAm1M9GUQyHvaQ6gypN4X0g5I=
Subject key identifier:   C5:40:19:30:53:A7:8F:6C:A2:D4:C4:C0:C0:88:84:2A:DE:39:F3:27
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer:       /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial:       0199FCC6874530489A7F2254DF231E5FF150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 14:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:33 +0000
Files and hashes:         1: MstP95zOzuruszF1xnk5WwohZes.roa (hash: Dd3ffiYJWQ1ODq8HBmZJ5uvdbho1vmy4ZZ9l1KbRzqQ=)
                          2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: BV7aBQCsdsE2d0pbNHWnxdFdACaCDGBpwPIhn651pLk=)
                          3: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (hash: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=)
                          4: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (hash: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:87:45:30:48:9a:7f:22:54:df:23:1e:5f:f1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
        Validity
            Not Before: Oct 19 14:01:33 2025 GMT
            Not After : Oct 20 14:01:33 2025 GMT
        Subject: CN=c540193053a78f6ca2d4c4c0c088842ade39f327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:51:12:bb:c6:97:96:c4:f8:15:cc:f5:5d:
                    ae:02:f2:82:fe:1e:b1:b6:1d:f9:b8:48:86:97:06:
                    f0:dc:93:f5:93:d9:4f:f1:04:35:48:5e:59:3e:65:
                    18:dc:c3:d2:41:39:6d:fb:8b:1e:ce:00:dd:69:e1:
                    63:0a:6e:44:27:78:de:3d:72:20:df:ac:c1:38:4e:
                    73:55:d4:24:34:71:39:20:84:94:2e:6f:fd:ce:e8:
                    42:95:db:d0:2a:9a:88:0a:93:b7:ca:34:53:95:1b:
                    7c:7c:b1:13:2e:fe:2b:33:27:3f:d3:1a:85:3d:68:
                    19:15:b8:9b:28:d5:55:00:47:7e:cf:c9:a5:cc:30:
                    7f:2a:38:98:15:a4:55:2b:93:c9:e1:ca:f4:e8:84:
                    1b:6a:d3:10:0e:ba:94:8d:72:ce:e1:0f:b5:ec:0c:
                    3d:c3:1f:95:60:57:70:6a:ad:f7:d1:57:87:ee:16:
                    f6:7b:e4:5c:8d:a5:37:b6:09:0f:9f:b3:81:b7:3f:
                    97:f5:98:f3:47:b1:fe:1b:3e:84:a7:00:e4:ac:c4:
                    a3:77:19:a3:6b:ad:17:02:b3:76:e5:cf:8d:bb:fc:
                    bf:b4:9d:20:9c:c3:8e:a0:4f:c2:ca:13:60:50:4d:
                    fe:ef:8b:d1:91:7a:6b:de:1d:20:5a:de:4a:5c:dc:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:40:19:30:53:A7:8F:6C:A2:D4:C4:C0:C0:88:84:2A:DE:39:F3:27
            X509v3 Authority Key Identifier:
                keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:db:77:0a:a7:1b:7e:50:4a:39:08:74:9f:b3:85:4b:89:3d:
         5d:4c:80:87:2d:e4:56:6d:98:58:15:17:5f:77:ec:ad:52:a0:
         a4:9a:a6:92:b0:90:c2:7b:83:ee:43:c7:59:c1:99:16:5e:42:
         c4:fd:12:85:d0:0a:a9:78:2a:6a:02:a3:dc:9d:93:9e:0f:90:
         bd:29:4f:7d:b9:5c:9b:29:93:14:19:95:3d:eb:3a:91:c6:cb:
         77:50:f2:bf:01:da:aa:b7:3b:e5:be:4d:71:0f:56:44:8b:63:
         f4:3a:a2:f8:48:d4:61:fe:80:3b:70:27:a2:7a:f6:32:52:1b:
         df:12:0f:97:ce:d1:62:aa:ce:d7:39:e1:a4:7e:84:99:61:9c:
         10:81:e6:b8:dd:1d:d0:c6:bd:a5:d0:50:8e:47:6e:7f:83:60:
         53:9a:2b:2d:69:4a:b9:28:f3:43:b3:21:51:8c:40:4f:11:ca:
         c2:8e:00:a4:6e:40:b0:28:30:21:7e:c9:c2:53:c6:69:ff:c2:
         33:67:95:d6:ab:d1:ee:6b:d2:8a:d2:9e:13:8a:4a:31:5b:89:
         44:57:41:33:04:d6:62:92:ea:90:a8:7a:56:e1:a2:68:3b:68:
         47:29:53:33:79:39:a0:4f:26:74:ef:43:61:11:34:6d:96:12:
         2c:8c:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:15 2025 by rpki-client