Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
File:                     Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft (raw, json)
Hash identifier:          Y4+nWHMi856KSgyCuwgvSgGIdTZHz8Q+goFVBSL9UhE=
Subject key identifier:   AA:08:6B:49:1B:CC:3F:4F:73:96:7D:5E:2B:0A:28:44:E3:9F:DC:E6
Authority key identifier: 29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22
Certificate issuer:       /CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
Certificate serial:       0199FFC8B50690F1515FA8210A2DA51D0D49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
Manifest number:          1678
Signing time:             Mon 20 Oct 2025 04:02:47 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:47 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:47 +0000
Files and hashes:         1: 847VWHs-caMwvruiasasUJ9i7yk.roa (hash: cGKjnew3so38YN3EBXzPrvxanAQQogJHwvbCrW4djb4=)
                          2: Cm9tMI3yXmOZgFYnxXLEbKAgtl8.roa (hash: 3SDCzkNnUy1DY9PhPdmuMPgAHQuW7TwXQTd2pQmOgYY=)
                          3: Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl (hash: R3RtPfruSMMlj4FS/lKcFm5yUxP5bD39ifZJP+GNWVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:b5:06:90:f1:51:5f:a8:21:0a:2d:a5:1d:0d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29edf2a4f20ac08235c40180de74ebc3935cfc22
        Validity
            Not Before: Oct 20 04:02:47 2025 GMT
            Not After : Oct 21 04:02:47 2025 GMT
        Subject: CN=aa086b491bcc3f4f73967d5e2b0a2844e39fdce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:67:b9:f8:29:47:7d:67:cc:d6:e7:8e:18:e0:
                    85:1a:08:32:04:16:f2:1f:0a:43:25:48:98:c2:2c:
                    1b:a4:6e:83:62:73:09:21:c3:f4:ec:6f:e3:20:02:
                    b0:50:b5:fd:28:1a:c4:16:99:b5:18:36:12:8e:4c:
                    44:27:a3:6f:31:35:41:80:6a:db:7a:06:eb:aa:56:
                    7c:03:fd:74:b4:3d:7a:e4:1f:f6:e6:17:ab:8c:cf:
                    34:dd:f5:67:5f:59:a4:67:66:f2:a7:5f:70:99:ba:
                    de:c7:26:ef:01:c4:0b:0c:21:8a:24:6d:af:25:a9:
                    81:d2:31:33:23:e0:c6:7d:37:53:1e:cc:e6:8a:a4:
                    27:21:81:ee:c2:66:f2:e4:69:30:2c:4b:c0:14:11:
                    16:72:0c:17:e0:93:96:1a:a6:f7:f4:4b:79:12:86:
                    9f:2e:4b:91:af:c9:21:4b:c5:04:7a:35:0c:9e:97:
                    6e:7f:d7:c0:fd:7e:3f:25:18:50:49:3f:2c:75:fa:
                    5b:e3:46:72:ab:89:ad:d2:0a:09:8e:d8:11:b1:47:
                    0f:c7:54:42:35:2b:df:d4:d9:e0:16:e4:1d:6d:42:
                    8d:7d:d9:08:c9:15:55:28:1a:51:3c:9b:ec:d0:be:
                    98:86:38:5f:a3:12:0b:8f:8d:41:37:33:70:93:8b:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:08:6B:49:1B:CC:3F:4F:73:96:7D:5E:2B:0A:28:44:E3:9F:DC:E6
            X509v3 Authority Key Identifier:
                keyid:29:ED:F2:A4:F2:0A:C0:82:35:C4:01:80:DE:74:EB:C3:93:5C:FC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8cb1e6-e5f8-4fa0-97fe-924c29cf77c4/1/Ke3ypPIKwII1xAGA3nTrw5Nc_CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:25:71:76:54:da:f3:a0:ea:b1:ea:8e:5b:2f:e3:3d:b5:
         94:74:41:8b:08:63:8f:5f:7e:99:11:cf:c5:11:e7:5b:9e:7a:
         04:b3:53:b9:03:b1:46:21:3f:0b:3a:10:17:5e:5c:fb:bc:1c:
         e5:b8:e4:40:72:ef:c3:92:2a:6b:ec:85:f9:9c:b4:60:05:1b:
         6b:45:c8:c4:8d:a5:18:b0:88:25:84:d8:42:5d:a6:d2:41:b7:
         67:39:c1:c3:fb:2b:a3:2a:72:7e:c0:27:87:80:b5:72:27:fa:
         41:6f:6b:c6:87:97:c7:80:30:dd:12:aa:65:5b:1a:57:c4:d3:
         7f:37:ab:04:26:50:47:8b:3d:a8:8e:c2:67:9c:60:07:9b:a7:
         0b:22:55:56:bb:13:de:15:c0:06:1a:70:76:b6:32:95:f0:1c:
         84:26:b1:9e:3f:f4:d0:4b:79:68:b9:c1:18:9a:48:43:f8:74:
         8d:4a:07:61:8d:e4:b1:62:d1:dd:c9:48:49:79:ff:15:71:98:
         39:c6:e0:a6:48:67:03:44:64:a0:ab:b8:a9:90:04:f4:ce:a7:
         fa:6f:c9:3e:b4:05:55:26:a0:cb:db:2e:be:5a:10:ba:75:c1:
         8e:55:93:16:3f:c9:fe:98:be:44:38:c3:37:08:3e:6e:dc:34:
         34:ff:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:25:00 2025 by rpki-client