Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
File:                     3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft (raw, json)
Hash identifier:          ajkRxDjOx4Ne2JuBXieiflMFK5Eb+Jrc2zKwFeoFsJE=
Subject key identifier:   43:36:BB:C2:A4:9B:5D:85:09:26:F2:2C:2F:0F:8D:D7:FD:E6:F2:E5
Authority key identifier: DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79
Certificate issuer:       /CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
Certificate serial:       0199FDD8CD2CDEC132982F2FA45C4ABD68BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 19:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:07 +0000
Files and hashes:         1: 2MtCsLRfRRVkmWmmR_RgvP_iiYM.roa (hash: HuLQbolqCGZmiUhvPO/wiFvtWi3Okwmgccu/aBpptuc=)
                          2: 3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl (hash: v47IpzNChdYcRzxpPLmZc6LDlNJAQZ4XOsd9qVhnTwg=)
                          3: S87qjShx0Cde64tPkPpF-gZYMZE.roa (hash: KfR58Ep5CQd0S3bEgqtjtqAMWmdjTVJqVmZhBaCwNRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:cd:2c:de:c1:32:98:2f:2f:a4:5c:4a:bd:68:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6516692c6382b3f83dae991fd89dd1b0cef579
        Validity
            Not Before: Oct 19 19:01:07 2025 GMT
            Not After : Oct 20 19:01:07 2025 GMT
        Subject: CN=4336bbc2a49b5d850926f22c2f0f8dd7fde6f2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:81:87:60:ee:04:e8:c7:38:52:40:51:e8:8b:
                    1b:ac:f2:b3:a1:97:14:b4:50:9b:09:56:d6:06:12:
                    bd:1b:51:23:22:33:b1:89:9b:cb:8a:f5:8c:c5:f6:
                    37:fd:97:c6:35:05:82:71:f9:d6:00:d1:a7:f7:85:
                    eb:2e:fc:2d:c5:b2:47:45:67:01:00:56:c4:df:43:
                    9d:fa:48:bc:90:24:dc:5a:a4:b8:6d:a1:11:27:d0:
                    e0:38:71:63:75:6a:4d:19:7b:73:2b:6e:6d:86:1e:
                    f7:98:17:5e:db:32:b5:c8:7a:40:17:69:20:66:ba:
                    ce:a1:59:42:5b:60:b1:75:d1:7e:68:f2:ce:20:5e:
                    94:74:9e:55:b8:03:52:0a:ab:7a:dc:4e:7d:a6:07:
                    6f:9e:ee:aa:7c:75:0b:1c:4d:b8:bb:d9:e3:1b:ec:
                    6d:ca:f5:0d:ad:5e:31:ee:88:b6:d1:ec:cb:80:3b:
                    26:05:a9:63:a6:a8:ce:51:8f:a3:6b:0d:ab:65:ad:
                    21:11:ae:3c:da:63:be:1c:21:8c:9f:7a:97:e0:65:
                    e7:84:dd:2e:69:f8:58:80:6a:09:2c:3d:33:76:b8:
                    cb:eb:a4:01:52:2a:7e:44:75:e3:a2:5c:4a:59:49:
                    d9:94:11:90:f2:bd:a5:2f:97:bb:2f:da:77:b2:4c:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:36:BB:C2:A4:9B:5D:85:09:26:F2:2C:2F:0F:8D:D7:FD:E6:F2:E5
            X509v3 Authority Key Identifier:
                keyid:DC:65:16:69:2C:63:82:B3:F8:3D:AE:99:1F:D8:9D:D1:B0:CE:F5:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/cd9fd3-a3ee-4ec5-8c54-2f383e85ebc0/1/3GUWaSxjgrP4Pa6ZH9id0bDO9Xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:5e:57:56:d1:b3:d1:66:70:06:bf:8c:cd:7e:24:00:ed:71:
         ac:90:f1:ca:0b:9e:c9:ef:36:57:97:8a:b8:72:bc:1f:e3:5b:
         8b:d0:2c:ae:e0:63:47:25:ea:1c:81:d2:1b:de:2d:4a:68:f3:
         23:58:0e:ea:36:24:ee:92:1a:e2:1e:52:b4:da:98:77:f8:1d:
         e6:53:93:26:a1:36:18:d1:1f:aa:17:55:7e:ad:e8:d4:62:63:
         58:16:a2:a0:49:59:6d:4f:bb:38:c9:64:2e:98:9a:7c:57:8b:
         bf:f8:0c:d3:4d:56:bd:bf:a8:20:16:f1:bd:e4:5f:45:26:88:
         6c:ca:0c:aa:25:a8:04:42:a8:09:b7:88:93:74:5c:84:1b:57:
         cf:8e:8e:65:98:42:30:16:ed:4e:17:97:64:c5:25:73:78:1e:
         a9:f1:4e:95:b1:3f:a0:57:08:82:33:53:cf:66:73:f0:19:53:
         54:db:b5:18:b5:5f:ea:1a:d9:a1:3d:c2:5d:46:3d:59:4e:37:
         55:6c:de:69:df:d9:9b:b5:1a:af:ad:51:8d:85:cb:ea:5c:56:
         46:5f:17:4c:c1:df:b8:bf:78:a5:bb:1d:a0:3e:c0:23:b4:36:
         63:07:19:02:16:a7:9d:f0:65:f4:0d:f7:14:49:a7:65:00:a7:
         e2:c4:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:18:38 2025 by rpki-client