Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File:                     SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier:          y5BZ9ltBWaq7FJOWEMRyb/ZY2Y9PKbVtCwZRV8MLxWc=
Subject key identifier:   88:8B:83:26:7D:0D:7D:5D:8B:B8:6F:D9:84:43:19:F3:76:BD:52:E6
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer:       /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial:       0199FB7C8E684B904EE5B24D263A63AD313B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number:          16ED
Signing time:             Sun 19 Oct 2025 08:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:07 +0000
Files and hashes:         1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
                          2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
                          3: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
                          4: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: +hwww3XN4hFbtsovdyGKZ2lBVftmQRT/yz915pdK8Xw=)
                          5: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
                          6: jj0FH0DBvDqihM_PehNtHmRi9os.roa (hash: YyltTND33n/AiLCX9ViD6/mj27hWtc2LPtOCmOwTReA=)
                          7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:8e:68:4b:90:4e:e5:b2:4d:26:3a:63:ad:31:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
        Validity
            Not Before: Oct 19 08:01:07 2025 GMT
            Not After : Oct 20 08:01:07 2025 GMT
        Subject: CN=888b83267d0d7d5d8bb86fd9844319f376bd52e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:47:c0:08:a1:4b:8d:53:96:d4:15:de:8e:
                    3a:d4:fe:07:17:2a:53:6b:dc:31:dc:ce:72:8f:94:
                    11:e1:77:c8:48:c1:ba:52:49:5a:73:e5:c7:f0:d2:
                    84:a3:bc:6a:ad:a9:ea:2b:28:4c:85:de:61:18:20:
                    15:9a:43:2b:e5:5f:65:23:7b:43:df:ba:d7:74:c5:
                    ac:a6:18:33:39:84:22:c3:92:c1:a1:60:c9:e2:39:
                    8c:91:ce:04:fa:75:43:c5:40:92:5e:7e:11:3e:40:
                    b8:0b:64:df:02:45:b6:bc:c0:a7:aa:77:47:10:2f:
                    11:1c:a3:85:e2:6f:c1:e9:57:95:fa:1c:14:ba:cb:
                    35:96:dd:8e:86:eb:ba:f4:b9:c6:19:8d:3e:e6:4c:
                    a5:ef:b2:5c:47:9a:53:48:2a:50:88:9b:1e:7a:6d:
                    d4:43:06:f9:f2:a9:8b:9b:6a:6d:e4:b1:38:9d:b9:
                    f0:2e:7f:8c:c0:32:a4:d3:b4:5f:7b:9d:41:e6:a1:
                    b0:dc:5e:f8:72:36:4a:37:b5:f1:5e:14:e2:eb:cd:
                    dc:8c:fc:f1:e2:f7:7e:93:79:e6:ef:68:b0:cb:c4:
                    f4:dd:1b:33:13:b2:f6:e5:e1:e2:f2:96:78:c2:8d:
                    63:c2:47:c6:ee:c4:58:32:2b:2f:b3:d0:f4:7a:11:
                    2a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8B:83:26:7D:0D:7D:5D:8B:B8:6F:D9:84:43:19:F3:76:BD:52:E6
            X509v3 Authority Key Identifier:
                keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0a:aa:97:7a:4f:11:47:9e:1c:14:5a:b0:01:ea:bf:14:24:
         8f:e6:d8:3e:d1:45:17:ef:ae:7c:c6:eb:37:28:36:90:ee:dd:
         51:40:43:51:7e:b4:50:f9:4d:e6:53:b9:dd:16:10:89:98:46:
         f4:4f:84:b2:1c:85:b4:ac:35:4b:bd:fc:ab:fc:b0:75:48:29:
         4f:6a:b2:e1:e1:d4:89:06:1e:2b:14:fd:16:ce:cd:9c:80:c7:
         9c:4e:4d:b6:6e:2c:d3:11:49:8a:37:d2:c8:66:7d:bd:7e:e5:
         20:bf:47:64:56:cf:bd:d0:c0:c5:b9:91:18:37:96:1b:b7:45:
         f4:55:b6:dc:6a:72:2a:c0:4a:74:46:22:b8:67:d7:87:59:76:
         e4:b7:2c:71:41:81:93:f5:89:e7:11:a5:83:76:c7:1b:2d:4c:
         1f:80:98:ab:27:f0:fd:d1:cc:5a:be:5a:33:46:17:ca:86:6e:
         18:6c:dc:dd:a1:59:d2:2d:bf:5e:96:8c:42:8c:6b:50:85:eb:
         42:6e:7a:b7:69:90:8a:3d:0e:63:91:86:50:31:54:73:6e:22:
         01:3b:3e:27:d1:48:0e:cc:3c:2c:ce:80:09:82:05:69:4a:59:
         59:25:fc:03:15:a7:3c:ab:48:06:57:80:2b:f7:d8:e6:99:1d:
         61:a7:bf:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:22 2025 by rpki-client