Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File:                     uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier:          8FzlY6uScSxVd9akP8jFjmdmkI3MUEL1qhFai36GLYQ=
Subject key identifier:   E5:FE:78:6E:43:B9:08:B2:DE:BB:6F:E3:F6:1D:22:EE:47:4D:A3:52
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer:       /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial:       0199FDD9E11F060398B9F987CCF7B0DEBADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 19:02:18 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:18 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:18 +0000
Files and hashes:         1: 1-AcXeTA5R7gYGPtZ3gkf2ipBN2M.roa (hash: syfRSFLN+gZv89g2Ds4rYCyprKu1ku8ZpDXFlN//U/c=)
                          2: Ixqalt-Rml7moJF_qLgPEv_CKDE.roa (hash: 8vHrURSoPUts04KrgFouPfg+sk8VVh+3jNReNV/XClg=)
                          3: LMrTy1U78s34V_By7mkdllSngYk.roa (hash: DnzapAdGCUWUI5N77eZXLv+nB72Npiqq7Jm9ZcIMDUQ=)
                          4: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: tgmsZVRI6yrgLCHpfHKK/9+uCHwf1HWr6R0YExhPJmc=)
                          5: xEUB8ohtFlAsaOyr7vE8oOV2o0c.roa (hash: +nvKnk5IXRqxRWm6Ex+8ay7coqES5SK3vevz1ZhdX74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:e1:1f:06:03:98:b9:f9:87:cc:f7:b0:de:ba:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
        Validity
            Not Before: Oct 19 19:02:18 2025 GMT
            Not After : Oct 20 19:02:18 2025 GMT
        Subject: CN=e5fe786e43b908b2debb6fe3f61d22ee474da352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:22:d5:01:76:0c:c6:4b:a5:a8:a9:9a:df:
                    61:01:c8:08:bd:ed:bb:35:81:21:64:ab:a4:9c:c5:
                    bf:95:0c:a7:15:1d:bc:1a:8d:52:da:6b:50:8e:0c:
                    ab:9c:58:4b:d0:51:a2:2a:62:9d:22:73:6f:92:0b:
                    07:18:8e:51:49:e1:bf:21:83:51:68:4c:de:27:48:
                    0e:03:06:ae:07:d4:35:f3:02:a3:8f:ee:fe:84:03:
                    f4:93:88:5b:81:69:26:11:38:34:ed:de:80:17:35:
                    81:5e:54:6a:b9:2d:45:f5:ca:86:06:72:f5:a5:a5:
                    12:26:da:f8:c4:eb:cc:02:60:be:d6:dd:09:01:69:
                    66:40:16:5b:5b:06:31:a7:8c:b7:f8:41:0d:c8:59:
                    e6:ec:42:6f:41:05:39:19:a6:03:12:3b:19:be:80:
                    be:e1:34:ff:41:50:bd:92:12:90:78:14:20:c3:22:
                    36:89:66:3c:5f:2a:ed:6c:0b:07:d3:b8:53:a5:1b:
                    6b:2e:8d:76:4a:04:71:db:85:04:fe:16:1f:aa:62:
                    6e:74:a3:79:d9:68:ee:94:cc:12:12:6d:7f:9e:2d:
                    1f:8c:a0:26:6a:7d:31:13:db:f4:ff:25:bd:b1:31:
                    18:15:8b:e5:2e:ee:ba:7e:09:64:be:3f:e5:b4:40:
                    b9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:78:6E:43:B9:08:B2:DE:BB:6F:E3:F6:1D:22:EE:47:4D:A3:52
            X509v3 Authority Key Identifier:
                keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:1d:b8:4b:45:7e:a8:33:35:2e:8a:aa:f1:7c:13:90:28:
         f5:68:8d:68:26:ba:36:c7:ab:fc:22:19:bb:ca:96:55:95:3f:
         06:52:96:12:88:6e:fb:ec:9a:bd:d2:18:99:2d:57:c1:3b:43:
         7c:f0:94:51:fe:3e:cf:11:17:73:70:dc:47:ed:37:ca:45:94:
         96:43:7a:80:58:1c:07:d3:f5:5f:84:78:af:b1:88:70:6b:bc:
         c0:2a:7f:d7:29:7f:ed:6d:eb:d1:88:7a:b1:fc:aa:18:4f:6b:
         33:ed:b5:20:64:dc:11:91:ef:04:36:64:8c:ef:36:98:8a:ba:
         d5:85:61:01:bf:3f:b1:ea:01:8b:26:be:b8:7a:96:71:db:25:
         58:8f:70:b1:16:02:4a:ed:cd:04:77:7e:1c:7a:87:ee:91:88:
         cb:f1:c0:64:e6:91:7c:b3:5f:3c:2b:b9:1f:3c:0d:3e:7d:72:
         80:b8:fe:54:9a:28:5c:80:2f:e8:41:4e:93:4b:3f:b2:45:f5:
         cd:68:ed:38:be:23:bf:63:1b:2d:03:72:d0:ce:ab:0b:c4:f2:
         3c:06:a1:a7:c6:ba:8b:11:e9:68:da:e8:75:48:3f:e7:01:30:
         5c:86:41:e6:28:ef:e2:17:03:3f:a4:db:17:62:94:d1:bb:2a:
         05:ed:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:56 2025 by rpki-client