Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
File:                     M_6ArqEA6YwNpdH_75izcdEe3aI.mft (raw, json)
Hash identifier:          KBrfDwTq9VA4I7uYd2EbbU2FUs7Uz+ZFkIysv94dAhM=
Subject key identifier:   AD:70:D5:8B:2C:A5:05:5A:4D:8B:19:9F:95:A0:88:A1:11:4E:D8:C6
Authority key identifier: 33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2
Certificate issuer:       /CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
Certificate serial:       0199FB7CD7563062B080FD86ED1ED2EC707F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 08:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:26 +0000
Files and hashes:         1: M_6ArqEA6YwNpdH_75izcdEe3aI.crl (hash: Vx/lysbaXvGPvMZ+B02B7yv0P/vcLNwjvJ8a/maiAJA=)
                          2: azxmi2se1IK95xXGAVKvEPH21_A.roa (hash: Ss+Ca/k8A0fp5KqEjbn4GKd8EzNY8mejKpcvQRG6Wdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:d7:56:30:62:b0:80:fd:86:ed:1e:d2:ec:70:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fe80aea100e98c0da5d1ffef98b371d11edda2
        Validity
            Not Before: Oct 19 08:01:26 2025 GMT
            Not After : Oct 20 08:01:26 2025 GMT
        Subject: CN=ad70d58b2ca5055a4d8b199f95a088a1114ed8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c4:86:26:9a:d1:31:6e:20:a0:d7:e9:17:b9:
                    12:d5:b7:d2:9c:b8:8a:0c:d4:0e:43:7c:0f:a0:1d:
                    20:6e:37:0d:4c:63:61:9d:28:db:ad:1c:8e:c8:b3:
                    7e:3a:7b:88:3b:74:24:56:37:b8:35:ea:41:e5:be:
                    a7:d9:c5:0b:a0:b9:9a:d0:d2:2e:12:9b:92:ec:36:
                    01:d4:e7:6e:22:8f:dc:0e:b6:8e:d0:cb:44:72:94:
                    f4:7b:98:19:f8:7d:55:71:34:46:39:b5:40:6d:9a:
                    f4:7b:20:09:e9:65:0f:78:22:33:8b:75:d4:37:5e:
                    01:f1:82:10:ec:63:30:e1:34:e5:4e:f8:55:1b:c1:
                    ea:19:81:e3:a1:13:9e:cd:48:76:37:e3:eb:23:80:
                    5c:85:c5:39:fb:18:7f:5f:01:e9:8d:55:62:47:67:
                    a0:53:2d:29:ed:8a:3f:d9:3d:4c:59:8c:6d:12:3d:
                    04:1b:a6:38:f1:e2:df:0f:58:25:41:0e:5e:4d:99:
                    a9:33:f6:df:96:e6:c1:f1:92:4e:1e:46:16:e2:32:
                    c2:19:56:67:b5:8f:eb:96:eb:f8:b1:94:5c:08:6c:
                    e5:5a:c9:aa:61:48:0f:a7:2a:05:d0:04:11:01:d3:
                    ea:01:21:f8:df:b2:37:ab:8a:56:09:19:82:97:6b:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:D5:8B:2C:A5:05:5A:4D:8B:19:9F:95:A0:88:A1:11:4E:D8:C6
            X509v3 Authority Key Identifier:
                keyid:33:FE:80:AE:A1:00:E9:8C:0D:A5:D1:FF:EF:98:B3:71:D1:1E:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_6ArqEA6YwNpdH_75izcdEe3aI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/802525-5c2c-4564-ba5a-6cd659acbf07/1/M_6ArqEA6YwNpdH_75izcdEe3aI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:91:42:38:36:90:5c:43:96:a4:46:c8:1d:a0:bf:c1:69:e2:
         cc:29:bb:15:41:aa:54:f6:23:13:b2:11:9c:a8:f6:9b:12:bd:
         17:48:77:7d:1c:9e:aa:f0:2b:21:b5:46:01:85:a4:c3:b2:24:
         de:c7:de:8e:18:46:47:ca:a9:0b:a7:a1:5e:dd:16:c8:c2:da:
         ed:a1:ca:59:8c:7d:d3:27:bc:0f:aa:7e:e4:e2:82:6e:50:5a:
         73:58:64:eb:bd:58:c0:f3:bb:c1:60:7d:ab:f5:5d:22:f4:dc:
         e6:4f:85:40:46:4d:9c:a4:48:23:8d:71:ec:8d:87:05:aa:28:
         52:1a:33:31:49:20:da:4a:7c:a3:76:9f:7b:47:4e:bb:db:ff:
         70:3b:10:6d:14:d4:44:5e:9d:63:2a:20:1d:bb:d8:dc:4f:a8:
         ec:42:8b:fe:aa:4e:7c:45:b0:c6:f1:61:7a:3e:70:c9:24:02:
         2b:f7:82:02:c4:74:97:79:cb:2d:a7:9e:06:7d:d2:f0:bf:55:
         df:2b:56:5a:31:ae:72:e3:91:02:aa:49:e5:57:86:2f:01:e5:
         09:f7:d2:44:f3:15:3b:7d:63:d4:f7:16:0a:38:fd:59:fa:23:
         3c:73:af:22:bd:b2:0a:3a:31:21:18:a9:3a:ce:e2:97:8f:f2:
         d1:d3:99:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:14 2025 by rpki-client