Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
File:                     CcUO_hOq31QjsE8N3KizKIOVgj4.mft (raw, json)
Hash identifier:          DAJ25/USsrPecSqzAiXqrY0FJCTjDxZwkczD50OSks8=
Subject key identifier:   77:7F:FE:AE:80:1D:69:15:B8:FC:BE:74:A7:10:18:DA:66:AD:C8:AD
Authority key identifier: 09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E
Certificate issuer:       /CN=09c50efe13aadf5423b04f0ddca8b3288395823e
Certificate serial:       0199FE7DA5A3668CA7FCB0D70525AE3BBE6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 22:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:10 +0000
Files and hashes:         1: 8pbOtoickn4gngDPghS6zzsubu8.roa (hash: 2DV5k3x2c9dOCN9Cru+gCMm0tJjouTk+IFDhMI+k6C0=)
                          2: CcUO_hOq31QjsE8N3KizKIOVgj4.crl (hash: 5exQ2Fj5lQVQ2MAtT8C3E0edEIs0YHWdkVbS1b8pPk4=)
                          3: bQWTWaPJMURhOwMcF82QvoPW9eA.roa (hash: ZBXbwgCoJr1O/tkU4TQtGdf606M6fVdS5KYW5/tfGVU=)
                          4: e4h7xssIbvZ0s7Vw9JjG46tDvZ0.roa (hash: isku2v3Qa+kI0md0IS8QEjqPkTCho6QFnoe7uAw4O+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:a5:a3:66:8c:a7:fc:b0:d7:05:25:ae:3b:be:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c50efe13aadf5423b04f0ddca8b3288395823e
        Validity
            Not Before: Oct 19 22:01:10 2025 GMT
            Not After : Oct 20 22:01:10 2025 GMT
        Subject: CN=777ffeae801d6915b8fcbe74a71018da66adc8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:cc:07:9d:99:d1:ff:98:30:c8:7d:dd:b6:
                    33:2b:1f:89:60:83:8b:2d:9f:c3:d0:d8:c0:85:9e:
                    5c:15:e5:94:67:e0:08:69:f0:0f:95:80:dc:5e:1b:
                    d0:f0:b9:35:e7:e3:26:82:1a:9e:32:0f:b4:aa:7f:
                    ce:c2:d3:de:46:89:4d:4b:dc:08:98:85:63:93:b0:
                    81:a4:34:5a:2c:fe:5f:f4:02:90:10:86:c1:67:14:
                    20:63:b8:75:f9:96:d9:a8:10:89:dc:12:d4:00:12:
                    cc:24:6b:56:50:1f:8c:7d:4a:c5:9f:a4:8a:32:bb:
                    6e:2d:c8:28:72:78:77:b9:81:b9:9e:2d:99:cf:ef:
                    9a:3e:07:6e:c3:bc:b0:45:ce:1b:70:cc:bc:03:23:
                    3f:8e:98:b7:fd:86:6b:8b:e7:17:3b:e5:5c:24:a1:
                    4f:b3:6b:1e:14:88:9f:b9:cf:56:45:7b:b1:c7:b8:
                    8c:cc:bc:4b:67:2d:af:98:10:2c:1a:90:f0:ae:5d:
                    c5:76:95:a7:8e:fc:97:61:6f:d0:2c:1e:fa:40:2f:
                    9c:90:b0:d3:3a:4b:58:47:e3:76:ce:65:1c:ea:c3:
                    4d:17:87:0d:8b:30:58:40:f9:33:31:29:59:5c:2a:
                    98:8e:16:91:97:7c:c6:8e:83:2a:05:06:42:bc:38:
                    71:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7F:FE:AE:80:1D:69:15:B8:FC:BE:74:A7:10:18:DA:66:AD:C8:AD
            X509v3 Authority Key Identifier:
                keyid:09:C5:0E:FE:13:AA:DF:54:23:B0:4F:0D:DC:A8:B3:28:83:95:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcUO_hOq31QjsE8N3KizKIOVgj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/85a208-1ab6-46f7-b1a5-a26d25bc7654/1/CcUO_hOq31QjsE8N3KizKIOVgj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:36:13:9d:24:86:2a:50:12:0d:bd:12:32:ec:f1:89:c9:93:
         f8:1b:50:a1:56:cc:b7:f4:4b:0d:08:d3:e5:5f:5d:93:56:ea:
         e6:b6:81:c5:e0:86:f5:97:32:69:9d:f9:cd:4e:0c:c9:55:c5:
         b3:6a:78:84:46:12:bf:52:06:06:78:0c:13:1a:5b:ba:40:20:
         ab:2b:cc:11:7a:3c:c4:75:bd:3e:ca:e5:23:c9:38:cd:3a:73:
         b4:f9:97:37:b5:eb:b4:53:83:79:23:ea:21:b2:a8:5d:95:d7:
         36:d0:79:9f:86:03:e5:a1:2a:d8:13:ac:b9:19:a0:f9:b7:3d:
         60:b9:ca:17:81:d9:19:cf:2b:57:da:5c:5b:6a:f7:50:6b:ee:
         8d:8b:d1:72:b4:97:46:e2:9a:5d:5c:bd:2b:a1:4c:ff:f4:e8:
         f8:80:2f:52:6c:5a:ed:28:10:67:27:10:4a:95:79:37:d1:72:
         09:29:2f:9c:2d:3b:71:dc:49:15:c9:8b:73:bc:04:f1:23:ce:
         ab:90:88:5d:82:4e:47:05:e0:65:3e:f3:b2:05:42:02:7f:88:
         b7:31:51:d2:60:31:6e:93:b7:a0:75:8d:5a:f8:fc:ae:ce:0f:
         b6:01:14:af:9c:25:fc:48:14:16:2f:13:55:f1:44:1b:63:4d:
         79:c1:75:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:10 2025 by rpki-client