Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          sToG6w7o/Ynp29qsfUnVbrkKKNUgtEFdEGTCLyDm+Ik=
Subject key identifier:   46:28:21:C3:CD:BA:31:0F:B9:7C:CA:7C:35:D3:15:43:3A:F4:C0:4E
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       0199FAA0F614ABA928E26BE16FD99BCC1F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          16F2
Signing time:             Sun 19 Oct 2025 04:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:16 +0000
Files and hashes:         1: 6t7hlxi8baPpruqlzXZsUXkULUc.roa (hash: veH5rVNwcKXSKi3c08116y54xZT7IKZDtBE2b0Jz3CA=)
                          2: 7aUz8499DPhigJrtymvFDvH_yp8.roa (hash: XTyGxDVpkkql4iOBZC2KvGPinizfN4vZAGbc34EqO8o=)
                          3: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: 56vcmPsO3mMSL+UYD3GBnDAkRN9CQ2tyMNFPzgEvnGo=)
                          4: eYwcDrbCOrfqP-rYaXCht21Elhk.roa (hash: WzOCjqAS7iS6+2PXJkstuDJeHt/haFGrL007cy+fVt4=)
                          5: i3i8lSutN5bZ9tuFtM92GryC3Tg.roa (hash: 5ISoDWe4dlL7knoj3DcxHOeML9tN8TdDsmOzNTKQVvE=)
                          6: jz7r0U5OaA8Q59L6HsVMDy2LM6I.roa (hash: /rl8PmJ+zraPwkfaCv5VsqQ2CSC3ynTwyG8Gqt6YLTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:f6:14:ab:a9:28:e2:6b:e1:6f:d9:9b:cc:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Oct 19 04:01:16 2025 GMT
            Not After : Oct 20 04:01:16 2025 GMT
        Subject: CN=462821c3cdba310fb97cca7c35d315433af4c04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2d:03:6b:31:ec:e3:75:c1:cc:43:7c:2e:cf:
                    c9:52:c4:aa:d0:1a:aa:c7:e5:90:b4:c3:58:ef:e0:
                    b2:56:e7:29:1d:a0:78:f1:16:cf:d0:32:8f:f1:b1:
                    38:1f:f8:9c:db:e8:c4:f0:94:8c:4d:4c:4b:c1:75:
                    31:dd:67:d3:ed:b7:34:3f:d9:55:46:8c:f0:2b:d8:
                    8b:c4:31:eb:cf:07:d2:41:d5:a5:52:e4:bc:af:1c:
                    41:06:1a:6e:4c:b4:fe:d1:54:9d:33:06:9c:6e:12:
                    9d:a1:8d:bd:a4:0d:95:29:9d:66:7f:bf:67:78:71:
                    d7:de:4a:df:31:81:b0:ea:df:3b:95:bb:92:60:b7:
                    60:97:0b:a0:7d:f8:22:24:f4:5f:08:81:a8:cc:b1:
                    f8:66:bf:4a:26:f7:d6:54:d5:be:ae:6c:1d:80:c1:
                    52:1a:bb:36:f9:f8:88:ad:77:86:76:16:5d:d0:8c:
                    64:a3:e8:d6:50:41:78:77:9b:8a:c4:02:77:38:40:
                    47:5b:21:1e:2e:6c:04:02:c7:dd:81:5c:42:ed:1e:
                    d3:e1:46:b9:5e:e3:59:74:56:80:0a:32:8d:d6:20:
                    57:3d:fb:8a:7e:60:73:b9:b6:02:c4:12:73:19:99:
                    be:3e:3d:9f:d8:00:08:14:32:5a:62:48:8e:87:b4:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:28:21:C3:CD:BA:31:0F:B9:7C:CA:7C:35:D3:15:43:3A:F4:C0:4E
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:a0:53:64:51:8f:cc:9e:3d:69:96:3c:a5:55:fb:11:e9:
         99:0e:12:05:7c:ca:cc:e2:5d:b7:9a:19:ae:14:80:a5:c5:9d:
         3c:38:ee:ea:30:42:3f:bd:0b:1d:84:1a:d2:d3:2b:56:7d:cc:
         24:03:30:9a:3c:bc:6c:8e:2c:87:50:00:ad:81:d1:7d:36:56:
         71:51:8f:25:86:ee:d7:e9:0f:e5:c5:dd:43:87:21:40:c1:5c:
         e7:fe:e8:f6:b4:e3:f8:a7:1f:65:a4:99:33:0d:42:04:83:c6:
         bc:86:ba:07:b3:77:2b:59:08:ae:0b:f8:47:97:12:1c:35:0f:
         1d:32:3e:e7:3b:0b:f6:8c:fa:9c:72:3b:30:c3:09:58:6a:22:
         60:e8:b4:ab:ab:5e:98:f3:f6:89:3c:3b:26:f4:49:fb:cc:7c:
         b8:05:2b:0b:81:1f:89:dd:49:ea:b9:de:e6:2d:51:d3:96:e5:
         26:fb:71:a6:21:2d:96:e8:e2:c0:b3:12:22:dd:0c:f6:59:bb:
         f9:2c:5d:5b:b2:3f:6e:95:1f:d2:b9:b0:6c:66:6f:3b:93:06:
         c6:56:d8:84:c8:32:03:4f:02:1a:57:6d:f6:35:e6:57:3f:5d:
         50:06:17:64:c7:cc:19:89:d8:d6:77:19:4a:66:3d:6f:00:60:
         eb:dc:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:17 2025 by rpki-client