Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
File:                     PowYl2JPV7404PdguX8RCtW12jo.mft (raw, json)
Hash identifier:          egdEihyzysv/rA7/tFl7OWTZYtyo+D2+/f7tEcDSckw=
Subject key identifier:   7A:C9:4D:EF:CF:B9:8E:2F:2B:74:27:6A:D9:14:99:A1:D1:6E:53:37
Authority key identifier: 3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A
Certificate issuer:       /CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
Certificate serial:       0199FBEA8224C17E28A720D1ECED6F8EEC06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 10:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:13 +0000
Files and hashes:         1: OVYlCjQ_Ro8WMpn3BJqI8X0cXxo.roa (hash: H6KoMJLLwg7EnqHTPVQLrBI8uOBDhlfqI6yQtfWr3zo=)
                          2: PowYl2JPV7404PdguX8RCtW12jo.crl (hash: Nz0dcQSmQNuiOUR65Wc7U6g0GvZLhT6c46sJg+Jsoaw=)
                          3: lFNEbA4WXa1kqpPRAFp7E-A0l2E.roa (hash: RLdKaSl14tW7ZrRmULGs2dhO8FMuiohKtUpmaqgzRYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:82:24:c1:7e:28:a7:20:d1:ec:ed:6f:8e:ec:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e8c1897624f57be34e0f760b97f110ad5b5da3a
        Validity
            Not Before: Oct 19 10:01:13 2025 GMT
            Not After : Oct 20 10:01:13 2025 GMT
        Subject: CN=7ac94defcfb98e2f2b74276ad91499a1d16e5337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:62:c6:45:16:74:e6:3c:4e:87:fd:4e:f5:a2:
                    4e:fd:92:d3:a4:24:05:27:5d:df:01:50:3a:f9:35:
                    2a:e6:4a:18:db:0f:fb:ad:34:92:92:c5:c4:52:90:
                    f4:82:ba:52:20:41:45:9b:c4:04:8d:72:32:d7:0a:
                    e3:9c:ad:22:40:97:ef:d2:43:31:ca:d2:d2:3f:52:
                    0b:83:9e:b0:86:e3:12:88:14:3a:05:fb:94:24:dd:
                    85:70:1d:fb:da:00:06:65:83:88:ce:72:89:5e:de:
                    39:6f:de:2f:7e:4f:ff:1a:90:81:be:28:51:43:3c:
                    e9:ff:d9:12:6d:60:98:7c:59:9f:b9:1a:92:ca:43:
                    72:d5:99:52:d8:1b:1d:b4:fa:38:46:29:63:26:75:
                    f6:5d:c4:e7:27:02:14:2c:83:95:e8:88:56:e6:6b:
                    d5:6d:68:1f:31:9f:27:d9:2a:12:81:8e:75:7f:14:
                    2e:73:7e:67:91:1c:ba:c6:6d:09:f5:e2:f7:0c:44:
                    cf:bf:97:03:61:33:e0:27:2c:5a:eb:78:7c:a6:70:
                    8b:38:7d:6e:a4:f0:f9:1a:68:89:87:dc:0b:81:1d:
                    30:05:a7:21:2c:2c:04:36:1c:21:96:c3:d0:b9:26:
                    30:48:03:93:35:e3:7b:b3:74:b9:2b:15:4c:55:5b:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C9:4D:EF:CF:B9:8E:2F:2B:74:27:6A:D9:14:99:A1:D1:6E:53:37
            X509v3 Authority Key Identifier:
                keyid:3E:8C:18:97:62:4F:57:BE:34:E0:F7:60:B9:7F:11:0A:D5:B5:DA:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PowYl2JPV7404PdguX8RCtW12jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/57ea8d-c680-40a7-8a29-f076a08e6003/1/PowYl2JPV7404PdguX8RCtW12jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:06:d7:e5:ae:14:87:54:c8:76:68:c9:1c:60:d4:13:66:0c:
         92:38:1b:19:00:84:9b:2f:ab:75:64:5c:34:39:4e:b7:e6:13:
         75:a4:4b:e9:ef:8f:f0:05:ae:3f:8f:5d:b7:2a:c9:01:ac:cc:
         1e:70:e1:07:eb:4d:9e:30:26:6d:a3:a1:7b:14:82:e7:d5:d2:
         c4:01:87:04:b4:5c:3b:87:00:fd:80:c7:47:6d:12:9c:ad:eb:
         bc:e4:3e:b2:53:70:da:c4:05:21:2c:0e:7f:ee:37:fd:37:38:
         21:90:96:a7:4e:10:7c:fa:8b:b3:aa:d1:64:19:a0:f2:b3:4c:
         15:01:9b:99:e6:aa:27:ee:7d:30:75:2f:43:b5:40:d3:e5:54:
         ae:0d:55:d8:79:35:4b:aa:6d:6f:4d:0e:de:d6:33:11:c7:87:
         29:8a:c5:d0:70:52:09:43:03:79:ba:e2:7e:48:72:d4:64:3d:
         aa:65:36:a9:b5:48:64:fa:13:29:1c:1e:ff:9f:46:ab:a7:b2:
         a1:58:08:a2:48:22:b2:aa:21:6f:1f:ad:0e:94:e3:32:69:6f:
         cf:0e:4e:9e:fa:a3:97:8f:1c:5d:93:a2:9c:81:47:bc:a7:da:
         55:49:7e:fd:ee:6c:86:4f:75:77:fd:9e:7c:64:19:64:df:a7:
         5c:f0:b0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:36 2025 by rpki-client